Module 7: Securing the Local Area Network and Cryptographic Systems

Question 1

It is an endpoint security that is employed to protect critical computer systems containing crucial data against viruses and other Internet malware.

Answer 1

host-based intrusion prevention system (HIPS)

Question 2

three host-based protections

Answer 2

• host-based intrusion prevention system (HIPS)
• host-based firewall
• antivirus/antimalware software

Question 3

A granular way to protect individual hosts from viruses and malware, and to control the spread of these harmful infections throughout the network.

Answer 3

host-based firewall

Question 4

The technical architecture that allows organizations to connect anyone, anywhere, anytime, and on any device – securely, reliably, and seamlessly.

Answer 4

Borderless Network

Question 5

It is the foundation for the Network Infrastructure, providing optimization, scale, and security to collaboration and virtualization.

Answer 5

Borderless Network

Question 6

What are the different host-based protection/endpoint in a borderless network?

Answer 6

• antivirus/antimalware
• spam filtering
• Uniform Resource Locator (URL) filtering
• blacklisting
• data loss prevention

Question 7

What are the different modern endpoint security solutions?

Answer 7

• Advanced Malware Protection (AMP)
• Enterprise Security Architecture (ESA)
• Web Security Appliance (WSA)
• Network access control (NAC)

Question 8

A modern endpoint security solution where its main focus is be to align information security controls and processes with business strategy, goals and objectives.

Answer 8

enterprise security architecture

Question 9

A modern endpoint security solution which is the practice of applying a comprehensive and rigorous method for describing a current and/or future structure and behavior for an organization’s security processes, information security systems, personnel, and organizational sub-units so that they align with the organization’s core goals and strategic direction.

Answer 9

enterprise security architecture

Question 10

A modern endpoint security solution which is the methodology and process used to develop a risk-driven security framework and business controls.

Answer 10

enterprise security architecture

Question 11

A modern endpoint security solution that aims to do exactly what the name implies—control access to a network with policies, including pre-admission endpoint security policy checks and post-admission controls over where users and devices can go on a network and what they can do.

Answer 11

network access control

Question 12

A modern endpoint security solution which safeguards businesses through broad threat intelligence, multiple layers of malware defense, and vital data loss prevention (DLP) capabilities across the attack continuum.

Answer 12

web security appliance

Question 13

A modern endpoint security solution which is an all-in-one web gateway that brings you broad protection, extensive controls, and investment value.

Answer 13

Web Security Appliance

Question 14

A modern endpoint security solution that might integrate the automatic remediation process (fixing non-compliant nodes before allowing access) into the network systems, allowing the network infrastructure such as routers, switches and firewalls to work together with back office servers and end user computing equipment to ensure the information system is operating securely before interoperability is allowed.

Answer 14

Network access control

Question 15

A modern endpoint security solution that is designed to prevent, detect, and help remove threats in an efficient manner from computer systems.

Answer 15

Advanced Malware Protection

Question 16

A modern endpoint security solution that is a computer networking solution that uses a set of protocols to define and implement a policy that describes how to secure access to network nodes by devices when they initially attempt to access the network

Answer 16

Network access control

Question 17

What are the 3 Advance Malware Protection offered by Cisco?

Answer 17

• AMP for endpoints
• AMP for Networks
• AMP for Content Security

Question 18

A Cisco AMP that integrates with Cisco AMP for Networks to deliver comprehensive protection across extended networks and endpoints.

Answer 18

AMP for endpoints

Question 19

A Cisco AMP that provides a network-based solution and is integrated into dedicated Cisco ASA Firewall and Cisco FirePOWER network security appliances.

Answer 19

AMP for Networks

Question 20

A Cisco AMP that is an integrated feature in Cisco Cloud Web Security or Cisco Web and Email Security Appliances to protect against email and web-based advanced malware attacks.

Answer 20

AMP for Content Security

Question 21

What are the features and benefits of Cisco Email Security solutions?

