Test your basic knowledge |

Router Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Minor Version






2. Public IP address before translation






3. TCP Port 22






4. When a router acts as an intermediary for ARP queries on selected interfaces and enabling transparent access between multiple LAN segments






5. Proprietary - used by Cisco routers and switches use to identify each other on LAN and WAN segments






6. Router to Router Denial of Service






7. Command used to disable NTP on an interface






8. Protocol used to keep their time-of-day clocks accurate and in sync






9. Command used to disable the ICMP message Host Unreachable






10. Authentication Header (AH) and Encapsulated Security Payload (ESP)






11. What Local and Global refer to in NAT






12. DNS Poisoning






13. 0x2F - or 47






14. Access-list <number> <deny | permit> source source-wildcard log






15. Release Train Identifier






16. TCP and UDP Port 162






17. The host can specify which route to take - which bypasses security






18. Also known as Configuration Auto-Loading - allows routers to load their startup configuration from the network






19. Time can be changed - Routing Table can be killed






20. Command to disable CDP on a router






21. Provides nonrepudiation - ensuring that traffic is from a trusted party






22. Plaintext






23. What Tunnel Mode is used for






24. Attack that involves transmitting a volume of connections that cannot be completed at the destination - causing the queue to fill up and denying service to legitimate user






25. Broadcast

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


26. Attack that involves sending a large amount of ICMP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet






27. Layer 7






28. What Inside and Outside refer to in NAT






29. Provides confidentiality - so it cannot be read by unauthorized parties






30. DENY TCP ANY HOST <IP Address> EQ 23






31. War dialing






32. Geolocational positioning






33. Datagram protocol used by some hosts to load their operating system over the network via a central repository of IOS software






34. Allows the source IP host to specify a route through the IP network






35. Interim Build Number






36. Transport and Tunnel






37. Uses server and host keys to authenticate systems






38. TCP Port 80






39. ACK and RST






40. Router threat where access by an entity or individual other than authorized users






41. Device - Hostname - IOS - IP Address - Ports - Model






42. Software that passively monitors the connection requests flowing through the router; if a connection fails - the software sends a Reset to the server to clear up its state






43. DENY IP 127.0.0.0 0.255.255.255 ANY






44. PERMIT TCP ANY ANY ESTABLISHED






45. Top of the hierarchy - responsible for transporting large amounts of traffic both reliably and quickly and switching traffic as fast as possible throughout the internet






46. Must be made at global config mode - created from CON/VTY session or text file - read top to bottom - applied at the interface and only one ACL per direction - per protocol - per interface






47. Refers to addresses used on the organization's private network






48. None - uses attach application protocol's layer






49. The communication layer between the two other layers and provides network security - including ACLs - firewalls - any general public access servers and address translation; also known as the isolation LAN or DMZ






50. UDP Port 1701