100-150 Security Practice Test 2 — 15 Questions

Question 1

Which TWO of the following are valid methods for securing the administrative access of a Cisco device?

Accepted Answer

Configuring SSH for remote management. Securing administrative access is paramount to preventing total network compromise. Using AAA for centralized authentication and disabling insecure protocols like Telnet are standard industry practices. These steps ensure that access is limited to authorized personnel and that credentials are not exposed during transit. In an enterprise environment, these controls are the first line of defense against both internal and external threats, ensuring only trusted users can modify configurations.

Answer

Allowing all traffic via ACL on management interfaces

Answer

Enabling the HTTP server

Answer

Sharing a single admin password for all devices

Question 2

What is the primary function of a firewall when placed at the edge of a network?

Accepted Answer

To filter traffic based on security policies. A firewall acts as the security boundary between an internal trusted network and an untrusted external network like the internet. By enforcing security policies based on traffic inspection, it prevents unauthorized access and limits potential threats. This is a crucial component of any security strategy, as it provides a centralized point to filter traffic, monitor for suspicious patterns, and maintain the integrity of the internal network infrastructure.

Answer

To increase the network bandwidth

Answer

To provide automatic physical layer redundancy

Answer

To automatically patch all internal servers

Question 3

Refer to the exhibit. What is the effect of the 'ip dhcp snooping trust' command on the designated interface?

Accepted Answer

It permits DHCP server messages on the port.. In DHCP Snooping, ports are untrusted by default. The 'trust' command marks an interface as connected to a legitimate DHCP server, allowing DHCPOFFER and DHCPACK messages to pass through. Without this command, the switch would drop these server-originated messages on that port, preventing clients from receiving IP addresses. This is critical for controlling which DHCP servers are allowed to interact with the network, thereby mitigating unauthorized server attacks.

Answer

It forces the port to drop all DHCP traffic.

Answer

It enables port security on the interface.

Answer

It prevents ARP spoofing on the port.

Question 4

A small business owner wants to ensure that internal financial records are only viewed by authorized management personnel. Which pillar of the CIA triad is primarily addressed by implementing restricted folder permissions and encryption for these files?

Accepted Answer

Confidentiality. Confidentiality ensures that sensitive information is accessible only to those authorized to view it. In a networking context, this involves using access control lists, encryption, and strict authentication methods. Protecting financial data from unauthorized eyes is a fundamental security requirement for any organization to prevent data leaks and maintain privacy.

Answer

Integrity

Answer

Availability

Answer

Accounting

Question 5

Which port security violation mode will drop packets from an unauthorized MAC address, increment the security violation counter, and send a syslog message, but will not shut down the interface?

Accepted Answer

Restrict. Port security is a Layer 2 feature that limits the number of MAC addresses allowed on a switch port to prevent MAC flooding attacks. By defining specific violation actions, administrators can control how the switch reacts when an unauthorized device connects. Understanding these modes is essential for maintaining physical port integrity.

Answer

Protect

Answer

Sticky

Answer

Shutdown

Question 6

An employee receives an email that appears to be from the company's IT department, requesting their login credentials to perform an urgent system update. What type of social engineering attack does this represent?

Accepted Answer

Phishing. Social engineering relies on psychological manipulation to trick individuals into divulging confidential information or performing actions that compromise security. Phishing is the most common form of this attack, often delivered via email. Training employees to recognize these deceptive tactics is a critical part of a modern security awareness program.

Answer

Tailgating

Answer

Shoulder Surfing

Answer

Man-in-the-Middle

Question 7

Which component of the AAA security framework is responsible for determining which specific commands a user is permitted to execute on a Cisco router after they have successfully logged in?

Accepted Answer

Authorization. The AAA framework (Authentication, Authorization, and Accounting) provides a modular way to manage access control. Each component serves a distinct purpose in securing network devices. Understanding how these functions interact allows administrators to implement granular security policies that restrict user actions to only what is necessary for their job.

Answer

Authentication

Answer

Accounting

Answer

Availability

Question 8

A company requires employees to use both a password and a one-time code sent to their mobile device to access the corporate VPN. Which security concept is being implemented?

