Test your basic knowledge |

Router Security

Subject : it-skills
Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Must be made at global config mode - created from CON/VTY session or text file - read top to bottom - applied at the interface and only one ACL per direction - per protocol - per interface






2. Can obtain CIDR and router ID






3. Four TCP/UDP Small Server commands recommended to disable






4. 0x2F - or 47






5. Technology


6. Startup-config can be deleted - copied - changed






7. Ip access-list <standard | extended> name - permit TCP any any established






8. War dialing






9. None - uses attach application protocol's layer






10. DENY IP HOST <Inbound IP Address> HOST <Inbound IP Address>






11. Software that passively monitors the connection requests flowing through the router; if a connection fails - the software sends a Reset to the server to clear up its state






12. Provides a checksum - ensuring traffic has not been modified along it's path






13. Attack that involves transmitting a volume of connections that cannot be completed at the destination - causing the queue to fill up and denying service to legitimate user






14. A secure alternative to telnet for remote administration that supported in Enterprise versions of Cisco IOS






15. Interim Build Number






16. Command to disable CDP on a router






17. Router threat that occurs when an attacker manipulates IP packets to falsify IP addresses - causing network disruptions as the router attempts to process the packet






18. A suite of protocols for securing Internet Protocol communications by authenticating and/or encrypting each IP packet in a data stream






19. TCP and UDP Port 161






20. Helps to mitigate problems that are caused by the introduction of malformed or spoofed IP source addresses into a network by discarding packets lacking a verifiable IP source address






21. Privilege levels that can have passwords assigned to them






22. Private IP address after translation






23. Attack that involves sending a large amount of UDP Echo packets to a subnet's broadcast address with a spoofed source IP address from that subnet






24. 2000-2699






25. Access-list <number <deny | permit> source source-wildcard source-qualifier destination dest-wildcard dest-qualifier <log | log-input>






26. Protects against repeating of secure sessions






27. UDP Port 514






28. When a router acts as an intermediary for ARP queries on selected interfaces and enabling transparent access between multiple LAN segments






29. Allows packets to be filtered based on upper-layer session information - only uses extended temporary ACL's and must be named - applied on border routers






30. Cisco default tunneling protocol that uses multicast addressing without encryption and is designed to encapsulate a wide variety of network layer packets inside IP tunneling packets






31. The communication layer between the two other layers and provides network security - including ACLs - firewalls - any general public access servers and address translation; also known as the isolation LAN or DMZ






32. DNS Poisoning






33. Geolocational positioning






34. ACK and RST






35. Uses server and host keys to authenticate systems






36. Local IP address before translation






37. Device - Hostname - IOS - IP Address - Ports - Model






38. This server is used for querying a host about its logged in users






39. This layer controls user and workgroup acess to the Internetwork resources at the local level using segmentation of networks to create separate collision domains - AKA an organization's trusted network






40. Access - Distribution - Core






41. Attack that involves sending a packet to the router with the same IP address in the source and destination address fields - as well as the same port number in the source and destination port field - causing a denial of service






42. Protocol that allows data to be exchanged using a secure channel between two computers via encryption






43. Minor Version






44. An extension of static mapping which allows for one global address to be mapped to multiple inside addresses; can be used for websites with multiple back end servers






45. Allows for a one-to-one translation of local to global addresses; used by web servers and mail servers so that users can connect to them via their global address






46. What Local and Global refer to in NAT






47. Refers to addresses used on the organization's private network






48. Plaintext






49. Provides nonrepudiation - ensuring that traffic is from a trusted party






50. Router threat that includes manipulating router updates to cause traffic to flow to unauthorized destinations