Network Defense and Countermeasures
Question Bank
Course Introduction
Network Defense and Countermeasures explores the strategies, tools, and best practices essential for protecting digital assets against cyber threats. The course covers core concepts of network security, including firewalls, intrusion detection and prevention systems, virtual private networks (VPNs), and advanced malware defenses. Students will learn to evaluate vulnerabilities, implement security policies, and manage incident response, gaining hands-on experience in configuring security devices and analyzing attack mitigation techniques. Through lectures, labs, and practical exercises, participants develop the skills necessary to design and maintain secure network infrastructures in both enterprise and cloud environments.
Recommended Textbook
CompTIA Security+ Guide to Network Security Fundamentals 5th Edition by Mark Ciampa
Available Study Resources on Quizplus
15 Chapters
750 Verified Questions
750 Flashcards
Source URL: https://quizplus.com/study-set/3831 Page 2
Chapter 1: Introduction to Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76425
Sample Questions
Q1) The means by which an attack could occur
A)asset
B)cyberterrorism
C)hactivist
D)exploit kit
E)computer spy
F)risk
G)threat
H)threat agent
I)vulnerability
J)threat vector
Answer: J
Q2) Select below the information protection item that ensures that information is correct and that no unauthorized person or malicious software has altered that data.
A)Availability
B)Confidentiality
C)Integrity
D)Identity
Answer: C
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Malware and Social Engineering Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76418
Sample Questions
Q1) Software or a hardware device that captures and stores each keystroke that a user types on the computer's keyboard.
A)Adware
B)Backdoor
C)Botnet
D)Computer virus
E)Hoax
F)Keylogger
G)Logic bomb
H)Macro virus
I)Spear phishing
J)Vishing
Answer: F
Q2) In the ____________________ technique, the virus is divided into several parts and the parts are placed at random positions throughout the host program, overwriting the original contents of the host.
Answer: split infection
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Application and Networking-Based Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76417
Sample Questions
Q1) What is the goal of a directory traversal attack?
Answer: A directory traversal attack is used to gain access to a directory outside of the root directory structure on a web server, and is often done to execute a command injection or view confidential files.
Q2) Ethernet LAN networks utilize the physical _________________ address to send packets.
Answer: Media Access Control (MAC)
Q3) An attack that uses the Internet Control Message Protocol (ICMP) to flood a victim with packets.
A)Address Resolution Protocol (ARP)
B)ARP Poisoning
C)Buffer overflow attack
D)Command injection
E)Cross-site scripting (XSS)
F)DNS poisoning
G)Flash cookie
H)Ping flood
I) Session token
J) Smurf attack
Answer: H
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Host, Application, and Data Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76416
Sample Questions
Q1) An attack that uses the user's web browser settings to impersonate the user
A)Access list
B)Activity phase controls
C)Android
D)Barricade
E)Bayesian filtering
F)Cross-site request forgery (XSRF)
G)Fuzz testing
H)iOS
I)NoSQL
J)Supervisory control and data acquisition (SCADA)
Q2) Keyed entry locks are much more difficult to defeat than deadbolt locks.
A)True
B)False
Q3) What is the name for a cumulative package of all patches and hotfixes as well as additional features up to a given point?
A)feature pack
B)roll-up
C)service pack
D)patch
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Basic Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76415
Sample Questions
Q1) Which of the following is not one of the functions of a digital signature?
A)Verification of the sender
B)Prevention of the sender from disowning the message
C)Prove the integrity of the message
D)Protect the public key
Q2) Describe how Message Digest2 (MD2) works.
Q3) A hash algorithm is designed to create a hash that represents the contents of a set of data that can later be decrypted.
A)True
B)False
Q4) Cryptography that attempts to use the microscopic behaviors of objects to develop and share keys while also detecting eavesdropping is known as what type of cryptography?
A)Reactive cryptography
B)Symmetric cryptography
C)Analog cryptography
D)Quantum cryptography
Q5) List and describe the characteristics a hashing algorithm must have to be considered secure.
Q6) Discuss how HMAC works.
Page 7
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Advanced Cryptography
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76414
Sample Questions
Q1) Symmetric keys to encrypt and decrypt information exchanged during a handshake session between a web browser and web server
A)Bridge trust model
B)Certificate Authority (CA)
C)Certificate Repository
D)Digital certificate
E)Distributed trust model
F)key escrow
G)Public key Infrastructure (PKI)
H)Session keys
I)Third-party trust
J)Trust model
Q2) Select below the secure alternative to the telnet protocol:
A)HTTPS
B)TLS
C)IPsec
D)SSH
Q3) In the SSH suite, the ____________________ command allows a user to log on to a remote computer.
Q4) Discuss the three areas of protection that are provided by IPsec.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76413
Sample Questions
Q1) What layer of the OSI model is responsible for permitting two parties on a network to hold ongoing communications across the network?
A)Network
B)Data Link
C)Session
D)Presentation
Q2) Searching incoming web content to match keywords
A)Application-aware firewall
B)Application-aware IPS
C)Content inspection
D)Heuristic monitoring
E)Malware inspection
F)Network address translation (NAT)
G)Router
H)Switch
I)Virtual LAN (VLAN)
J)VPN Concentrator
Q3) List and describe three advantages to subnetting.
