Network Security Practice Exam
Course
Introduction
Network Security explores the principles and practices used to protect computer networks from unauthorized access, misuse, and cyber threats. The course covers fundamental concepts such as cryptography, authentication, network protocols, firewalls, intrusion detection systems, and secure communication techniques. Students will learn about common vulnerabilities, threat models, risk assessment, and the implementation of security policies. Hands-on labs and real-world case studies provide experience in configuring security mechanisms and responding to network incidents, preparing students to address current security challenges in modern interconnected environments.
Recommended Textbook
Hands On Ethical Hacking and Network Defense 2nd Edition by Michael T. Simpson
Available Study Resources on Quizplus
13 Chapters
673 Verified Questions
673 Flashcards
Source URL: https://quizplus.com/study-set/2085
Page 2
Chapter 1: Ethical Hacking Overview
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41510
Sample Questions
Q1) Derogatory term referring to people who copy code from knowledgeable programmers instead of creating the code themselves.
Answer: D
Q2) The ____ certification uses the Open Source Security Testing Methodology Manual (OSSTMM), written by Peter Herzog, as its standardized methodology.
A)CEH
B)OPST
C)CISSP
D)GIAC
Answer: B
Q3) What are four different skills a security tester needs?
Answer: -Knowledge of network and computer technology
-Ability to communicate with management and IT personnel
-An understanding of the laws that apply to your location
-Ability to apply the necessary tools to perform your tasks
Q4) accesses a computer system or network without the authorization of the system's owner
Answer: G
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Tcpip Concepts Review
Available Study Resources on Quizplus for this Chatper
57 Verified Questions
57 Flashcards
Source URL: https://quizplus.com/quiz/41511
Sample Questions
Q1) TCP is a(n) ____________________ protocol, which means the sender doesn't send any data to the destination node until the destination node acknowledges that it's listening to the sender.
Answer: connection-oriented
Q2) In the TCP/IP stack, the ____ layer is where applications and protocols, such as HTTP and Telnet, operate.
A)Internet
B)Network
C)Transport
D)Application
Answer: D
Q3) A hex number is written with two characters, each representing a byte.
A)True
B)False
Answer: False
Q4) To retrieve e-mail from a mail server, you most likely access port 119.
A)True
B)False Answer: False
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Network and Computer Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41512
Sample Questions
Q1) What types of ports do successful Trojan programs commonly use?
Answer: A good software or hardware firewall would most likely identify traffic that's using unfamiliar ports,but Trojan programs that use common ports,such as TCP port 80 (HTTP)or UDP port 53 (DNS),are more difficult to detect. The programmer who wrote Backdoor.Slackbot.B controlled a computer by using Internet Relay Chat (IRC),which is on port 6667.
Q2) Software keyloggers behave like ____ and are loaded on a computer.
A)Trojan programs
B)viruses
C)shells
D)firewalls
Answer: A
Q3) ____ are devices or computer programs that can be used to capture keystrokes on a computer.
A)Viruses
B)Keyloggers
C)Macro viruses
D)Firewalls
Answer: B
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Footprinting and Social Engineering
Available Study Resources on Quizplus for this Chatper
51 Verified Questions
51 Flashcards
Source URL: https://quizplus.com/quiz/41513
Sample Questions
Q1) ____ is a tool that is used to gather competitive intelligence from Web sites.
A)Whois
B)Netcat
C)Metis
D)Dig
Q2) The HTTP ____ method retrieves data by URI.
A)GET
B)PUT
C)POST
D)HEAD
Q3) To see additional parameters that can be used with the ____ command, you can type nc -h at the command prompt.
A)Nslookup
B)Namedroppers
C)Netcat
D)Whois
Q4) Why is ATM shoulder surfing much easier than computer shoulder surfing?
Q5) List at least five tools available for footprinting.
Q6) How can a computer criminal use HTTP methods before running an exploit on a server?
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Port Scanning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41514
Sample Questions
Q1) With the ____ tool, you can ping multiple IP addresses simultaneously.
A)Fping
B)Nmap
C)Nessus
D)Unicornscan
Q2) Nmap has a GUI version called ____________________ that makes it easier to work with some of the more complex options.
Q3) A closed port responds to a SYN scan with an RST packet, so if no packet is received, the best guess is that the port is open.
A)True
B)False
Q4) If subnetting is used in an organization, you can include the broadcast address by mistake when performing ping sweeps. How might this happen?
Q5) Closed ports respond to a(n) ____ with an RST packet.
A)XMAS scan
B)SYN scan
C)Connect scan
D)ACK scan
Q6) Which ports should security professionals scan when doing a test? Why?
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Enumeration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41515
Sample Questions
Q1) The enumeration process for Windows Me is the same as for Windows 98.
A)True
B)False
Q2) ____ is a system process that runs on Windows OSs to facilitate the exchange of network data.
A)NetBIOS
B)Active Directory
C)NetDDE
D)IIS
Q3) replaced the Registry with Active Directory for object storage
A)Windows 98
B)Windows 95
C)Windows Server 2003
D)Fedora Linux
E)Solaris
F)Windows XP Professional
G)Novell Open Enterprise Server
H)Windows 2000 Server/Professional
I)Windows NT 3.51 Server/Workstation
Q4) What can be accomplished by typing "finger root" in *nix systems?
