Network+ 9-12

Which type of DoS attack is bounced off uninfected computers?

**DRDoS attack (Distributed Reflection DoS).** It uses uninfected computers called reflectors to bounce attack traffic toward the target.

What information in a transmitted message might an IDS use to identify network threats?

**Signature.** An IDS looks for known patterns of malicious code or suspicious traffic.

What type of attack relies on spoofing to disconnect wireless clients?

**Deauth attack.** The attacker sends spoofed deauthentication frames to disconnect clients from a wireless network.

Which device can make network clients use an illegitimate default gateway?

**Rogue DHCP server.** It can assign the attacker's IP address as the default gateway.

What type of threat was the Year 2000 (Y2K) problem?

**Logic bomb.** Code or a bug activates when specific conditions are met, such as a certain date.

Which attack simulations detect vulnerabilities and attempt to exploit them?

**Pen testing (penetration testing).** It identifies security weaknesses and attempts to exploit them to determine their impact.

What is the difference between a vulnerability and an exploit?

**An exploit takes advantage of a vulnerability.** A vulnerability is a weakness in a system, while an exploit uses that weakness.

What is the first phase of the social engineering attack cycle?

**Research.** Attackers gather information about their target before building trust.

What process can identify that Telnet is running on a server?

**Port scanning.** It searches for open ports to identify running services.

What characteristic of ARP makes it vulnerable to DoS attacks?

**ARP performs no authentication.** This allows attackers to send fake ARP messages.

Which type of dedicated WAN connection reserves bandwidth for one customer and provides symmetrical speeds with an SLA?

**Leased line.** It provides dedicated bandwidth and guaranteed performance.

What cellular technology brought about true 4G speeds?

**LTE-A (LTE-Advanced).** It more closely meets the original 4G speed standards.

Which Cisco command displays detailed VLAN configurations for each switch interface?

**show interface switchport (sh int sw).** It displays switchport and VLAN information.

In a routing table, what does the letter D represent?

**EIGRP (Enhanced Interior Gateway Routing Protocol).** Cisco uses D to identify routes learned through EIGRP.

Why might a technician call an edge router an exterior router?

**Because it communicates with routers outside the Autonomous System (AS).** Both terms can refer to the same router.

What is the purpose of a routing table?

**It identifies where hosts and networks are located and the best way to reach them.** Routers use this information to forward packets.

What factors determine the size of a cellular network cell?

**Topology, number of cell towers, cellular traffic, and population.** Cell size depends on the region's layout, population, and traffic demands.

Which devices are used to connect WANs?

**Routers and modems.** They connect geographically separated networks.

What type of error can cause routers to drop messages without error feedback?

**Router misconfiguration.** Incorrect routing table entries can cause packets to be dropped.

Which dedicated WAN connection supports multiple Layer 3 protocols over different Layer 2 technologies while centrally managing bandwidth?

**MPLS (Multiprotocol Label Switching).** It supports different connectivity options and manages traffic between sites.

What type of attack floods a target with requests from a small number of sources?

**DoS (Denial-of-Service) attack.** It overwhelms a system with requests so legitimate services cannot respond.

Which scanning tool can identify unencrypted sensitive data, such as credit card numbers, stored on network hosts?

**Nessus.** It scans systems for vulnerabilities and sensitive information.

Besides ARP spoofing, which attacks can ARP vulnerabilities help make possible?

**DoS attacks, on-path attacks, and MAC flooding attacks.** ARP weaknesses can be exploited in several network attacks.

What solution protects sensitive data from unauthorized copying or transmission?

**DLP (Data Loss Prevention).** It identifies sensitive information and prevents it from being copied or sent outside the network.

How could someone steal money from an ATM shortly after a victim withdraws cash?

**Using a camera and card skimmer.** The skimmer captures card information while a hidden camera records the PIN.

Why can malware activate when an email is viewed in the preview pane?

**Viewing an email in the preview pane is equivalent to opening it.** Malicious attachments or content can activate when displayed.

Why should operating systems and application versions be standardized across a network?

**To simplify the change process for future updates.** Standardization makes maintenance and updates easier.

What is an exploit in cybersecurity?

