Advanced Network Security Review Questions
Course Introduction
Advanced Network Security delves into the design, implementation, and management of robust security measures for complex and large-scale computer networks. The course covers advanced concepts such as secure network architectures, intrusion detection and prevention systems, cryptographic protocols, virtual private networks (VPNs), and network access control. Students explore threat modeling, vulnerability assessment, and incident response within diverse network environments, including cloud and wireless networks. Emphasis is placed on hands-on labs and case studies that address current security challenges, emerging attack vectors, and the latest defensive technologies, preparing students for real-world roles in securing enterprise and service provider networks.
Recommended Textbook
Guide to Firewalls and VPNs 3rd Edition by Michael
E. Whitman
Available Study Resources on Quizplus 10 Chapters
496 Verified Questions
496 Flashcards
Source URL: https://quizplus.com/study-set/2181 Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43454
Sample Questions
Q1) ____ refers to multiple layers of security controls and safeguards is called.
A) A DMZ
B) A security perimeter
C) Defense in depth
D) Layered redundancy
Answer: C
Q2) What important organizational functions are performed by Information Security?
Answer: Information security performs these four important organizational functions:
1.Protects the organization's ability to function.
2.Enables the safe operation of applications implemented on the organization's IT systems.
3.Protects the data the organization collects and uses.
4.Safeguards the technology assetsin use at the organization.
Q3) Brute force attacks are often successful against systems that have adopted the usual security practices recommended by manufacturers.
A)True
B)False
Answer: False
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: Security Policies and Standards
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43455
Sample Questions
Q1) The ____ is an executive-level document, usually drafted by or at least in cooperation with the organization's chief information officer.
A) EISP
B) ISSP
C) managerial guidance SysSP
D) technical specification SysSP
Answer: A
Q2) The identification of critical business functions and the resources needed to support them is the cornerstone of the ____________________ plan.
Answer: business continuity (BC)
Q3) A(n) ____________________ is a set of specifications that identifies a piece of technology's authorized users and includes details on the rights and privileges those users have on that technology.
Answer: access control list (ACL)
Q4) A security ____________________ is an outline of the overall information security strategy and a roadmap for planned changes to the organization's information security environment.
Answer: framework
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Authenticating Users
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43456
Sample Questions
Q1) ____ authentication can enable employees who work remotely or who are traveling to access your internal servers.
A) Client
B) User
C) Session
D) Synchronous
Answer: B
Q2) Describe the differences between local and centralized authentication.
Answer: Local authentication: A server maintains a local file of usernames and passwords that it refers to for matching the username-password pair being supplied by a client.This is the most common form of authentication, the weakness of which is that passwords can be forgotten, stolen, or accidentally revealed.
Centralized authentication service: A centralized server handles identification, authentication, authorization, and accountability.Accountability means tracking who has done what and when.It is most commonly set up as a form of auditing and occurs when a system records the activities of each user and writes details about each activity to a log file.
Q3) ____________________ is the act of confirming the identity of a potential user.
Answer: Authentication
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Introduction to Firewalls
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43457
Sample Questions
Q1) The OSI networking model has ____________________ layers.
Q2) What are some of the advanced security functions provided by modern firewalls?
Q3) Boundary between two zones of trust.
A)PAT and NAT
B)bastion host
C)application proxy
D)extranet
E)header
F)perimeter
G)data
H)port
I)packet filtering
Q4) What is a MAC layer firewall?
Q5) A(n) ____________________ is an extended network that shares part of an organization's network with third parties.
Q6) ____________________ inspection blocks packets that are sent from an external computer that does not have a currently active connection to an internal computer.
Q7) What type of packet-filtering rules are typically defined?
Q8) Describe each generation of firewalls.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Packet Filtering
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43458
Sample Questions
Q1) A single bit of information in a TCP packet -the ____________________ flag -indicates if a packet is requesting a connection or a connection has already been established.
Q2) One type of network protocol attack takes advantage of the ICMP Echo Request message type by flooding a target computer with ICMP echo requests.
