SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
Router Security
Start Test
Study First
Subject
:
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. DENY IP <Network ID> <Network WC Mask> ANY
HTTPS Strength
ACL to block spoofed IPs
Syntax for Reflexive ACLs
Higher IP Standard ACL Range
2. TCP and UDP Port 162
SNMP Trap
Denial of Service (DoS)
CDP Vulnerabilities
Sixth (Optional) Part of the IOS Version
3. Access-list <number> <deny | permit> source source-wildcard log
Standard ACL format
UDP Traceroute Port Range
SSH2
Generic Routing Encapsulation (GRE)
4. War dialing
Masquerading
Global Addresses
AUX Vulnerability
Named ACL
5. Tunnel Mode Protocol provides integrity - authentication - and non-repudiation and operates directly on top of IP
IP Source Routing Vulnerabilities
Authentication Header (AH)
UDP Traceroute Port Range
Train Identifier 'S'
6. Command used to disable the ICMP message Address Mask Reply
Network Time Protocol (NTP)
Authentication Header (AH)
Fourth Part of the IOS Version
no ip mask-reply
7. Router threat that refers to willful attempts to cause such disruptions by overwhelming the targeted system with improperly formatted traffic
Dynamic NAT
Generic Routing Encapsulation (GRE)
Transport Layer Security (TLS) and Secure Sockets Layer (SSL)
Denial of Service (DoS)
8. Attack that involves sending a large amount of ICMP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet
Unicast Reverse-Path Forwarding (uRPF)
Smurf Attack
ACL to block TCP SYN Attack
inger Server
9. Transport and Tunnel
Privilege Level 1
IP Unreachable Vulnerabilities
Two Modes of IPSec
Dynamic NAT
10. Datagram protocol used by some hosts to load their operating system over the network via a central repository of IOS software
TCP/UDP Echo Vulnerability
BOOTP
Cisco Express Forwarding (CEF)
Requirements for Reflexive TCP to be removed
11. Attack that involves sending a large amount of UDP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet
Two Types of Router Access
TCP Intercept Watch Mode
Fraggle Attack
Outside Local Address
12. Refers to addresses used on the organization's private network
inger Server
Global Addresses
BOOTP Vulnerabilities
Proxy ARP Vulnerabilities
13. None - uses attached application protocol's port
Eavesdropping and Information Theft
Distributed Denial of Service Attacks
TLS/SSL Identifier
IP Unreachable Vulnerabilities
14. 0x32 - or 50
Tunneling
IPSec AH Operating Layer
ESP Identifier
Proxy ARP Vulnerabilities
15. An extension of static mapping which allows for one global address to be mapped to multiple inside addresses; can be used for websites with multiple back end servers
uRPF Strength
Dynamic NAT
TCP Load Distribution
Train Idenifier 'E'
16. Major Version - Minor Version - Release - Interim Build - Release Train Identifier
General Format of Cisco IOS Version
SSH1
Named ACL
GRE Operating Layer
17. Release Number
Third Part of the IOS Version
CDP Vulnerabilities
no service tcp-small-servers
Unicast Reverse-Path Forwarding (uRPF)
18. Router to Router Denial of Service
Named ACL
TCP/UDP Echo Vulnerability
Extended ACL format
Distributed Denial of Service Attacks
19. Layer 5
Three Layers of Hierarchical Model
L2TP Operating Layer
Tunnel Mode
Eavesdropping and Information Theft
20. Commands to disable Finger Server
Denial of Service (DoS)
Proxy ARP Vulnerabilities
no ip finger - no service finger
TCP Intercept Watch Mode
21. Provides a checksum - ensuring traffic has not been modified along it's path
ACL to block telnet
Access Layer
no service tcp-small-servers
Integrity Validation
22. Lists interfaces - routing table - ARP table - physical and network addresses - time last booted
SNMP Vulnerabilities
ACL to block spoofed IPs
IP Source Routing Vulnerabilities
Cisco Discovery Protocol (CDP)
23. UDP Port 1701
L2TP Identifier
General Format of Cisco IOS Version
Distributed Denial of Service Attacks
Internet Protocol Security (IPSec)
24. Can obtain CIDR and router ID
Layer 2 Tunneling Protocol (L2TP)
Unicast Reverse-Path Forwarding (uRPF)
IP Directed Broadcast
IP Mask Reply Vulnerabilities
25. Startup-config can be deleted - copied - changed
Denial of Service (DoS)
Boot Network Vulnerabilities
Networks
Fraggle Attack