Accepted Answer

Multi-Factor Authentication (MFA). Multi-Factor Authentication (MFA) significantly improves security by requiring two or more independent credentials for identity verification. This makes it much harder for an attacker to gain access, as stealing a password alone is no longer sufficient. MFA is a standard requirement for protecting remote access and sensitive data.

Answer

Single Sign-On (SSO)

Answer

Biometric Authentication

Answer

Role-Based Access Control (RBAC)

Question 9

A network administrator needs to implement a VPN solution. Which TWO types of VPNs are commonly used in enterprise environments? (Choose TWO).

Accepted Answer

Site-to-site VPN. Virtual Private Networks (VPNs) create secure, encrypted tunnels over untrusted networks like the internet. They are essential for protecting data in transit and extending the reach of a private network to distant locations or mobile users. Technicians must understand these types to select the appropriate solution for business requirements.

Answer

VLAN VPN

Answer

DMZ VPN

Answer

Hub-and-Spoke VPN

Question 10

Which THREE features are introduced or enhanced in WPA3 to improve wireless security compared to WPA2? (Choose THREE).

Accepted Answer

Simultaneous Authentication of Equals (SAE). WPA3 is the latest generation of Wi-Fi security, providing significant improvements over WPA2. It addresses several known vulnerabilities, such as offline dictionary attacks and the lack of forward secrecy. Understanding these enhancements is vital for technicians responsible for deploying modern, secure wireless networks that protect sensitive data from sophisticated threats.

Answer

Support for WEP backward compatibility

Answer

TKIP encryption by default

Question 11

A network technician is selecting devices to protect a corporate network from external threats. Which TWO devices provide active threat mitigation by inspecting and blocking malicious traffic? (Choose TWO).

Accepted Answer

Firewall. Network security requires a multi-layered approach to protect against diverse threats. Firewalls and Intrusion Prevention Systems (IPS) are two fundamental components that work together to secure the perimeter and internal segments. Understanding the distinct roles these technologies play helps technicians design robust networks that can both block bad traffic and detect anomalies.

Answer

Antivirus

Answer

Honeypot

Answer

Load Balancer

Question 12

A technician is configuring DHCP snooping on a Cisco switch to prevent rogue DHCP servers. On which type of port should the technician apply the 'ip dhcp snooping trust' command?

Accepted Answer

Ports connected to legitimate DHCP servers or uplinks. DHCP snooping is a security feature that acts like a firewall between untrusted hosts and trusted DHCP servers. It builds a binding database of leased IP addresses to prevent various attacks. Correctly identifying trusted versus untrusted ports is the most critical step in implementing this feature without disrupting legitimate network services.

Answer

All access ports

Answer

Only ports connected to printers

Answer

Ports connected to end-user workstations

Question 13

A company wants to prevent unauthorized individuals from entering the server room by following closely behind an employee. Which physical security control is specifically designed to address this risk?

Accepted Answer

Mantrap. Physical security is the first line of defense for any organization. It protects the hardware and infrastructure that host critical data and services. Controls like mantrap systems and security guards are used to manage human access to sensitive areas. Understanding these physical measures is as important as knowing logical security for comprehensive protection.

Answer

Biometric scanner

Answer

Video surveillance (CCTV)

Answer

Proximity card reader

Question 14

A user discovers that all their files have been encrypted and a message is displayed demanding payment in exchange for the decryption key. What type of malware has infected the system?

Accepted Answer

Ransomware. Malware comes in many forms, each with unique characteristics and objectives. Ransomware has become one of the most significant threats to organizations, often leading to total operational shutdown. Recognizing the behavior of different malware types allows technicians to implement better defense strategies and respond more effectively when an infection is detected.

Answer

Computer worm

Answer

Trojan horse

Answer

Spyware

Question 15

A network administrator needs to prevent unauthorized devices from connecting to a switch port while ensuring that only a specific workstation can access the network. Which security feature should be implemented?

Accepted Answer

Port Security. Port security limits the number of valid MAC addresses allowed on a port and binds a specific MAC address to a physical interface. This prevents unauthorized devices from spoofing addresses or connecting rogue hardware to the enterprise network. Implementing this feature is a fundamental step in securing the access layer against layer 2 attacks like MAC flooding or unauthorized device insertion, ensuring only authenticated hardware gains link connectivity.

Answer

DHCP Snooping

Answer

Dynamic ARP Inspection

Answer

VLAN Trunking Protocol