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Programming for Security Professionals
Available Study Resources on Quizplus for this Chatper
53 Verified Questions
53 Flashcards
Source URL: https://quizplus.com/quiz/41516
Sample Questions
Q1) You must always add "//" at the end of comment text in C.
A)True
B)False
Q2) You can use /* and */ instead of ____ symbol(s) for one-line comments in C.
A)#
B)#!
C)**
D)//
Q3) In Perl, the keyword "____" is used in front of function names.
A)func
B)declare
C)sub
D)proc
Q4) The HTML ____________________ tag formats text as a level 1 heading.
Q5) Many scripts and programs for security professionals are written in ________________________________________, a powerful scripting language.
Q6) ____________________ language uses a combination of hexadecimal numbers and expressions, such as mov, add, and sub, making it easier for humans to write programs than in binary or machine language.
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Desktop and Server Os Vulnerabilities
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41517
Sample Questions
Q1) RPC stands for ________________________.
Q2) ____ is an interprocess communication mechanism that allows a program running on one host to run code on a remote host.
A)RPC
B)NetBIOS
C)Winsock
D)NetBEUI
Q3) Complete instructions for MBSA are available from the MBSA Help interface or the ____ site.
A)Microsoft Security Tools Web
B)Microsoft Knowledge Base
C)Windows Help
D)Windows On-line Help
Q4) To determine whether a system is vulnerable to an RPC-related issue, the best tool is ____.
A)Nessus
B)Winfingerprint
C)MBSA
D)Unicornscan
Q5) What can a security tester using enumeration tools do?
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Embedded Operating Systems: The Hidden Threat
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41518
Sample Questions
Q1) List at least four best practices for protecting embedded OSs.
Q2) Embedded systems include their own operating system, called a(n) "_________________________".
Q3) an operating system that runs in an embedded system
A)Windows Embedded Standard
B)Green Hill Software
C)RTLinux
D)VxWorks
E)RTEMS
F)embedded operating system
G)Quebec
H)QNX
I)SCADA
Q4) Which of the following could be considered the biggest security threat for an organization?
A)spyware
B)employees
C)kernels
D)routers
Q5) What principle can be used to help reduce insider threats to an organization?
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Hacking Web Servers
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41519
Sample Questions
Q1) ____, developed by Microsoft, is a set of interfaces that enable applications to access data stored in a database management system.
A)OLE DB
B)ODBC
C)ADO
D)JDBC
Q2) ____ represent(s) a comment in SQL.
A)Double slashes (//)
B)An exclamation point (!)
C)An asterisk (*)
D)Double hyphens (--)
Q3) Web applications written in CFML can also contain other client-side technologies, such as HTML and JavaScript.
A)True
B)False
Q4) CFML stands for ______________________________.
Q5) foundation of most Web applications
Q6) As a security professional, what should you do after identifying that a Web server you are testing is using PHP?
Page 12
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Hacking Wireless Networks
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41520
Sample Questions
Q1) What is WEP? Is it a good way to secure wireless networks?
Q2) European WLAN standard
A)802.16
B)spread spectrum
C)802.11b
D)narrowband
E)802.20
F)infrared (IR)
G)802.1X
H)Bluetooth
I)HiperLAN2
Q3) What is wardriving?
Q4) ____ is an enhancement to PPP.
A)EAP
B)WEP
C)WPA
D)802.1X
Q5) WEP stands for _________________________.
Q6) What is the role of a WNIC?
Q7) What is frequency-hopping spread spectrum (FHSS)?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Cryptography
Available Study Resources on Quizplus for this Chatper
58 Verified Questions
58 Flashcards
Source URL: https://quizplus.com/quiz/41521
Sample Questions
Q1) ____ is a hashing algorithm developed by Rivest in 1991.
A)RSA
B)MD5
C)SHA-1
D)HAVAL
Q2) digital document that verifies that the two parties exchanging data over the Internet are really who they claim to be
A)asymmetric encryption
B)collision free
C)symmetric encryption
D)certificate
E)hashing
F)collision
G)stream cipher
H)message digest
I)block cipher
Q3) What is cryptanalysis?
Q4) What is a certificate?
Q5) How does public key infrastructure work?
Q6) What is the difference between a public key and a private key?
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Network Protection Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41522
Sample Questions
Q1) ____________________ honeypots are created by using a programming language rather than configuring a physical device.
Q2) ____ monitor network devices so that security administrators can identify attacks in progress and stop them.
A)Firewalls
B)DMZs
C)Honeypots
D)IDSs
Q3) The ____ of a Cisco router holds the router's configuration file, but the information is not lost if the router is turned off.
A)RAM
B)NVRAM
C)flash memory
D)ROM
Q4) What is the purpose of the read-only memory in a Cisco router?
Q5) What are the interfaces in a Cisco router?
Q6) Some organizations need a permanent team whose members are responsible solely for security-response functions, known as a(n)
To view all questions and flashcards with answers, click on the resource link above. Page 15