Answer 21

• Global threat intelligence
• Spam blocking
• Advanced malware protection
• Outbound message control

Question 22

What are the switch attack categories?

Answer 22

• Spanning Tree Protocol (STP) Attack
• Address Spoofing Attack
• Address Resolution Protocol (ARP) Attack
• Dynamic Host Configuration Protocol (DHCP) Attack
• virtual local area network (VLAN) Attack
• Content Addressable Memory (CAM) Table Attack

Question 23

An enabling port security command used to learn connected MAC address dynamically

Answer 23

switchport port-security mac-address sticky

Question 24

An enabling port security command used to manually configure MAC addresses

Answer 24

switchport port-security mac-address

Question 25

An enabling port security command used to set the maximum number of MAC addresses

Answer 25

switchport port-security maximum value

Question 26

What are the port security violation modes?

Answer 26

* Protect * Restrict * Shutdown

Question 27

A network management protocol used to automate the process of configuring devices on IP networks, thus allowing them to use network services such as DNS, NTP, and any communication protocol based on UDP or TCP.

Answer 27

Dynamic Host Configuration Protocol (DHCP)

Question 28

It is a security feature that acts like a firewall between untrusted hosts and trusted DHCP servers.

Answer 28

Dynamic Host Configuration Protocol (DHCP) snooping

Question 29

It is a stateless protocol used for resolving IP addresses to machine MAC addresses.

Answer 29

address resolution protocol

Question 30

It constructs a large number of forged ARP request and reply packets to overload the switch.

Answer 30

address resolution protocol (ARP) spoofing

Question 31

It is one of the most frequently used spoofing attack methods.

Answer 31

IP (internet protocol) address spoofing

Question 32

In an __________ attack, an attacker sends IP packets from a false source address in order to disguise itself.

Answer 32

address spoofing

Question 33

It is a type of man-in-the-middle attack that can be used to stop network traffic, change it, or intercept it

Answer 33

address resolution protocol (ARP) poisoning

Question 34

It is a security feature that validates ARP packets in a network.

Answer 34

dynamic address resolution protocol (ARP) inspection

Question 35

A mitigating ARP attack that allows a network administrator to intercept, log, and discard ARP packets with invalid MAC address to IP address bindings.

Answer 35

dynamic address resolution protocol inspection

Question 36

An attacker sends IP packets from a false (or “spoofed”) source address in order to disguise itself.

Answer 36

IP (internet protocol) address spoofing

Question 37

A way to mitigate VLAN attack that helps prevent IP spoofing attacks when a host tries to spoof and use the IP address of another host.

Answer 37

IP (internet protocol) source guard

Question 38

A security feature that restricts IP traffic on untrusted Layer 2 ports by filtering traffic based on the DHCP snooping binding database or manually configured IP source bindings.

Answer 38

IP (internet protocol) source guard

Question 39

A Layer 2 protocol that runs on bridges and switches and ensures that you do not create loops when you have redundant paths in your network.

Answer 39

Spanning Tree Protocol (STP)

Question 40

A port in STP that is not being the designated or root port.

Answer 40

blocked port

Question 41

It is a port in STP that receives the best BPDU on a bridge is the root port.

Answer 41

root port

Question 42

This occurs when an attacker, hacker, or an unauthorized user spoof the root bridge in the topology.

Answer 42

spanning tree protocol manipulation attack

Question 43

It is a port in STP that is the closest to the root bridge in terms of path cost.

Answer 43

root port

Question 44

It is the only bridge in the STP network that does not have a root port.

Answer 44

root bridge

Question 45

A reference point for all switches in a spanning-tree topology

Answer 45

root bridge

Question 46

It is calculated using port cost values associated with port speeds for each switch port along a given path in STP

Answer 46

STP (spanning tree protocol) Path Cost

Question 47

A port that can send the best BPDU on the segment to which it is connected.

Answer 47

designated port

Question 48

A port that receives more useful BPDUs from another bridge and is a port blocked.

