Finial

Front 1

Characteristics of tacacs+

Back 1

Encrypt the entire package not just authenticating packets

Front 2

Test for real-world hacker attack

Back 2

Zero-knowledge team

Front 3

When would choosing to do nothing about an identity risk be acceptable

Back 3

When the cost of protecting the assets is greater than the potential loss

Front 4

Which Network Technology creates virtual links between two remote Network end points by prefixing packets with a header containing one or more labels

Back 4

Mpls

Front 5

Which network type establishes a dedicated physical connection between two hosts in order to transmit time sensitive data

Back 5

Circuit switch

Front 6

Which component of change and configuration management policies identify Technical and budgetary considerations associated with a proposed change and also identifies any potential impact to the network

Back 6

Feasibility analysis

Front 7

Which of the following protocols is used by PPP to enable support for multi Network layer protocol

Back 7

NCP

Front 8

QR troubleshooting physical layer is shoes with a Gio / 1 interface in a router you need to view and analyze the number of collisions detected on the interface

Back 8

Show interface GI 0/1

Front 9

Which of the following are difference between radius and tacacs

Back 9

Gradius combines authentication and authorization into a single function, tacacs the services to be split between different servers

Front 10

Which of the following terms identifies the network of dial-up telephones and long-distance lines

Back 10

Pstn

Front 11

You have just started a new job as a network team leader for a small company. You are responsible for overseeing the work ofHelp Desk technicians, as well as doing your own share of the administrative work.To improve the safety of your organization, you decide to assemble Material Safety Data Sheets (MSDS) for all chemicals used inyour organization.

Back 11

Download them from the chemical manufacturers website

Front 12

To access the Internet through the PSTN, what kind of connectivity device must you use?

Back 12

Modem

Front 13

Which of the following is the strongest form of multi­factorauthentication?

Back 13

A password, a biometric scan, and a tokendevice

Front 14

If your anti­virus software does not detect and remove a virus, what should you tryfirst?

Back 14

Update your virus detection software.

Front 15

Users on your network report that they have received an email stating that the company has just launched a new website. Theemail asks employees to click the website link in the email and log in using their username and password. No one in yourcompany has sent this email.What type of attack isthis?

Back 15

Phishing

Front 16

What is the most common failure of a security policy in anenvironment?

Back 16

Lack of userawareness

Front 17

You suspect that some of your computers have been hijacked and are being used to perform denial of service attacks directedagainst other computers on the Internet.Which log would you check to see if this is happening?

Back 17

Firewall

Front 18

You manage the website for your company. The website uses a cluster of two servers with a single shared storage device. Theshared storage device uses a RAID 1 configuration. Each server has a single connection to the shared storage, and a singleconnection to your ISP.You want to provide redundancy such that a failure in a single component does not cause the website to be unavailable. Whatshould you add to your configuration to accomplish this?

Back 18

Connect one server through a different ISP to theInternet

Front 19

What is the most important element related to evidence in addition to the evidenceitself?

Back 19

Chain of custody document

Front 20

Which network type divides transmitted data into smaller pieces and allows for multiple communications on the networkmedium?

Back 20

Packet­switched

Front 21

When duplicating a drive for forensic investigative purposes, which of the following copying methods is mostappropriate?

Back 21

Bit­levelcloning

Front 22

What is the speed of an OC­3connection?

Back 22

155 mbps

Front 23

Which of the following forms of networking are highly susceptible to eavesdropping and must be secured accordingly?

Back 23

Wireless

Front 24

When implementing a Multiprotocol Label Switching (MPLS) WAN, which data unit is managed by the routers at differentsites?

Back 24

PACKETS

Front 25

What is the main difference between a worm and avirus?

Back 25

A worm can replicate itself and does not need a host fordistribution.

Front 26

You have a site in your network that is connected to multiple other sites. A single virtual circuit is used to connect to all othersites. What type of connection is being used?

Back 26

Point ­to ­multipoin

Front 27

Which of the following devices accepts incoming client requests and distributes those requests to specificservers?

Back 27

Load balancer

Front 28

Which of the following devices can monitor a network and detect potential securityattacks?

Back 28

IDS

Front 29

Which protocol uses traps to send notifications from network devices?

Back 29

snmp

Front 30

Because of an unexplained network slowdown on your network, you decide to install monitoring software on several key networkhosts to locate the problem. You will then collect and analyze the data from a central network host.What protocol will the software use to detect theproblem?

Back 30

SNMP

Front 31

Which method can be used to verify that a bit­level image copy of a hard drive is an exact clone of the original hard drivecollected as evidence?

Back 31

Hashing

Front 32

In troubleshooting a router, you want to identify which other devices are connected to the router, as well as the subnetaddresses of each connected subnet.Which type of document would most likely have this information?

