Network Attacks and Defense Strategies CND Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary goal of a password attack such as a brute-force attack?

   • ATo guess or crack a user's password to gain unauthorized access
   • BTo flood a network with traffic
   • CTo intercept encrypted communications
   • DTo trick users into revealing passwords via fake emails
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A network administrator is investigating reports of intermittent connectivity issues in a specific area of the office. A wireless site survey reveals an unauthorized access point broadcasting the same SSID as the company's legitimate network, but with a stronger signal. What is the most likely attack, and what is the immediate response?

   • ARogue access point attack; reconfigure the legitimate access points to use a different channel.
   • BMan-in-the-middle attack; implement 802.1X authentication on the wireless network.
   • CEvil twin attack; disable the unauthorized access point and add its MAC address to a blocklist.
   • DWPA cracking attack; change the wireless password immediately.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of network segmentation?

   • ATo replace the need for firewalls
   • BTo increase network speed by adding more bandwidth
   • CTo simplify IP address management
   • DTo limit the spread of an attack by isolating network segments
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary difference between a DoS attack and a DDoS attack?

   • AA DDoS attack uses multiple distributed sources, while a DoS attack uses a single source
   • BA DoS attack uses malware, while a DDoS attack does not
   • CA DDoS attack is always more severe than a DoS attack
   • DA DoS attack targets availability, while a DDoS attack targets confidentiality
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   Employees report intermittent Wi-Fi connectivity and see two access points with the same SSID in their list of available networks. The network defender suspects an evil twin attack. Which immediate action would best confirm this suspicion?

   • ADisable the SSID broadcast
   • BChange the Wi-Fi password
   • CCheck the signal strength of the access points
   • DCompare the BSSID (MAC address) of the access points
   Reveal Solution Discussion Select an answer first