26. Cisco default tunneling protocol that uses multicast addressing without encryption and is designed to encapsulate a wide variety of network layer packets inside IP tunneling packets
Generic Routing Encapsulation (GRE)
Authenticating Peers
Proxy ARP
User Account Vulnerabilites
27. Uses only host keys to authenticate systems
IP Direct Broadcast Vulnerabilties
Privilege Level 1
L2TP Operating Layer
SSH2
28. Also known as Configuration Auto-Loading - allows routers to load their startup configuration from the network
Boot Network
Two Types of Router Access
Inside Local Address
NTP Vulnerabilities
29. Rewrites the and/or destination IP address of IP packets as they pass through a router or firewall from private to public addresses
Encrypting Traffic
Higher IP Extended ACL Range
TCP Intercept Watch Mode
Network Address Translation (NAT)
30. Command used to disable NTP on an interface
IP Spoofing
Transport Mode
login local
ntp disable
31. Protocol that allows data to be exchanged using a secure channel between two computers via encryption
BOOTP Vulnerabilities
Network Time Protocol (NTP)
Outside Local Address
Secure Shell (SSH)
32. Can stop spoofed IP addresses
ACL to block TCP SYN Attack
uRPF Strength
GRE Identifier
Privilege Level 15
33. What Transport Mode is used for
Host-to-Host Communications
ACL to block telnet
no ip http server
Network-to-Network Communications
34. Plaintext
Telnet - HTTP - SNMP Vulnerability
Lower IP Standard ACL Range
ACL to block a Land Attack
Three Physical Security Vulnerabilities
35. Router threat that involves the unauthorized viewing and collection of network traffic; usually accomplished with a packet sniffing program
Fraggle Attack
Transport Layer Security (TLS) and Secure Sockets Layer (SSL)
Eavesdropping and Information Theft
echo - chargen - discard - daytime
36. 1300-1999
Lower IP Extended ACL Range
ACL to block a Smurf Attack or Fraggle Attack
Telnet - HTTP - SNMP Vulnerability
Higher IP Standard ACL Range
37. Routing mode depended on by uRPF in order to function
Cisco Express Forwarding (CEF)
login local
Tunneling
IP Unreachable Vulnerabilities
38. Allows for a one-to-one translation of local to global addresses; used by web servers and mail servers so that users can connect to them via their global address
BOOTP Vulnerabilities
Secure Shell (SSH)
Fifth Part of the IOS Version
Static NAT
39. Private IP address after translation
Inside Global Address
Train Identifier 'B'
TCP Intercept
Established Line
40. 0x33 or 51
SSH1
IPSec AH Identifier
Minimum ACLs Required for Reflexive ACLs
Integrity Validation
41. Four TCP/UDP Small Server commands recommended to disable
Transport Mode
inger Server
Train Identifier 'S'
echo - chargen - discard - daytime
42. Router threat that occurs when an attacker manipulates IP packets to falsify IP addresses - causing network disruptions as the router attempts to process the packet
Masquerading
General Format of Cisco IOS Version
Layer 2 Tunneling Protocol (L2TP)
Second Part of IOS Version
43. Two - one Inbound or Evaluated and one Outbound or Reflected
Minimum ACLs Required for Reflexive ACLs
echo - chargen - discard - daytime
Land Attack
First Part of IOS Version
44. Two FIN bits or one RST bit
HTTPS Strength
IPSec AH Identifier
SSH Identifier
Requirements for Reflexive TCP to be removed
45. Software that passively monitors the connection requests flowing through the router; if a connection fails - the software sends a Reset to the server to clear up its state
SSH1
TCP Intercept Watch Mode
Network Address Translation (NAT)
uRPF Strength
46. Tunnel Mode Protocol provides confidentiality - along with authentication and integrity protection with encryption
Encapsulation Security Payload (ESP)
GRE Operating Layer
Network Address Translation (NAT)
Requirements for Reflexive TCP to be removed
47. Minor Version
Reflexive ACL
Local Addresses
Telnet - HTTP - SNMP Vulnerability
Second Part of IOS Version
48. Service Provider
49. Privilege level that has Global administration capabilities
IP Mask Reply Vulnerabilities
Syntax for Reflexive ACLs
Fraggle Attack
Privilege Level 15
50. Refers to addresses used on the organization's private network
Local Addresses
TCP Intercept
Two Modes of IPSec
Privilege Levels 2-13