Back 32

Network diagram

Front 33

Each of the following are tools used to check the health of anetwork. Which of these is typically used for managing and sending messages from one computer system toanother?

Back 33

syslog

Front 34

A security administrator is conducting a penetration test on a network. She connects a notebook system running Linux to thewireless network and then uses NMAP to probe various network hosts to see which operating system they are running.Which process did the administrator use in the penetration test in thisscenario?

Back 34

Active fingerprinting

Front 35

Which of the following defines an acceptable useagreement?

Back 35

An agreement which identifies the employee's rights to use company property such as Internet access and computerequipment for personal use.

Front 36

Which of the following WAN technologies provides packet switching over high­quality digital lines at speeds greater than 1.544Mbps?I

Back 36

FrameRelay

Front 37

Which of the following is a security service that monitors network traffic in real time or reviews the audit logs on servers lookingfor security violations?

Back 37

IDS

Front 38

When recovery is being performed due to a disaster, which services are to be stabilizedfirst?

Back 38

Missioncritical

Front 39

You are troubleshooting a workstation connection to the network. During your troubleshooting, you replace the drop cableconnecting the computer to the network.Which type of document should you update?

Back 39

Change documentation

Front 40

Which of the following statements about ESD is notcorrect?

Back 40

ESD is much more likely to occur when the relative humidity is above50%

Front 41

A new law was recently passed that states that all businesses must keep a history of all e­mails sent between members of theboard of directors. You need to ensure that your organization complies with this law.Which document type would you update first in response to this new law?

Back 41

Policy

Front 42

You have a web server that will be used for secure transactions for customers who access the website over the Internet. Theweb server requires a certificate to support SSL.Which method would you use to get a certificate for theserver?O

Back 42

Obtain a certificate from a publicPKI.

Front 43

Which of the following terms describes a test lab environment that does not require the use of physicalhardware?

Back 43

Virtual sandbox

Front 44

You connect a packet sniffer to a switch to monitor frames on your local area network. However, the packet sniffer is only able tosee broadcast frames and frames addressed specifically to the host device.Which feature should you enable on the switch so you can see frames from all devices connected to theswitch

Back 44

Mirroring

Front 45

Which component of a Change and Configuration Management policy specifies options for reverting a system back to the state itwas in before a change was made?

Back 45

Rollback

Front 46

Which of the following is a mechanism for granting and validatingcertificates?

Back 46

PKI

Front 47

Which of the following information are you likely to find in a proceduredocument?

Back 47

Details on how to test and deploypatches.

Front 48

Which of the following is the best recommendation for applying hotfixes to yourservers?

Back 48

Apply only the hotfixes that apply to software running on your systems

Front 49

Which of the following can be used to stop piggybacking that has been occurring at a front entrance where employees shouldswipe their smart cards to gain entry?

Back 49

Deploy amantrap

Front 50

A healthcare organization provides mobile clinics throughout the world. Which network technology should you select to transferpatient statistical data to a central database via the Internet to ensure network connectivity for any clinic located anywhere in theworld, even remote areas?

Back 50

Satellite

Front 51

You are the network administrator for a growing business. When you were initially hired, the organization was small and only asingle switch and router were required to support your users. During this time, you monitored log messages from your routerand switch directly from each device's console.However, the organization has grown considerably in recent months. You now must manage 8 individual switches and threerouters. It's becoming more and more difficult to monitor these devices and stay on top of issues in a timely manner.What should you do?

Back 51

Use syslog to implement centralized logging.

Front 52

You manage a network that uses switches. In the lobby of your building are three RJ­45 ports connected to aswitch.You want to make sure that visitors cannot plug in their computers to the free network jacks and connect to the network.However, employees who plug into those same jacks should be able to connect to the network.What feature should you configure?

Back 52

Port authentication

Front 53

You need to find out what kind of laws might apply to the design and operation of your network. Which type of document wouldyou consult

Back 53

Regulation

Front 54

Which of the following is defined as a contract which prescribes the technical support or business parameters that a provider willbestow to its client?

Back 54

Service levelagreement

Front 55

Question 60: IncorrectYou want to allow traveling users to connect to your private network through the Internet. Users will connect from variouslocations including airports, hotels, and public access points such as coffee shops and libraries. As such, you won't be able toconfigure the firewalls that might be controlling access to the Internet in these locations.Which of the following protocols would be most likely to be allowed through the widest number offirewalls?

Back 55

SSL

Front 56

Which of the following Internet services provides equal upload and download bandwidth?

Back 56

SDSL

Front 57

You have a series of WAN links that connects your site to multiple other sites. Each remote site is connected to your site using adedicated link.What type of connection is being used?