**The act of taking advantage of a known vulnerability.** It uses a weakness in a system to gain access or cause damage.

What is risk in cybersecurity?

**The likelihood that a vulnerability will be exploited.** Risk measures the possibility and potential impact of a security problem.

What is the term for deceiving someone into following an authorized employee into a restricted area?

**Piggybacking.** The attacker uses deception, such as pretending to need help carrying something, to gain access.

What does a security risk assessment evaluate?

**Threats to and vulnerabilities of the network.** It identifies possible security problems.

What does a business risk assessment evaluate?

**The impact of potential threats on business processes.** It focuses on how threats could affect business operations.

Which principle ensures auditing is performed by someone other than the employees being audited?

**Separation of duties (SoD).** No one should be responsible for monitoring and reporting on their own activities.

Which directory access protocol is compatible with Active Directory and 389 Directory Server?

**LDAP (Lightweight Directory Access Protocol).** It is a standard protocol for accessing directory services.

What is the most important factor when creating a strong password?

**Length.** Longer passwords are generally harder to crack through brute-force attacks.

What firewall feature can block malicious email traffic based on message content?

**Content filtering.** It examines message content to identify and block malicious material.

What technology can improve BYOD security?

**MDM (Mobile Device Management).** It manages devices, enforces security policies, and can encrypt or remotely wipe data.

Which part of AAA relies on encryption keys as an integral part of the process?

**Authentication.** Technologies such as Kerberos use encryption keys to verify identities.

What is an example of MFA (Multifactor Authentication)?

**Smart card and key.** They represent two different authentication factor categories: something you have and something you know.

Why is password and PIN NOT necessarily considered MFA?

**Because both are something you know.** MFA requires factors from at least two different categories.

Which technology is commonly used to authenticate network technicians to Cisco routers and switches?

**TACACS+.** It is commonly used for centralized authentication of network device administrators.

Which statement about SAML is FALSE?

**An SP can require users to rotate their passwords on a certain schedule.** The identity provider manages authentication and password policies, not the service provider.

What technology is part of the networking portion of SASE?

**SDN (Software-Defined Networking).** SASE uses SDN and SD-WAN for network connectivity.

What does DRDoS stand for?

**Distributed Reflection Denial-of-Service.** It uses third-party systems to reflect attack traffic toward a victim.

What are reflectors in a DRDoS attack?

**Uninfected computers that respond to spoofed requests and send traffic toward the victim.**

What does IDS stand for?

**Intrusion Detection System.** It monitors network activity and generates alerts about suspicious behavior.

What does HIDS stand for?

**Host-Based Intrusion Detection System.** It monitors activity on an individual computer or server.

What does NIDS stand for?

**Network-Based Intrusion Detection System.** It monitors network traffic for suspicious activity.

What does FIM stand for?

**File Integrity Monitoring.** It detects unauthorized changes to important files.

What is port mirroring?

**A switch feature that copies network traffic from one port or multiple ports to a monitoring device.**

What does ACL stand for?

**Access Control List.** It determines which network traffic is allowed or denied.

What is a rogue DHCP server?

**An unauthorized DHCP server that provides incorrect network settings to clients.** It can assign a malicious default gateway.

What is a honeypot?

**A decoy system designed to attract attackers.** It appears vulnerable and may contain fake sensitive information.

What is a friendly DoS attack?

**An unintentional denial-of-service attack.** It happens without malicious intent.

What is tailgating?

**Following an authorized person into a restricted area without their knowledge or permission.**

What is piggybacking?

**Using deception or the authorized person's cooperation to gain access to a restricted area.**

What is shoulder surfing?

**Watching someone enter sensitive information, such as a password or PIN.**

What is quid pro quo in social engineering?

**Offering something in exchange for private information or access.** For example, offering free help in exchange for login credentials.

What is the correct order of the social engineering attack cycle?

**Research → Building trust → Exploiting the relationship → Using the information/access.**

What is phishing?

**A fraudulent message that pretends to come from a legitimate source to steal information or credentials.**

What is a port scanner used for?

**Finding open ports and identifying services running on a device.**

What does Nmap do?

