Explain How Network Addresses Impact Network Security 100-160 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security analyst is investigating a suspicious device on the network. The device has an IP address of 192.168.1.50 and a MAC address of 00:1A:2B:3C:4D:5E. The analyst notices that the device is sending ARP replies claiming to be the default gateway (192.168.1.1). Which type of attack is this, and what is the best immediate mitigation?

   • AARP spoofing; enable Dynamic ARP Inspection (DAI) on the switch.
   • BMAC flooding; enable port security on the switch.
   • CIP address spoofing; configure IP Source Guard on the switch.
   • DARP spoofing; configure static ARP entries on the switch for the gateway.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security administrator is reviewing the firewall logs and sees many inbound connection attempts to the public IP address of the company's NAT router on port 3389 (RDP). The router is configured to forward RDP to an internal management server. What is the most effective way to reduce the risk of unauthorized RDP access?

   • ADisable the RDP service on the internal server and use a different remote access tool.
   • BChange the internal server's IP address to a different private address.
   • CRestrict the source IP addresses allowed to reach the RDP port using an access control list on the router.
   • DMove the RDP service to a non-standard port on the router.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Given the CIDR block 10.0.0.0/28, how many usable host addresses are available in each subnet?

   • A30
   • B32
   • C16
   • D14
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a key security consideration when using public IP addresses on devices directly connected to the internet?

   • AThey are reachable from anywhere on the internet, increasing exposure to attacks.
   • BThey are automatically protected by NAT.
   • CThey are not routable on the internet.
   • DThey are only accessible from within the local network.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary security benefit of network segmentation?

   • AIt increases the broadcast domain size.
   • BIt limits the spread of attacks by isolating traffic between segments.
   • CIt eliminates the need for firewalls.
   • DIt encrypts all data on the network.
   Reveal Solution Discussion Select an answer first