Secure Network Design
Final Test Solutions
Course Introduction
Secure Network Design provides an in-depth exploration of the principles, methodologies, and best practices for building robust and resilient network infrastructures that safeguard organizational information assets. The course covers threat modeling, risk assessment, secure architecture frameworks, segmentation, and controls implementation to mitigate potential vulnerabilities. Students examine layered security approaches using firewalls, intrusion detection/prevention systems, VPNs, and encryption protocols, while considering compliance requirements and real-world case studies. Emphasis is placed on designing networks that not only prevent and detect attacks but also support rapid recovery and business continuity.
Recommended Textbook Guide to Firewalls and VPNs 3rd Edition by Michael
E. Whitman
Available Study Resources on Quizplus
10 Chapters
496 Verified Questions
496 Flashcards
Source URL: https://quizplus.com/study-set/2181 Page 2
Chapter 1: Introduction to Information Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43454
Sample Questions
Q1) Acceptance is a viable solution only if the organization has evaluated the risk and determined that the implementation of additional controls or strategies is not justified, due to cost or other organizational issues.
A)True
B)False
Answer: True
Q2) A ____ is an e-mail attack in which the attacker routes large quantities of e-mail to the target system hoping to overwhelm the target with so much irrelevant email that legitimate email cannot be used.
A) spam attack
B) mail bomb
C) sniffer
D) cracker
Answer: B
Q3) The ____________________ is primarily responsible for advising the chief executive officer, president, or company owner on the strategic planning that affects the management of information in the organization.
Answer: chief information officer (CIO)
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Security Policies and Standards
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43455
Sample Questions
Q1) A security ____________________ is an outline of the overall information security strategy and a roadmap for planned changes to the organization's information security environment.
Answer: framework
Q2) A(n) ____________________ is a set of specifications that identifies a piece of technology's authorized users and includes details on the rights and privileges those users have on that technology.
Answer: access control list (ACL)
Q3) The identification of critical business functions and the resources needed to support them is the cornerstone of the ____________________ plan.
Answer: business continuity (BC)
Q4) The ____ is an executive-level document, usually drafted by or at least in cooperation with the organization's chief information officer.
A) EISP
B) ISSP
C) managerial guidance SysSP
D) technical specification SysSP
Answer: A
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Authenticating Users
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43456
Sample Questions
Q1) Documenting the activities of the authorized individual and systems.
A)authentication
B)least privilege
C)discretionary access controls
D)authorization
E)separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability
Answer: I
Q2) ____________________ is the act of confirming the identity of a potential user.
Answer: Authentication
Q3) For most information, the U.S.military uses a classification scheme with ____ as the uppermost tier.
A) confidential
B) secret
C) top secret
D) galactic top secret
Answer: C
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Introduction to Firewalls
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43457
Sample Questions
Q1) Firewalls provide ____ services by examining packet headers and allowing traffic that conforms to estalished rules to continue.
A) packet filtering
B) NAT
C) application proxy
D) TCP/IP
Q2) Ports numbers range from 0 to ____.
A) 1024
B) 3999
C) 65,535
D) 786,568
Q3) The OSI networking model has ____________________ layers.
Q4) What is a MAC layer firewall?
Q5) Network perimeters may be blurred by ____.
A) VPNs
B) intranets
C) Web sites
D) desktop computers
Q6) What type of packet-filtering rules are typically defined?
To view all questions and flashcards with answers, click on the resource link above. Page 6
Q7) What are some of the advanced security functions provided by modern firewalls?
Chapter 5: Packet Filtering
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43458
Sample Questions
Q1) Packets requesting a connection have the ACK bit set to 0; those that are part of an ongoing connection have the ACK bit set to ____.
A) -1
B) 0
C) 1
D) 99
Q2) Some systems, like Windows and Linux, have built-in utilities that can filter packets on the TCP/IP stack of the server software.
A)True
B)False
Q3) Telnet is most often assigned to use port ____.
