Test your basic knowledge |

Router Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. DENY IP 224.0.0.0 15.255.255.255 ANY






2. Public IP address after translation






3. DENY TCP ANY HOST <IP Address> EQ 23






4. Protocol that allows data to be exchanged using a secure channel between two computers via encryption






5. Router threat where access by an entity or individual other than authorized users






6. Command to disable UDP small server on a router






7. Form of dynamic NAT that maps multiple unregistered IP addresses to a single registered IP address by using different ports; limited to ~64 -000 hosts






8. Four TCP/UDP Small Server commands recommended to disable






9. Public IP address before translation






10. Command to disable TCP small server on a router






11. Datagram protocol used by some hosts to load their operating system over the network via a central repository of IOS software






12. None - uses attached application protocol's port






13. What Tunnel Mode is used for






14. Startup-config can be deleted - copied - changed






15. Also known as Configuration Auto-Loading - allows routers to load their startup configuration from the network






16. Tunnel Mode Protocol provides confidentiality - along with authentication and integrity protection with encryption






17. Router threat that occurs when an attacker manipulates IP packets to falsify IP addresses - causing network disruptions as the router attempts to process the packet






18. An extension of static mapping which allows for one global address to be mapped to multiple inside addresses; can be used for websites with multiple back end servers






19. Plaintext






20. These ACLs filter by network or host IP address and only filter on source






21. Protects against repeating of secure sessions






22. Cisco default tunneling protocol that uses multicast addressing without encryption and is designed to encapsulate a wide variety of network layer packets inside IP tunneling packets






23. Smurf attacks - can enumerate the network






24. Attack that involves transmitting a volume of connections that cannot be completed at the destination - causing the queue to fill up and denying service to legitimate user






25. Interim Build Number






26. The host can specify which route to take - which bypasses security






27. Tunnel Mode Protocol provides integrity - authentication - and non-repudiation and operates directly on top of IP






28. UDP Port 514






29. Commands to disable Finger Server






30. Router threat that involves a hacker inserting a spoofed TCP/IP packet into a stream - thereby enabling commands to be executed on the remote host






31. Transport and Tunnel






32. Forces the user to enter both a valid username and password






33. Device - Hostname - IOS - IP Address - Ports - Model






34. Access - Distribution - Core






35. Allows the source IP host to specify a route through the IP network






36. When one network protocol called the payload protocol is encapsulated within a different delivery network - or provide a secure path through an untrusted network






37. Release Train Identifier






38. Router threat that involves the unauthorized viewing and collection of network traffic; usually accomplished with a packet sniffing program






39. Rewrites the and/or destination IP address of IP packets as they pass through a router or firewall from private to public addresses






40. Cryptographic protocols that provide secure communications on the Internet for such thing as WWW - email - faxing - IM - and other data transfers






41. Attack that involves sending a large amount of ICMP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet






42. Accounts without passwords - Type 7 encryption - account privilege higher than 1 - able to be fingered






43. UDP Port 1701






44. Attack that involves sending a large amount of UDP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet






45. Command used to disable NTP on an interface






46. 2000-2699






47. Refers to addresses used on the organization's private network






48. 2000-2699






49. Access-list <number <deny | permit> source source-wildcard source-qualifier destination dest-wildcard dest-qualifier <log | log-input>






50. Provides a checksum - ensuring traffic has not been modified along it's path