Drag and Drop Matching Questions

Authorization: Determines what actions or resources an authenticated user is permitted to access.

Why wrong: This is incorrect because authorization controls access rights and privileges, not identity verification. The definition given is correct for authorization, but the question asks for the definition of authentication.

Accounting: Logs and tracks user activities, such as login times, commands executed, and data usage.

Why wrong: This is incorrect because accounting is about logging and auditing, not identity verification. The definition is accurate for accounting, but the question asks for authentication.

RADIUS: A protocol that provides centralized authentication, authorization, and accounting for network access.

Why wrong: This is incorrect because RADIUS is a protocol used to implement AAA, not a definition of authentication itself. The question asks for the definition of authentication, not a protocol.

UDRs: Routes that are dynamically exchanged with on-premises networks.

Why wrong: This is incorrect because UDRs (User-Defined Routes) are custom routes manually configured by an administrator to override system routes, not dynamically exchanged.

BGP routes: Routes that override system routes when manually configured.

Why wrong: This is incorrect because BGP routes are dynamically learned via the Border Gateway Protocol, not manually configured to override system routes. UDRs are used for overriding.

System routes: Routes that are dynamically exchanged with on-premises networks.

Why wrong: This is incorrect because system routes are default routes created automatically by the system, not dynamically exchanged with on-premises networks. Dynamic exchange is a characteristic of BGP.

Phishing: A type of malware that encrypts files and demands payment for decryption.

Why wrong: This is incorrect because the description refers to ransomware, not phishing. Ransomware encrypts data and demands a ransom, while phishing is a social engineering attack.

Phishing: An attack that overwhelms a network with traffic to disrupt services.

Why wrong: This is incorrect because the description defines a DDoS (Distributed Denial of Service) attack, not phishing. Phishing does not involve overwhelming traffic.

Phishing: An attack that intercepts communications between two parties to steal data.

Why wrong: This is incorrect because the description defines a Man-in-the-Middle (MitM) attack, not phishing. MitM involves eavesdropping or altering communications.

BSSID: The MAC address of the access point's radio interface, used to uniquely identify a BSS.

Why wrong: This is incorrect because BSSID is indeed the MAC address of the AP's radio, but the description is accurate; however, the correct answer for the given description is SSID. This option is a distractor that matches a different term.

RSSI: A measurement of the power level of the received radio signal, indicating signal strength.

Why wrong: This is incorrect because RSSI (Received Signal Strength Indicator) measures signal strength, but the description in the question is for SSID. This option correctly defines RSSI but does not match the given description.

DFS: A mechanism that allows wireless devices to avoid interference with radar systems by dynamically selecting channels.

Why wrong: This is incorrect because DFS (Dynamic Frequency Selection) is a channel selection mechanism to avoid radar, not a network name. The description in the question is for SSID.

Service Set Identifier (SSID)

Why wrong: This is incorrect because the SSID is the network name that identifies a wireless network, not a device that connects wireless to wired.

Basic Service Set (BSS)

Why wrong: This is incorrect because a BSS describes a single AP with its associated clients, not the device that connects wireless to wired.

Wireless LAN Controller (WLC)

Why wrong: This is incorrect because a WLC manages multiple APs centrally, but it does not directly connect wireless clients to the wired network; that is the AP's role.

Firewall: Detects and alerts on suspicious activity

Why wrong: This is incorrect because detection and alerting on suspicious activity is the primary function of an Intrusion Detection System (IDS), not a firewall. Firewalls focus on filtering traffic based on rules, not on analyzing patterns for threats.

Firewall: Prevents and blocks intrusions in real time

Why wrong: This is incorrect because real-time prevention and blocking of intrusions is the function of an Intrusion Prevention System (IPS). While a firewall can block traffic, it does not analyze traffic for intrusion signatures like an IPS does.

Firewall: Authenticates users and manages access rights

Why wrong: This is incorrect because authentication and access rights management are functions of AAA (Authentication, Authorization, and Accounting) services, not a firewall. Firewalls may integrate with AAA but do not primarily manage user access.

SIEM: Manages network device configurations and monitors device health via SNMP.

Why wrong: This is incorrect because SIEM does not manage device configurations or use SNMP for health monitoring; those functions belong to network management systems like SNMP-based tools.

SIEM: Analyzes network traffic flows to identify bandwidth usage and application performance.

Why wrong: This is incorrect because traffic flow analysis is the role of NetFlow or similar flow monitoring tools, not SIEM.

SIEM: Controls user access to network resources based on roles and policies.

Why wrong: This is incorrect because role-based access control (RBAC) is the mechanism for managing user permissions, not SIEM.

Packet loss causes intermittent connectivity

Why wrong: Packet loss can cause intermittent connectivity, but the question asks for the most likely service involved. Packet loss is a symptom, not a service. The service most associated with packet loss is not a single service; it is a network condition.

Bandwidth congestion slows transfers

Why wrong: Bandwidth congestion can slow transfers, but it is a network condition, not a specific service. The question asks for the service involved, and bandwidth congestion is not a service.

Jitter affects real-time services

Why wrong: Jitter affects real-time services like VoIP and video, but the question asks for the most likely service involved. Jitter is a symptom, not a service. The service affected is real-time communication, but the symptom itself is jitter.

Puppet

Why wrong: Puppet uses a master-agent model where agents run on managed nodes and pull configurations from a master server, requiring agent installation.

Chef

Why wrong: Chef uses a master-agent model with agents (chef-client) installed on nodes, and configurations are defined in recipes and cookbooks.

SaltStack

Why wrong: SaltStack can operate in both agentless (via SSH) and agent-based modes, but its primary model uses a master-minion architecture with agents.

Subnet mask

Why wrong: The subnet mask separates the network and host portions of an IP address, but it does not identify a device.

Default gateway

Why wrong: The default gateway is the router that forwards traffic to other networks, not a device identifier.

DNS server

Why wrong: A DNS server resolves domain names to IP addresses, but does not identify a device on the network.

AAAA record: Maps a domain name to an IPv6 address

Why wrong: This is incorrect because the AAAA record maps a hostname to an IPv6 address, not an IPv4 address. The description given is for an A record.

CNAME record: Maps an alias domain name to another canonical domain name

Why wrong: This is incorrect because the CNAME record provides an alias for a domain name, not a direct mapping to an IP address. The description given is for an A or AAAA record.

MX record: Maps a domain name to a mail exchange server

Why wrong: This is incorrect because the MX record specifies the mail server responsible for accepting email on behalf of a domain, not a generic IP address mapping. The description given is for an A record.

Cat6 UTP: 100 meters, 10 Gbps

Why wrong: Cat6 UTP supports 10 Gbps only up to 55 meters; at 100 meters it is limited to 1 Gbps.

Single-mode fiber with 1000BASE-LX: 5 km, 1 Gbps

Why wrong: 1000BASE-LX on single-mode fiber supports up to 5 km at 1 Gbps, but the correct pairing for 5 km is actually 1000BASE-LX; however, the question expects a different correct answer.

Multimode fiber with 1000BASE-SX: 550 meters, 1 Gbps

Why wrong: 1000BASE-SX on multimode fiber supports up to 550 meters at 1 Gbps, but this is not the correct match for the given descriptions.