Chapter 5-7

Question 1

To provide a one-to-one mapping of a recyclable pool of public IP addresses to internal clients, this NAT type should be used:   
A: Policy NAT/PAT
B: Dynamic PAT  
C: Static NAT   
D: Dynamic NAT

Answer 1

D: Dynamic NAT

Question 2

2.	Which NAT technology is limited by the number of ports available?   
 A: Dynamic PAT
 B: Static NAT
 C: Policy NAT/PAT
 D: Dynamic NAT

Answer 2

A: Dynamic PAT

Question 3

3. A web proxy server is an example of which type of firewall:
   a) Application Layer Gateway
   b) Application Inspection
   c) Static Packet Filtering
   d) Transparent Firewall
   e) Stateful Packet Filtering

Answer 3

a) Application Layer Gateway

Question 4

4. If the number of inside clients exceeds the number of public IP addresses available to an organization, then this NAT type must be used:
   a) Static NAT
   b) Policy NAT/PAT
   c) Dynamic NAT
   d) Dynamic PAT

Answer 4

d) Dynamic PAT

Question 5

5. Cisco ACL’s are an example of which type of firewall:
   a) Stateful Packet Filtering
   b) Application Layer Gateway
   c) Transparent Firewall
   d) Static Packet Filtering
   e) Application Inspection

Answer 5

d) Static Packet Filtering

Question 6

6. IP Addresses that should not be seen coming from the Internet are referred to as:
   a) private addresses
   b) bogons
   c) supernets
   d) darknet

Answer 6

b) bogons

Question 7

7. If a client needs to be NAT’ed to a certain public IP ONLY in specific cases, this type of NAT should be used:
   a) Dynamic NAT
   b) Dynamic PAT
   c) Static NAT
   d) Policy NAT/PAT

Answer 7

d) Policy NAT/PAT

Question 8

8. This firewall type is not visible to most network scanners.
   a) Transparent Firewall
   b) Static Packet Filtering
   c) Stateful Packet Filtering
   d) Application Inspection
   e) Application Layer Gateway

Answer 8

a) Transparent Firewall

Question 9

9. If a single inside client requires a single public IP address to be consistently assigned, this NAT type should be used:
   a) Dynamic NAT
   b) Dynamic PAT
   c) Policy NAT/PAT
   d) Static NAT

Answer 9

d) Static NAT

Question 10

10. This firewall type is able to track communication streams that switch from one network port to another.
    a) Application Inspection
    b) Static Packet Filtering
    c) Stateful Packet Filtering
    d) Application Layer Gateway
    e) Transparent Firewall

Answer 10

a) Application Inspection

Question 11

1. When developing a risk rating, this factor is assigned by the creator to indicate the importance of the signature
   a) Global Correlation
   b) Attack Relevancy
   c) Signature Fidelity Rating
   d) Target Value Rating
   e) Attack Severity Rating

Answer 11

e) Attack Severity Rating

Question 12

2. Using community participation to create a database of threats which are shared to the community is using which method:
   a) Signature-based
   b) Reputation-based
   c) Policy-based
   d) Anomaly-based
   e) Question 3

Answer 12

b) Reputation-based

Question 13

3. Which of these methods typically comes pre-loaded onto an IPS/IDs?
   a) Policy-based
   b) Anomaly-based
   c) Reputation-based
   d) Signature-based

Answer 13

d) Signature-based

Question 14

4. Creating a baseline of network traffic and alerting when it deviates from this is using which method:
   a) Policy-based
   b) Signature-based
   c) Anomaly-based
   d) Reputation-based

Answer 14

c) Anomaly-based

Question 15

5. In order to get the best visibility into the security of a client, this device should be used:
   a) HIDS
   b) NIDS
   c) Firewalls
   d) IPS

Answer 15

a) HIDS

Question 16

6. When developing a risk rating, this factor determines the accuracy of the rating:
   a) Historical Rating
   b) Signature Fidelity Rating
   c) Margin of Error Rating
   d) Accuracy Rating
   e) Statistical Analysis Rating

Answer 16

b) Signature Fidelity Rating

Question 17

7. When developing a risk rating, this factor is assigned based on the value of the asset being protected.
   a) Signature Fidelity Rating
   b) Attack Severity Rating
   c) Attack Relevancy
   d) Target Value Rating
   e) Global Correlation

Answer 17

d) Target Value Rating

Question 18

8. Limiting the number of packets in a network scan to avoid triggering alerts is an example of which evasion technique:
   a) Timing Attacks
   b) Resource Exhaustion
   c) Traffic Substitution
   d) Traffic Fragmentation
   e) Protocol Level Misinterpretation
   f) Encryption & Tunneling

Answer 18

a) Timing Attacks

Question 19

9. This evasion technique relies on generating an excessive amount of logs using one attack to cover up a more subtle attack.
   a) Timing Attacks
   b) Traffic Substitution
   c) Resource Exhaustion
   d) Encryption & Tunneling
   e) Protocol Level Misinterpretation
   f) Traffic Fragmentation

Answer 19

c) Resource Exhaustion

Question 20

10. Detecting threats based on specific patterns or characteristics uses which method:
    a) Anomaly-based
    b) Signature-based
    c) Policy-based
    d) Reputation-based

Answer 20

b) Signature-based

Question 21

1. Which is the most secure method for authentication of IKE Phase I?
   a) PSK
   b) RSA signatures, using digital certificates to exchange public keys
   c) Symmetrical AES-256
   d) DH Group 5

Answer 21

b) RSA signatures, using digital certificates to exchange public keys

Question 22

2. This encryption method uses one-way functions to encrypt and decrypt data:
   a) Asymmetric Encryption
   b) Hashing Function
   c) Pre-Shared Keys
   d) Symmetric Encryption

Answer 22

a) Asymmetric Encryption

Question 23

3. Which of the following are NOT negotiated during IKE Phase 1?
   a) IKE Phase 1 protocols
   b) Encryption
   c) Authentication method
   d) DH group
   e) Hashing

Answer 23

a) IKE Phase 1 protocols

Question 24

5. Which tunnel is used for private management traffic between the two VPN peers?
   a) IKE Phase 3
   b) IKE Phase 2
   c) IPsec
   d) IKE Phase 1

Answer 24

d) IKE Phase 1

Question 25

4. In IPSec, how is the negotiation of the IKE Phase 2 in tunnel done securely?
   a) Uses Pre-Shared Keys
   b) Uses the IKE Phase 1 tunnel
   c) Uses an IPsec tunnel
   d) Uses RSA

Answer 25

c) Uses an IPsec tunnel

Question 26

6. With VPN technology, Data Integrity is a function of:
   a) Auditing
   b) Authentication
   c) Encryption
   d) Hashing

Answer 26

d) Hashing

Question 27

7. Encrypting data a single bit at a time is referred to as a(n):
   a) Fragmentation
   b) Hash Function
   c) Stream cipher
   d) Block cipher

Answer 27

c) Stream cipher

Question 28

8. A set of rules on how to perform encryption or decryption is referred to as:
   a) Algorithm
   b) Cipher
   c) Function
   d) Key

Answer 28

b) Cipher

Question 29

9. The protocol used to perform a key exchange in an IKE connection is known as:
   a) ESP
   b) MD5
   c) Diffie-Helman
   d) RSA

Answer 29

c) Diffie-Helman

Question 30

10. Which of these is not a type of VPN:
    a) IPSec
    b) HTTPS
    c) SSL
    d) MPLS

Answer 30

b) HTTPS

Question 31

A security measure whose primary purpose is to deny unwanted traffic from crossing the boundary of the firewall.

Answer 31

Firewall