**Scans networks and devices to discover hosts, open ports, and services.**

What does Nessus do?

**Scans systems for vulnerabilities and security weaknesses.**

What does Wireshark do?

**Captures and analyzes network traffic and packets.**

What does Metasploit do?

**Provides tools for penetration testing and exploiting security vulnerabilities.**

What is a leased line?

**A dedicated WAN connection that reserves bandwidth for one customer, usually with symmetrical speeds and an SLA.**

What does SLA stand for?

**Service Level Agreement.** It defines expected service performance and availability.

What does LTE stand for?

**Long-Term Evolution.** It is a standard for 4G cellular networks.

What does LTE-A stand for?

**Long-Term Evolution Advanced.** It improves LTE performance and provides true 4G-level speeds.

What does MPLS stand for?

**Multiprotocol Label Switching.** It forwards network traffic using labels and supports different Layer 3 protocols over Layer 2 technologies.

What does WAN stand for?

**Wide Area Network.** It connects networks across large geographical areas.

What does EIGRP stand for?

**Enhanced Interior Gateway Routing Protocol.** It is a Cisco routing protocol.

What does an edge router do?

**Connects an organization's internal network to external networks, such as the Internet.**

What does an Autonomous System (AS) mean?

**A group of IP networks and routers managed by one organization under a common routing policy.**

What does ARP stand for?

**Address Resolution Protocol.** It maps IPv4 addresses to MAC addresses on a local network.

Why is ARP vulnerable to spoofing?

**It does not authenticate ARP messages.** Attackers can send false IP-to-MAC address mappings.

What does DAI stand for?

**Dynamic ARP Inspection.** It checks ARP messages against the DHCP snooping binding table to help prevent ARP spoofing.

What does MAC flooding attempt to do?

**Overwhelm a switch's MAC address table so it may begin forwarding traffic more broadly.**

What is an on-path attack?

**An attack where someone intercepts or potentially modifies communication between two parties.**

What does DLP stand for?

**Data Loss Prevention.** It protects sensitive information from unauthorized copying, sharing, or transmission.

What does BYOD stand for?

**Bring Your Own Device.** Employees use their personal devices for work.

What does MDM stand for?

**Mobile Device Management.** It manages and secures mobile devices used by an organization.

What are the three parts of AAA?

**Authentication, Authorization, and Accounting.** They verify identity, determine permissions, and track activity.

What is authentication?

**Verifying who someone is.**

What is authorization?

**Determining what an authenticated user is allowed to access or do.**

What is accounting in AAA?

**Tracking and recording user activity and resource usage for auditing.**

What does MFA stand for?

**Multifactor Authentication.** It requires two or more different types of authentication factors.

What are the three categories of authentication factors?

**Something you know, something you have, and something you are.** Examples include a password, smart card, and fingerprint.

What does LDAP stand for?

**Lightweight Directory Access Protocol.** It allows applications to access and manage directory information.

What does RADIUS stand for?

**Remote Authentication Dial-In User Service.** It provides centralized authentication, authorization, and accounting for network access.

What does TACACS+ stand for?

**Terminal Access Controller Access Control System Plus.** It is commonly used to authenticate administrators accessing network devices.

What does SAML stand for?

**Security Assertion Markup Language.** It allows identity providers to send authentication information to service providers.

What is an IdP in SAML?

**Identity Provider.** It authenticates users and sends authentication tokens to service providers.

What is an SP in SAML?

**Service Provider.** It provides the application or service that a user wants to access.

What is the difference between an IdP and an SP?

**The IdP authenticates the user, while the SP provides the service.**

What does SASE stand for?

**Secure Access Service Edge.** It combines networking and security services delivered through a cloud-based framework.

What does SDN stand for?

**Software-Defined Networking.** It separates network control from the hardware that forwards traffic.

What does SD-WAN stand for?

**Software-Defined Wide Area Network.** It uses software to manage and optimize WAN connections.

What does SSE stand for?

**Security Service Edge.** It provides cloud-delivered security services within the SASE framework.

What does CASB stand for?

**Cloud Access Security Broker.** It helps enforce security policies when users access cloud services.