Q4) What is the difference between anomaly based monitoring and signature based monitoring?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Administering a Secure Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76412
Sample Questions
Q1) Which layer of the OSI model contains TCP protocol, which is used for establishing connections and reliable data transport between devices?
A)Application Layer
B)Presentation Layer
C)Network Layer
D)Transport Layer
Q2) Log that documents any unsuccessful events and the most significant successful events.
A)Audit log
B)Event log
C)File Transfer Protocol (FTP)
D)Flood guard
E)FTP Secure (FTPS)
F)Host elasticity
G)Loop protection
H)Snapshot
I)Telnet
J)Virtualization
Q3) Describe one way to use FTP on a local host computer.
Q4) What are the four fields contained within an ICMP message?
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76411
Sample Questions
Q1) Intentionally flooding the radio frequency (RF) spectrum with extraneous RF signal "noise" that creates interference and prevents communications from occurring.
A)Bluejacking
B)Bluesnarfing
C)Initialization vector (IV)
D)Near field communication (NFC)
E)Preshared key (PSK)
F)RF Jamming
G)War driving
H)Wi-Fi Protected Setup (WPS)
I)Wi-Fi Protected Access 2 (WPA 2)
J)Wired Equivalent Privacy (WEP)
Q2) What is the maximum number of characters that can exist within an SSID name?
A)10
B)12
C)26
D)32
Q3) When a wireless device looks for beacon frames it is known as
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Mobile Device Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76424
Sample Questions
Q1) Maintaining an accurate record of company-owned mobile devices
A)Asset tracking
B)Geo-fencing
C)Geo-tagging
D)Location services
E)Lock screen
F)Mobile application management (MAM)
G)Off-boarding
H)On-boarding
I)Remote wiping
J) Secure digital (SD)
Q2) Describe some of the risks associated with BYOD.
Q3) What PC Card type is typically used for memory?
A)Type I
B)Type II
C)Type III
D)Type IV
Q4) The Apple _____________ operating system, developed by Apple for their mobile devices, is a closed and proprietary architecture.
Q5) What is the difference between a feature phone and a smartphone?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Access Control Fundamentals
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76423
Sample Questions
Q1) A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.
Q2) The action that is taken by a subject over an object is called a(n):
A)authorization
B)access
C)control
D)operation
Q3) What authentication service commonly used on UNIX devices involves communicating user authentication information to a centralized server?
A)TACACS
B)RADIUS
C)Kerberos
D)FTP
Q4) Authorization and access are viewed as synonymous and in access control, they are the same step.
A)True
B)False
Q5) The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Authentication and Account Management
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76422
Sample Questions
Q1) A hash used by modern Microsoft Windows operating systems for creating password digests.
A)Authentication factors
B)Bcrypt
C)Brute force attack
D)Dictionary attack
E)Hybrid attack
F)Key stretching
G)NTLM (New Technology LAN Manager) hash
H)Salt
I)Single sign-on
J)Token
Q2) Passwords that are transmitted can be captured by what type of software?
A)application analyzer
B)system analyzer
C)function analyzer
D)protocol analyzer
Q3) Discuss the types of shortcuts that users take to help them recall their passwords.
Q4) Why do passwords place a heavy load on human memory?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Business Continuity
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76421
Sample Questions
Q1) Discuss the purpose and importance of the chain of custody.
Q2) ____________________ is data about data.
Q3) What are the objectives of disaster exercises?
Q4) According to the Federal Bureau of Investigation (FBI), what percentage of crime committed today leaves behind digital evidence that can be retrieved via computer forensics?
A)65
B)75
C)85
D)95
Q5) A snapshot of the current state of a computer that contains all current settings and data is known as what option below:
A)system standard
B)system view
C)system image
D)system baseline
Q6) Describe the purpose of a disaster recovery plan.
Q7) What is required upon completion of an evidence examination?
Page 15
Q8) RAID 0 technology is based on ____________________.
Q9) What are the steps in damage control?
To view all questions and flashcards with answers, click on the resource link above.
Page 16
Chapter 14: Risk Mitigation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76420
Sample Questions
Q1) A network that does not have servers, so each device simultaneously functions as both a client and a server to all other devices connected to the network.
A)Acceptable use policy (AUP)
B)Change management
C)False negative
D)False positive
E)Operational risk control type
F)Privacy policy
G)Technical risk control type
H)Peer-to peer network
I)Single Loss Expectancy (SLE)
J)Incident management
Q2) What kind of learners learn from taking notes, being at the front of the class, and watching presentations?
A)Kinesthetic
B)Auditory
C)Spatial
D)Visual
Q3) What are the typical classification designations of government documents?
To view all questions and flashcards with answers, click on the resource link above.
Page 17
Chapter 15: Vulnerability Assessment and Third Party Integration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/76419
Sample Questions
Q1) What is another term used for a security weakness?
A)threat
B)vulnerability
C)risk
D)opportunity
Q2) Which tester has an in-depth knowledge of the network and systems being tested, including network diagrams, IP addresses, and even the source code of custom applications?
A)white box
B)black box
C)replay
D)system
Q3) What security goal do the following common controls address: hashing, digital signatures, certificates, nonrepudiation tools?
A)Confidentiality
B)Integrity
C)Availability
D)Safety
Q4) List four things that a vulnerability scanner can do.
Q5) List and describe the three categories that TCP/IP divides port numbers into.
To view all questions and flashcards with answers, click on the resource link above. Page 18