Back 57

Point ­to­ point

Front 58

You are interested in identifying the source of potential attacks that have recently been directed against your network but whichhave been successfully blocked.Which log would you check?

Back 58

Firewall

Front 59

You have recently experienced a security incident with one of your servers. After some research, you determine that the hotfix#568994 that has recently been released would have protected the server.Which of the following recommendations should you follow when applying the hotfix?

Back 59

Test the hotfix, then apply it to allservers.

Front 60

Which of the following is a policy that defines appropriate and inappropriate activities and usage for company resources, assets,and communications?

Back 60

Acceptable usepolicy

Front 61

You are reviewing the output of the show interfaces command for the Gi0/1 interface on aswitch. Which interface statistic displays the number of collisions that occurred after the 64th byte of the frame wastransmitted?

Back 61

Late collisions

Front 62

Which of the following devices is used on a WAN to convert synchronous serial signals into digitalsignals?

Back 62

CSU/DSU

Front 63

Which of the following is a text file provided by a website to a client that is stored on a user's hard drive in order to track andrecord information about the user?

Back 63

Cookie

Front 64

Your organization's security policy specifies that any mobile device (regardless of ownership) that connects to your internalnetwork must have remote wipe enabled. If the device is lost or stolen, then it must be wiped to remove any sensitive data fromit.Your organization recently purchased several Windows RT tablets. Which should you do?

Back 64

Sign up for a Microsoft Intune account to manage thetablets

Front 65

Even if you perform regular backups, what must be done to ensure that you are protected against dataloss?

Back 65

Regularly test restorationprocedures

Front 66

Over the last month you have noticed a significant increase in the occurrence of inappropriate activities performed by employees.What is the best first response step to take in order to improve or maintain the security level of the environment?

Back 66

Improve and hold new awareness sessions

Front 67

You have a group of salesmen who would like to access your private network through the Internet while they are traveling. Youwant to control access to the private network through a single server.Which solution should you implement?

Back 67

VPN concentrator

Front 68

The chain of custody is used for what purposes?

Back 68

Listing people coming into contact with evidence

Front 69

Which of the following protocols can be used to centralize remote accessauthentication?

Back 69

TACACS

Front 70

A smart phone was lost at the airport. There is no way to recover the device. Which if the following will ensure dataconfidentiality on the device?

Back 70

Remotewipe

Front 71

You often travel away from the office. While traveling, you would like to use a modem on your laptop computer to connectdirectly to a server in your office and access files on that server that you need.You want the connection to be as secure as possible. Which type of connection will youneed?

Back 71

Remoteaccess

Front 72

Which of the following attacks tries to associate an incorrect MAC address with a known IPaddress?

Back 72

ARP poisoning

Front 73

Which of the following is a WAN technology that allows for interoperability of vendor hardware for fiber opticnetworking?

Back 73

SONET

Front 74

Which of the following uses hacking techniques to proactively discover internalvulnerabilities?

Back 74

Penetrationtesting

Front 75

You want to increase the security of your network by allowing only authenticated users to be able to access network devicesthrough a switch.Which of the following should you implement?

Back 75

802.1x

Front 76

If an organization shows sufficient due care, which burden is eliminated in the event of a securitybreach?

Back 76

Negligence

Front 77

An attacker sets up 100 drone computers that flood a DNS server with invalid requests. This is an example of which kind ofattack?

Back 77

DDoS

Front 78

Which type of Internet service uses the DOCSISspecification?

Back 78

Coaxialcable

Front 79

Which of the following protocols can be used to securely manage a network device from a remoteconnection?

Back 79

SSH

Front 80

You manage a firewall that connects your private network to the Internet. You would like to see a record of every packet that hasbeen rejected by the firewall in the past month.Which tool should you use?

Back 80

Event log

Front 81

Which of the following statements about the use of anti­virus software iscorrect?

Back 81

Anti­virus software should be configured to download updated virus definition files as soon as they becomeavailable

Front 82

Anti­virus software should be configured to download updated virus definition files as soon as they becomeavailable

Back 82

CSU/DSU

Front 83

You manage a network that uses switches. In the lobby of your building are three RJ­45 ports connected to aswitch.You want to make sure that visitors cannot plug in their computers to the free network jacks and connect to the network.However, employees who plug into those same jacks should be able to connect to the network.What feature should you configure?

Back 83

Port authentication

Front 84

You are in the habit of regularly monitoring performance statistics for your devices. You find that this month a specific server hasaveraged a higher number of active connections than last month.Which type of document should you update to reflect the change?

Back 84

Baseline

Front 85

Which of the following is a standard for sending log messages to a central loggingserver?

Back 85

Syslog

Front 86

You walk by the server room and notice a fire has started. What should you dofirst?