Answer 48

alternate port

Question 49

This was introduced to accommodate the additional VLAN information in BPDU

Answer 49

Extended System ID field

Question 50

It can only be connected on switch or trunk ports that are connected to a single workstation, switch, or server to allow those devices to connect to the network immediately, instead of waiting for the port to transition from the listening and learning states to the forwarding state.

Answer 50

portfast

Question 51

It used in selection of root bridge and to prevent loop which is supported only on nontrunking access ports because these ports typically do not transmit or receive BPDUs.

Answer 51

portfast mode

Question 52

It is used to mitigate STP attacks that provides a way to enforce the root bridge placement in the network.

Answer 52

root guard

Question 53

It forces a port to always be designated as the root port in STP.

Answer 53

root guard

Question 54

It is used to mitigate STP attacks that ensures that the port on which it is enabled is the designated port.

Answer 54

root guard

Question 55

A feature that provides additional protection against Layer 2 forwarding loops (STP loops) and is created when an STP blocking port in a redundant topology erroneously transitions to the forwarding state.

Answer 55

STP (spanning tree protocol) loop guard feature

Question 56

It is used to mitigate STP attacks that provides additional protection against Layer 2 forwarding loops (STP loops).

Answer 56

loop guard

Question 57

It causes a switch or trunk port to enter the spanning tree forwarding state immediately, bypassing the listening and learning states.

Answer 57

portfast

Question 58

Ciphertext can be creating using several methods:

Answer 58

* Transposition * Substitution * One-time pad

Question 59

It is an encrypted text transformed from plaintext using an encryption algorithm.

Answer 59

ciphertext

Question 60

It is a an encryption technique where plaintext is paired with a random secret key.

Answer 60

one-time pad

Question 61

It is a method of encryption by which the positions held by units of plaintext are shifted according to a regular system, so that the ciphertext constitutes a permutation of the plaintext.

Answer 61

transposition cipher

Question 62

A method of encrypting in which units of plaintext are replaced with ciphertext, according to a fixed system; the "units" may be single letters (the most common), pairs of letters, triplets of letters, mixtures of the above, and so forth.

Answer 62

substitution cipher

Question 63

An encryption technique that cannot be cracked, but requires the use of a one-time pre-shared key the same size as, or longer than, the message being sent.

Answer 63

one-time pad

Question 64

Methods used for cryptanalysis:

Answer 64

* Brute-force method * Ciphertext method * Known-Plaintext method * Chosen-Plaintext method * Chosen-Ciphertext method * Meet-in-the-Middle method

Question 65

A method used in cryptanalysis where an attacker knows that a portion of the plaintext and the corresponding ciphertext.

Answer 65

Meet-in-the-Middle method

Question 66

A method used in cryptanalysis where an attacker tries every possible key with the decryption algorithm knowing that eventually one of them will work.

Answer 66

Brute-Force method

Question 67

A method used in cryptanalysis where an attacker has the ciphertext of several messages, all of which have been encrypted using the same encryption algorithm, but the attacker has no knowledge of the underlying plaintext.

Answer 67

Ciphertext-Only method

Question 68

A method used in cryptanalysis where the attacker uses a brute-force attack to try keys until decryption with the correct key produces a meaningful result.

Answer 68

Known-Plaintext method

Question 69

A method used in cryptanalysis where the attacker chooses which data the encryption device encrypts and observes the ciphertext output.

Answer 69

Chosen-Plaintext method

Question 70

A method used in cryptanalysis where the attacker chooses different ciphertext to be decrypted and has access to the decrypted plaintext.

Answer 70

Chosen-Ciphertext method

Question 71

The study of the distribution (and count) of the letters in a text.

Answer 71

Frequency analysis

Question 72

It is that part of cryptology concerned with the putting of messages into a secret or encrypted form.

Answer 72

Cryptography

Question 73

The art and science of making and breaking codes and ciphers.

