Network Security – Part C

A small business owner is concerned about the security of their online accounts and wants to add an extra layer of protection for their employees. They have heard about various authentication methods and want to choose one that is both secure and easy to use. Which of the following options would best fit their needs?

A large retail organization has many branches with its own local area networks (LANs). The IT department wants to centralize the authentication of users who access the company’s resources. Which of the following solutions would be the most appropriate?

An IT manager has received reports that some unauthorized computers have been accessing the company’s confidential information through the Wi-Fi network. The IT manager has been able to identify the MAC addresses of the computers in question:

• Computer X: 00:00:5e:00:53:af
• Computer Y: aa:55:5e:00:53:af
• Computer Z: 44:20:5e:00:53:af

Which of the following tools would the IT manager use to prevent these computers from connecting to the Wi-Fi network and accessing confidential information?

Drag and drop the common networking attacks into their respective fields.

One purpose of a brute-force attack is to:

A company has recently suffered a breach in its IT systems. To prevent this from happening again, the CEO has asked the IT team to implement security measures that will provide insight into potential security risks. What is the first step the IT team should take in order to accomplish this goal?

Which of the following networking attacks redirects online traffic to a fraudulent website that resembles its intended destination?

An attacker calls an employee of a company posing as an IT support technician and requests the employee’s password for a specific application. The attacker uses this password to access sensitive company information. Which of the following security threats BEST describes this scenario?

During a routine network security audit, the network administrator discovers unusual network activity originating from a device in the LAN. Upon further investigation, it is revealed that the device is sending ARP packets with false source IP addresses, leading to redirection of network traffic. Which of the following security incidents is being described?

Which of the following passwords would you select to strengthen the security of your account against unauthorized access? (Select TWO)

An organization is concerned about the security of its network and wants to identify any potential vulnerabilities that could be exploited by attackers. The security team recommends a simulation of a real-world attack on their network to identify any weaknesses. Which of the following options is the MOST appropriate solution for the organization?

Which of the following statements are true regarding Security Information and Event Management (SIEM)? (Select TWO)

A network administrator is tasked with ensuring the security of the organization’s systems. Which of the following practices will BEST help to minimize the risk of security breaches?

Which of the following security concepts is a dictionary that provides definitions for publicly disclosed cybersecurity vulnerabilities and exposures?

You have been asked to educate a graduate intern on the concept of zero-day vulnerabilities. Which of the following definitions most accurately describes a zero-day vulnerability?

A network technician is tasked with implementing a solution to increase the local area network security within an organization. All of the company’s external-facing servers (Web server, FTP server) should be placed in a separate area in order to be accessible from the internet, and the rest servers (Mail server, Storage server) of the internal LAN to be unreachable. Which of the following techniques does the technician need to implement to meet the requirement?

A network security engineer is tasked with implementing a solution to allow users from untrusted networks to access the Web Server and the Mail Server while keeping the private network secured and inaccessible. Which of the following does the engineer need to implement to complete the task?

Which of the following are commonly recognized authentication protocols? (Select TWO)

An organization is dealing with a sudden surge in network traffic. The network administrator notices that all the traffic is coming from a single IP address and is being generated by multiple infected devices in the network. Which of the following security threats is the organization MOST likely dealing with?

Which type of attack involves the interception of communications between an API endpoint and a client, potentially allowing the attacker to access or modify sensitive data being transmitted between them?

Your website uses Cloudflare to resolve DNS queries. Upon checking the records, you have discovered there are A and MX record entries that point to unknown and potentially harmful IP addresses. Which of the following attacks have you just discovered?

A company’s network is experiencing slow response times and unexpected redirects when attempting to access certain websites. The IT administrator suspects a security issue and begins to investigate. Which of the following security threats is MOST likely causing the issue?

A security expert is tasked with implementing a solution to prevent Rogue DHCP servers from offering IP addresses to end-users within an organization. Which of the following security technology does the expert need to implement to meet the requirement?

In which of the following wireless network attacks does the attacker set up a fraudulent Wi-Fi access point that appears to be legitimate but is used to eavesdrop on wireless communications?

An employee of a company received an email that contained a malicious link. After clicking on the link, the employee’s files were encrypted and a ransom payment was demanded. What type of security threat did the company fall victim to?

An attacker breaks into a password-protected computer by systematically entering every word in a dictionary as a password. What type of attack does the attacker carry out?

In a corporate office, a visitor walks into the building behind an employee who was authorized to access the building. The visitor then gains access to restricted areas of the building without having to present any identification or pass through security. What type of security threat is this scenario describing?

An attacker is observing over the shoulder of a user to steal sensitive information, such as a password or personal identification number (PIN). Which of the following security threats BEST describes the attacker’s method?

An IT administrator has been assigned to enhance the security of a medium-sized organization’s wired network. The goal is to limit unauthorized access to the network and prevent malicious actors from compromising sensitive data. One aspect of this is to only allow authorized devices to connect to the network. The administrator decides to implement a feature that allows only packets with a matching MAC address to be considered secure and forwarded while restricting all other packets. Which of the following options best describes the feature the administrator should implement to meet these requirements?

An enterprise is looking for a security solution that restricts access to sensitive data from specific geographic locations. Which of the following solutions is the BEST fit for this requirement?

A small business wants to securely connect its two remote offices together. Which of the following VPN solutions would be the MOST appropriate to meet their needs?

A network administrator is tasked with accessing a remote computer to handle some administrative tasks over an unsecured network in a secure way. Which of the following protocols does the administrator need to use to connect to the device?

An attacker has managed to intercept the communication between a router and a workstation by utilizing a tool named Driftnet. The attacker’s machine acts as a bridge between the router and the workstation, allowing the attacker to secretly access all communication. What type of security attack is this scenario an example of?

Which of the following protocols is used in the AAA framework to provide centralized authentication for users who want to gain access to the network?

A company wants to prevent unauthorized individuals from accessing its network by requiring all users to provide specific information and credentials before logging in. Which of the following security measures would BEST meet this requirement?

End-users in an office building have reported issues with connectivity to a web server. During the troubleshooting process, a network administrator notes a high CPU utilization on the server when executing the command grep processor /proc/cpuinfo. What is the MOST likely cause of the problem?

An organization is experiencing a security breach where the attacker is able to intercept and alter data that is being transmitted on the network. Which type of attack is this?

Drag and drop the social engineering attacks into their respective fields.

Which of the following is the MOST effective way to prevent network security breaches from happening in the workplace?

Which of the following types of attacks is shown in the figure below?