Back 86

Make sure everyone has cleared thearea.

Front 87

What type of malware monitors youractions?

Back 87

Spyware

Front 88

What security mechanism can be used to detect attacks originating on the Internet or from within an internal trustedsubnet?S

Back 88

IDS

Front 89

Which of the following is the most common detection method used by an IDS?

Back 89

Signature

Front 90

Consider the network shown in the exhibit.When you run the show interfaces command on switch1, you observe a significant number of runts on the Gi0/1 interface.What does this statisticindicate

Back 90

Collisions are occurring.

Front 91

What is the most effective means of improving or enforcing security in anyenvironment?

Back 91

User awarenesstraining

Front 92

Members of the Sales team use laptops to connect to the company network. While traveling, they connect their laptops to theInternet through airport and hotel networks.You are concerned that these computers will pick up viruses that could spread to your private network. You would like toimplement a solution that prevents the laptops from connecting to your network unless anti­virus software and the latestoperating system patches have been installed.Which solution should you use?

Back 92

NAC

Front 93

RADIUS is primarily used for what purpose?

Back 93

Authenticating remote clients before access to the network isgranted

Front 94

Which of the following services are available regardless of whether the telephone company network isavailable?

Back 94

Cable modem

Front 95

What is the primary goal of business continuity planning?

Back 95

Maintaining business operations with reduced or restricted infrastructure capabilities orresources

Front 96

Your company has developed and implemented countermeasures for the greatest risks to their assets. However, there is stillsome risk left. What is the remaining risk called?

Back 96

Residualrisk

Front 97

Which of the following is most susceptible to interference related to atmosphericconditions?

Back 97

Satellite

Front 98

Which of the following network strategies connects multiple servers together such that if one server fails, the others immediatelytake over its tasks, preventing a disruption in service?

Back 98

Clustering

Front 99

Which of the following technologies uses variable­length packets and adds labels to packets as they enter the WAN cloud, withthe labels being used to switch packets and prioritize traffic?

Back 99

MPLS

Front 100

As a security precaution, you have implemented IPsec that is used between any two devices on your network. IPsec providesencryption for traffic between devices.You would like to implement a solution that can scan the contents of the encrypted traffic to prevent any maliciousattacks. Which solution should you implement?

Back 100

Host­based IDS

Front 101

You want to be able to identify traffic that is being generated and sent through the network by a specific application running on adevice.Which tool should you use?

Back 101

Protocol analyzer

Front 102

Which of the following networking devices or services prevents the use of IPsec in mostcases?

Back 102

NAT

Front 103

Why should backup media be stored offsite?

Back 103

To prevent the same disaster from affecting both the network and the backupmedia

Front 104

You've just deployed a new Cisco router that connects several network segments in yourorganization.The router is physically located in a server room that requires an ID card to gain access. You've backed up the routerconfiguration to a remote location in an encrypted file. You access the router configuration interface from your notebookcomputer by connecting it to the console port on the router. You configured the management interface with a user name ofadmin and a password of password.What should you do to increase the security of thisdevice?

Back 104

Use a stronger administrativepassword.

Front 105

Use a stronger administrativepassword.

Back 105

DSL

Front 106

Question 111: IncorrectWhich of the following protocols or services would you associate with Window's Remote Desktop Services networktraffic?

Back 106

RDP

Front 107

What is the greatest threat to the confidentiality of data in most secureorganizations?

Back 107

usb devices

Front 108

Purchasing insurance is what type of response to risk

Back 108

Transference

Front 109

Which type of device is required to implement port authentication through aswitch?

Back 109

RADIUS server

Front 110

Which of the following is an example of an internalthreat

Back 110

A user accidentally deletes the new productdesigns

Front 111

Your client has acquired several small companies and would like to connect them together into one network. Not all of therouters are Cisco devices and compatibility is a concern.Which WAN encapsulation method should you recommend your client use?

Back 111

PPP

Front 112

Components within your server room are failing at a rapid pace. You discover that the humidity in the server room is at 60% andthe temperature is at 80 degrees.What should you do to help reduce problems?

Back 112

Add a separate A/C unit in the serverroom

Front 113

What is the primary purpose of penetrationtesting?

Back 113

Test the effectiveness of your securityperimeter

Front 114

You want to know what protocols are being used on your network. You'd like to monitor network traffic and sort traffic based onprotocol.Which tool should you use?

Back 114

Packetsniffe

Front 115

You decide to use a packet sniffer to identify the type of traffic sent to a router. You run the packet sniffing software on a devicewhich is connected to the same hub that is connected to the router.When you run the software, you only see frames addressed to the workstation and not otherdevices. Which feature should you configure?

Back 115

Promiscuous mode