Answer 73

Cryptology

Question 74

A method of protecting information and communications through the use of codes, so that only those for whom the information is intended can read and process it.

Answer 74

Cryptography

Question 75

An algorithm used for authentication which is used by modern computers to encrypt and decrypt messages.

Answer 75

Rivest-Shamir-Adleman

Question 76

An algorithm used for authentication which is a widely used hash function producing a 128- bit hash value.

Answer 76

message-digest algorithm (MD5)

Question 77

An algorithm used for authentication which the result of work done on developing a MAC derived from cryptographic hash functions.

Answer 77

Hash-based message authentication code (HMAC)

Question 78

An algorithm used for authentication that takes the plain text in 64-bit blocks and converts them into ciphertext using 48-bit keys.

Answer 78

DES (Data Encryption Standard)

Question 79

An algorithm used for confidentiality which is a symmetric-key block cipher created in the early 1970s by an IBM team and adopted by the National Institute of Standards and Technology (NIST).

Answer 79

data encryption standard

Question 80

An algorithm used for authentication which is a Federal Information Processing Standard for digital signatures, based on the mathematical concept of modular exponentiation and the discrete logarithm problem.

Answer 80

digital signature algorithm

Question 81

An algorithm that takes an arbitrary amount of data input—a credential—and produces a fixed-size output of enciphered text called a hash value, or just “hash.”

Answer 81

cryptographic hash function

Question 82

A Cryptographic Hash Function Property that should make it very hard to reconstruct the original password from the output or hash.

Answer 82

Non-reversibility or one-way function

Question 83

A Cryptographic Hash Function Property where a change in just one bit of the original password should result in change to half the bits of its hash.

Answer 83

Diffusion, or avalanche effect

Question 84

A Cryptographic Hash Function Property where a given password must always generate the same hash value or enciphered text.

Answer 84

Determinism

Question 85

A Cryptographic Hash Function Property where it should be hard to find two different passwords that hash to the same enciphered text.

Answer 85

Collision resistance

Question 86

A Cryptographic Hash Function Property where the hash value should not be predictable from the password.

Answer 86

Non-predictable

Question 87

It is a hash function that has been deprecated for uses other than as a non-cryptographic checksum to verify data integrity and detect unintentional data corruption.

Answer 87

message digest-5

Question 88

A well-known hash function that produces a 160-bit hash value from an arbitrary length string.

Answer 88

secure hash algorithm

Question 89

It is a specific type of message authentication code (MAC) involving a cryptographic hash function in combination with a secret cryptographic key.

Answer 89

keyed hash message authentication code (HMAC)

Question 90

A cryptographic hash algorithm that can be used to create a 128-bit string value from an arbitrary length string

Answer 90

Message Digest Algorithm 5 (MD5)

Question 91

The process of generating keys for cryptography.

Answer 91

Key generation

Question 92

It refers to managing cryptographic keys within a cryptosystem. It deals with generating, exchanging, storing, using and replacing keys as needed at the user level.

Answer 92

Key management

Question 93

A key management characteristics which removes KM from use prior to the end of its normal cryptoperiod for reasons that include key compromise, removal of an entity from an organization, etc.

Answer 93

key revocation

Question 94

A key management characteristics which any media on which the KM was stored should be erased in a manner that removes all traces of the KM so that it cannot be recovered by either physical or electronic means.

Answer 94

Key destruction

Question 95

A key management characteristics which is a specific time span during which a cryptographic key setting remains in effect.

Answer 95

key lifetime

Question 96

A key management characteristics where keys must be stored securely to maintain communications security.

Answer 96

Key storage

Question 97

A key management characteristics where prior to any secured communication, users must set up the details of the cryptography.

Answer 97

Key exchange

Question 98

It refers to the set of all possible permutations of a key.

Answer 98

Key space

Question 99

it is usually designed to be large enough to make such a key search infeasible.

Answer 99

key space

Question 100

What are the different cryptographic keys?

