024.1 Networks, Network Services and the Internet (weight: 4) SECURITY-ESSENTIALS Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is implementing a secure remote access solution for employees. They want to ensure that all traffic between the employee's device and the company network is encrypted, but they also want to minimize the overhead on the employee's device. Which solution should they choose?

   • AAn IDS that monitors traffic for suspicious activity.
   • BA full-tunnel VPN that encrypts all traffic from the device.
   • CA firewall that blocks all outbound traffic except to the company network.
   • DA split-tunnel VPN that encrypts only traffic destined for the company network.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company has two offices connected via the internet. They want to ensure that all traffic between the offices is encrypted and authenticated. They are considering using IPsec in tunnel mode. What is a key advantage of using IPsec in tunnel mode for this scenario?

   • AIt provides a secure tunnel between two networks, allowing all traffic between the networks to be protected without requiring individual hosts to run IPsec.
   • BIt allows the use of NAT traversal, which is not possible with other VPN protocols.
   • CIt encrypts the entire IP packet, including the original IP header, providing end-to-end security between hosts.
   • DIt encrypts only the payload of the IP packet, leaving the header in clear text, which reduces overhead.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which statement correctly describes the difference between a LAN and a WAN?

   • AA LAN uses wireless technology exclusively, while a WAN uses wired connections only.
   • BA LAN connects devices within a city, while a WAN connects devices within a single room.
   • CA LAN covers a small geographic area, such as a single building, while a WAN spans larger distances, often connecting multiple LANs.
   • DA LAN is owned by a single organization, while a WAN is always publicly owned.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network administrator notices that a server is sending an unusually high number of SYN packets to a single external host, and the external host is responding with SYN-ACK packets that the server never completes. This pattern repeats continuously. What type of attack is most likely occurring?

   • AA DNS spoofing attack redirecting the server's requests
   • BA man-in-the-middle attack intercepting the server's traffic
   • CAn eavesdropping attack capturing the server's data
   • DA distributed denial-of-service (DDoS) attack against the external host
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the function of data centers in the architecture of the Internet?

   • AThey house servers and networking equipment that host websites and services.
   • BThey provide the primary routing paths between continents.
   • CThey encrypt all data transmitted over the Internet.
   • DThey assign IP addresses to devices on the Internet.
   Reveal Solution Discussion Select an answer first