A) 20
B) 21
C) 23
D) 80
Q4) Packet filters examine packet headers and packet data when applying allow and deny rules.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Firewall Configuration and Administration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43459
Sample Questions
Q1) A(n) ____ approach allows all packets to pass through except those specified to be blocked.
A) Allow-All
B) Allow-Some
C) Port 80
D) Except Video
Q2) Many companies use the Internet to enable a(n) ____________________ that connects internal hosts with specific clients in other organizations.
Q3) The firewall administrator should test the firewall and evaluate its performance to ensure that the network traffic is moving efficiently.
A)True
B)False
Q4) ____ firewalls are installed at all endpoints of the network, including the remote computers that connect to the network through VPNs.
A) Distributed
B) Remote
C) Integrated
D) Routing
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Working With Proxy Servers and
Application-Level Firewalls
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43460
Sample Questions
Q1) What is the most important benefit of a proxy server?
Q2) A ____ firewall combines several different security technologies, such as packet filtering, application-level gateways, and VPNs.
A) dual-homed
B) packet filtering
C) hybrid
D) multi-purpose
Q3) What is SOCKS?
Q4) Scan specific parts of the data portion of an HTTP packet and redirect it to a specific location.
A)dual-homed host
B)URL redirection
C)nontransparent proxies
D)log files
E)parameters
F)SOCKS
G)WinGate
H)proxy servers
I)transparent proxies
9
Q5) It is good practice to dedicate a proxy server to one
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Implementing the Bastion Host
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/43461
Sample Questions
Q1) The ___ lists newly discovered security advisories right on its home page.
A) Microsoft Institute
B) FreeBSD Project
C) SANS Institute
D) U.S. Department of Energy's Cyber Incident Response Capability
Q2) ____________________ occurs when a company physically hosts its server(s) in a data center that is managed by a third party.
Q3) On a UNIX host, you should run a ____ check, a set of software programs that makes sure any software you're running on your system is a trusted program.
A) Security Assessment Tool
B) Baseline Security Analyzer
C) Trusted Computing Base
D) security_patch_check
Q4) The concept of ____ requires hardening the system at multiple levels to minimize the possibility of intrusion.
A) Demilitarized Zones
B) healthy paranoia
C) virtual private networks
D) defense in depth
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Encryption - The Foundation for the Virtual
Private
Network
Available Study Resources on Quizplus for this Chatper
48 Verified Questions
48 Flashcards
Source URL: https://quizplus.com/quiz/43462
Sample Questions
Q1) Historically, attempts to gain unauthorized access to secure communications have used brute force attacks.
A)True
B)False
Q2) ____ is the process of deciphering the original message from an encrypted message without knowing the algorithms and keys used to perform the encryption.
A) Nonrepudiation
B) Cryptography
C) Cryptanalysis
D) Cryptology
Q3) ____ is the predominant cryptographic authentication and encryption protocol suite in use today.
A) Secure Hypertext Transfer Protocol (SHTTP)
B) Public key infrastructure (PKI)
C) Privacy Enhanced Mail (PEM)
D) IP Security (IPSec)
Q4) PKI systems are based on public key cryptosystems and include digital certificates and certificate ____________________.
Q5) Describe asymmetric encryption.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Setting up a Virtual Private Network
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/43463
Sample Questions
Q1) ____________________ is a computer networking philosophy and a related set of protocols that are together used to evaluate the trustworthiness of a client wishing to join a network.
Q2) Makes a network accessible to remote users who need dial-in access.
A)encapsulation
B)tunnel
C)client-to-site
D)transport mode
E)gateway
F)private leased lines
G)tunnel mode
H)site-to-site
I)Point-to-Point Tunneling Protocol
Q3) A(n) ____________________ tunnel is a communications path that makes use of Internet-based hosts and servers to conduct data from one network station to another, just like any other TCP/IP data transmission.
Q4) Describe software VPN systems.
Q5) List some devices that can form the endpoints of the VPN.
Q6) Describe the features of IP encapsulation provided by a VPN.
Q7) Describe the drawbacks of VPNs.
To view all questions and flashcards with answers, click on the resource link above. Page 12