Answer 100

* symmetric key * asymmetric key * digital signature * hash key

Question 101

A type of encryption where only one key (a secret key) is used to both encrypt and decrypt electronic information.

Answer 101

Symmetric encryption

Question 102

A cryptographic value that is calculated from the data and a secret key known only by the signer.

Answer 102

Digital signature

Question 103

Two classes of encryption algorithms

Answer 103

* symmetric encryption algorithm * asymmetric encryption algorithm

Question 104

A deterministic algorithm operating on fixed-length groups of bits, called blocks.

Answer 104

block cipher

Question 105

A cipher that uses an unvarying transformation or a symmetric key.

Answer 105

block cipher

Question 106

A type of encryption algorithm that process an individual bit, byte, or character of plaintext at a time

Answer 106

Stream cipher

Question 107

An algorithm used for confidentiality which takes the plain text in 64-bit blocks and converts them into ciphertext using 48-bit keys

Answer 107

DES (Data Encryption Standard)

Question 108

An algorithm used for confidentiality of data that uses symmetric algorithm and will take 6.4 days to crack using COPACABANA.

Answer 108

data encryption standard

Question 109

It is an algorithm that encrypts with the first key (k1), decrypts using the second key (k2), then encrypts with the third key (k3).

Answer 109

triple data encryption standard

Question 110

An algorithm used for confidentiality of data where key size can be 128, 192, and 256 bits.

Answer 110

advanced encryption standard

Question 111

An algorithm that is based on substitution–permutation network.

Answer 111

advanced encryption standard

Question 112

It is an algorithm replaced DES and needs 4.6 billion years to crack.

Answer 112

triple data encryption standard

Question 113

An algorithm used for confidentiality of data that uses symmetric algorithm and will take 149 trillions years to crack.

Answer 113

advanced encryption standard

Question 114

An algorithm which is a pseudorandom function family in that it can easily generate arbitrary portions of the keystream without having to start from the beginning.

Answer 114

software-optimized encryption algorithm

Question 115

An algorithm which uses is a stream cipher optimized for machines with a 32-bit word size and plenty of RAM with a reported performance of around 4 cycles per byte.

Answer 115

software-optimized encryption algorithm

Question 116

An algorithm where the router and peer must support IPSec.

Answer 116

software-optimized encryption algorithm

Question 117

It is an algorithm used for securely exchanging cryptographic keys over a public communications channel.

Answer 117

diffie-hellman algorithm

Question 118

What are the different protocols that uses asymmetric key algorithm?

Answer 118

* Internet Key Exchange (IKE) * Secure Socket Layer (SSL) * Secure Shell (SSH) * Pretty Good Privacy (PGP)

Question 119

An asymmetric key algorithm which is often used as a method of exchanging encryption keys and/or authentication keys through an unsecured medium like the Internet.

Answer 119

Internet Key Exchange (IKE)

Question 120

An asymmetric key algorithm which is often used for key management purposes in IPSec networks.

Answer 120

Internet Key Exchange (IKE)

Question 121

An asymmetric key algorithm which provides several alternative options for strong authentication, and it protects the communications security and integrity with strong encryption.

Answer 121

Secure Shell (SSH)

Question 122

An asymmetric key algorithm which is a method for secure remote login from one computer to another.

Answer 122

Secure Shell (SSH)

Question 123

An asymmetric key algorithm which is an encryption-based Internet security protocol.

Answer 123

Secure Socket Layer (SSL)

Question 124

An asymmetric key algorithm which is an encryption program that provides cryptographic privacy and authentication for data communication.

Answer 124

Pretty Good Privacy (PGP)

Question 125

An asymmetric key algorithm used for signing, encrypting, and decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the security of e-mail communications

Answer 125

Pretty Good Privacy (PGP)

Question 126

The transformation of a string of characters into a usually shorter fixed-length value or key that represents the original string.

Answer 126

Hashing

Question 127

Digital Signature Properties

Answer 127

* authentic * unalterable * not reusable * cannot be repudiated