Network Security Fundamentals CCT Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A security analyst notices a high volume of TCP SYN packets sent to a web server from many different source IP addresses, but the server never sends SYN-ACK responses. The server's connection table is full, and legitimate users cannot connect. Which type of attack is this, and which control would best mitigate it?

   • ASYN flood; enable SYN cookies on the server or deploy a stateful firewall with SYN proxy
   • BUDP flood; configure rate limiting on the router
   • CPing flood; configure a host-based firewall to block ICMP
   • DDNS amplification; block port 53 traffic
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which type of attack involves sending a large volume of traffic to a target system to exhaust its resources and make it unavailable to legitimate users?

   • ADenial-of-service (DoS)
   • BSQL injection
   • CMan-in-the-middle
   • DPhishing
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company's web server is experiencing intermittent slowdowns. The network team notices that the server is receiving a high volume of HTTP GET requests for a specific URL, each from a different source IP. The requests appear to be from legitimate browsers. Which type of attack is most likely occurring?

   • ADistributed denial-of-service (DDoS) attack
   • BSQL injection attack
   • CMan-in-the-middle attack
   • DDNS spoofing attack
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A small law firm wants to allow remote paralegals to access internal case-management systems over the internet. The firm is concerned about eavesdropping on public Wi-Fi and wants to enforce encrypted tunnels for all remote access. Which solution should the administrator implement?

   • AInstall a network-based intrusion detection system at the office perimeter
   • BEnable port forwarding on the office firewall to expose the case-management server directly
   • CDeploy an SSL/TLS VPN gateway that authenticates users and encrypts their traffic
   • DConfigure a site-to-site IPsec VPN between the firm's office and each paralegal's home router
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A company is implementing a new remote access solution. The security team wants to ensure that remote employees can securely access internal resources while also preventing unauthorized devices from connecting. Which combination of controls would best meet these requirements?

   • AVPN with multi-factor authentication and endpoint compliance checks.
   • BRemote desktop protocol (RDP) over the internet.
   • CA firewall rule that allows all remote access traffic.
   • DVPN with a strong password policy.
   Reveal Solution Discussion Select an answer first