A)True
B)False
Q3) The ____ describes the length of the packet header in 32-bit words and is a 4 bit value.
A) Header checksum
B) type of service
C) total length
D) Internet header length
Q4) The ____ is a structure for organizing Internet names associated with IP addresses.
A) Domain Name System (DNS)
B) Transport Control Protocol (TCP)
C) Hypertext Transfer Protocol (HTTP)
D) Simple Mail Transfer Protocol (SMTP)
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Firewall Configuration and Administration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43459
Sample Questions
Q1) A ____ network monitors the operation of the primary firewall and synchronizes the state table connections so the two firewalls have the same information at any given time
A) caching
B) load balancing
C) hot standby
D) heartbeat
Q2) A(n) ____ approach allows all packets to pass through except those specified to be blocked.
A) Allow-All
B) Allow-Some
C) Port 80
D) Except Video
Q3) Many companies use the Internet to enable a(n) ____________________ that connects internal hosts with specific clients in other organizations.
Q4) If the primary goal of a firewall is to block unauthorized access, the emphasis needs to be on restricting rather than enabling connectivity
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Working With Proxy Servers and
Application-Level Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43460
Sample Questions
Q1) What is the most important benefit of a proxy server?
Q2) Configured so that they are totally invisible to end users.
A)dual-homed host
B)URL redirection
C)nontransparent proxies
D)log files
E)parameters
F)SOCKS
G)WinGate
H)proxy servers
I)transparent proxies
Q3) Describe the pros and cons of blocking URLs with a proxy server.
Q4) NetPatrol is ____.
A) an antivirus plug-in for WinGate
B) an intrusion detection and prevention system that can be integrated with WinGate
C) an IP-tunnel remote access application
D) a Web content classification plug-in for WinGate
Q5) What should proxy server administrators consider when configuring proxy servers for various services?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Implementing the Bastion Host
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43461
Sample Questions
Q1) On a bastion host that is intended to function as a Web server, for instance, you only need to enable traffic on TCP Port 80 and Port ____ for SSL traffic.
A) 79
B) 81
C) 443
D) 450
Q2) When selcting a bastion host operating system, the most important consideration is ____.
A) Choose UNIX/LINUX only
B) Choose Windows only
C) Choose the OS you're most familiar with
D) Choose the OS that is the most cost effective
Q3) Describe the RAM needs of a bastion host.
Q4) A ____ server is a machine that is placed in the DMZ to attract hackers and direct them away from the servers being protected.
A) flytrap
B) DNS server
C) honeypot
D) bastion host
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Encryption - The Foundation for the Virtual
Private
Network
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43462
Sample Questions
Q1) ____ attacks can be successful when the ciphertext consists of relatively few characters.
A) Correlation
B) Man-in-the-middle
C) Dictionary
D) Timing
Q2) Pure asymmetric key encryption is widely used except in the area of certificates.
A)True
B)False
Q3) Historically, attempts to gain unauthorized access to secure communications have used brute force attacks.
A)True
B)False
Q4) One of the most popular public key cryptosystems is a proprietary model named
A) Triple DES
B) Rijndael
C) Rivest-Shamir-Aldeman (RSA)
D) certificate authority (CA)
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Setting up a Virtual Private Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43463
Sample Questions
Q1) Communications path that makes use of Internet-based hosts and servers to conduct data from one network station to another.
A)encapsulation
B)tunnel
C)client-to-site
D)transport mode
E)gateway
F)private leased lines
G)tunnel mode
H)site-to-site
I)Point-to-Point Tunneling Protocol
Q2) A(n) ____ is essential for identifying who can use the VPN and for ensuring that all users know what constitutes proper use of the VPN.
A) VPN client
B) encrypted authentication
C) VPN policy
D) digital signature
Q3) What are VPN endpoints?
Q4) Describe software VPN systems.
To view all questions and flashcards with answers, click on the resource link above. Page 12