Test your basic knowledge |

Router Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Users - Host PC's - IP Addresses






2. Lists interfaces - routing table - ARP table - physical and network addresses - time last booted






3. Access-list <number> <deny | permit> source source-wildcard log






4. Router threat that occurs when an attacker manipulates IP packets to falsify IP addresses - causing network disruptions as the router attempts to process the packet






5. Rewrites the and/or destination IP address of IP packets as they pass through a router or firewall from private to public addresses






6. Attack that involves sending a large amount of ICMP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet






7. Layer 3






8. Transport and Tunnel






9. Can copy - poison - corrupt - or delete the IOS






10. DENY TCP ANY HOST <IP Address> EQ 23






11. The communication layer between the two other layers and provides network security - including ACLs - firewalls - any general public access servers and address translation; also known as the isolation LAN or DMZ






12. This layer controls user and workgroup acess to the Internetwork resources at the local level using segmentation of networks to create separate collision domains - AKA an organization's trusted network






13. Allows the source IP host to specify a route through the IP network






14. 33400-34400






15. Ip access-list <standard | extended> name - permit TCP any any established






16. Router threat where access by an entity or individual other than authorized users






17. Local and Remote






18. Data link layer protocol used for tunneling network traffic between two peers over an existing network - often used with IPsec to secure packets






19. Provides confidentiality - so it cannot be read by unauthorized parties






20. Datagram protocol used by some hosts to load their operating system over the network via a central repository of IOS software






21. Also known as Configuration Auto-Loading - allows routers to load their startup configuration from the network






22. When one network protocol called the payload protocol is encapsulated within a different delivery network - or provide a secure path through an untrusted network






23. Protects against repeating of secure sessions






24. 0x32 - or 50






25. Geolocational positioning






26. Attack that involves a multitude of compromised system attack a single target - denying service to it by exploiting one 'master' system that communicates with other 'zombie' systems






27. The host can specify which route to take - which bypasses security






28. Allows packets to be filtered based on upper-layer session information - only uses extended temporary ACL's and must be named - applied on border routers






29. The environment - catastrophic events an unauthorized access






30. Provides a checksum - ensuring traffic has not been modified along it's path






31. Mode where the entire packet is encrypted and/or authenticated - requiring a new IP packet to be encapsulated






32. Uses only host keys to authenticate systems






33. What Transport Mode is used for






34. Must be made at global config mode - created from CON/VTY session or text file - read top to bottom - applied at the interface and only one ACL per direction - per protocol - per interface






35. Plaintext






36. Two FIN bits or one RST bit






37. Forces the user to enter both a valid username and password






38. TCP Port 22






39. DENY IP <Network ID> <Network WC Mask> ANY






40. TCP only - used to filter inbound traffic while allowing return TCP sessions - can be spoofed by attackers and cannot be used with Active FTP






41. Local IP address before translation






42. None - uses attach application protocol's layer






43. These ACLs filter by network or host IP address and only filter on source






44. Command used to disable NTP on an interface






45. Technology


46. Commands to disable Finger Server






47. Command to disable CDP on a router






48. An extension of static mapping which allows for one global address to be mapped to multiple inside addresses; can be used for websites with multiple back end servers






49. Command used to disable HTTP Server






50. Translates multiple local addresses to a pool of global addresses by having the firewall select the first available global address; retains the global address for the duration of the connection