EC-Council Network Defense Essentials (NDE) Practice Test

These questions are part of the practice quiz. Start practicing

• Which menu contains items to navigate to a specific packet including a previous packet, the next packet, the corresponding packet, the first packet, and the last packet?
• In symmetric-key cryptosystems, what is true about the keys?
• Policy Description Based on Requirement is best described as:
• Which SIEM capability provides static and dynamic monitoring of enterprise systems and networks and analyzes log data to identify suspected activities related to system compromise?
• RADIUS is best described as what?
• Which RAID level stripes data across multiple drives with parity distributed among the drives (not a dedicated parity drive)?
• Which act provides federal protections for health information and grants patients rights to that information?
• Which term describes an action performed by a subject on an object?
• Which term describes wireless network interface cards that locate and communicate to an access point, providing network access for users?
• Electromagnetic Interference (EMI) shielding is used to address problems caused by what?
• Which policy helps in managing devices securely in BYOD environments, reducing support costs, mitigating security risks, and reducing business discontinuity?
• Protocol anomaly detection relies on protocol-specific anomalies and identifies flaws in vendors' deployment of the TCP/IP protocol. Which detection approach is this?
• Which honeypot-based tool is a host-based IDS that attracts attackers by simulating vulnerable services?
• Which backup type copies all files and is commonly scheduled to run regularly?
• Which act provides a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support federal operations and assets?
• What function does the Go menu provide?
• Which of the following is mentioned as a displayed statistic window in the menu?
• Which cipher family includes Beale cipher, autokey cipher, Gronsfeld cipher, and Hill cipher?
• In containerized environments using Docker, which networking construct creates a Linux bridge on the host?
• What happens in Kubernetes when a node dies?
• Which hashing algorithm uses a sponge construction and is designed to complement SHA-2?
• What does IDaaS stand for in cloud services?
• Which statement best reflects the need to implement both preventive and reactive approaches for network security?
• Which act is designed to protect health information held by covered entities and ensure patient rights to that information?
• Which act enacted to protect the public and investors by increasing the accuracy and reliability of corporate disclosures?
• Which of the following is NOT a named access control model described in the material?
• Which ISO/IEC TR is designed to guide financial services in implementing ISMS?
• DSA produces what size digital signature and security level?
• Which concept refers to the tracking and examining of the activities of network devices to identify weaknesses in the network?
• The need for this came into existence when it became difficult to implement the authorization process individually for each resource.
• High-level Security Requirements primarily focus on which areas?
• Which rule requires administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronically protected health information?
• Which layer is associated with ZigBee, Z-Wave, or Bluetooth for inter-device communications?
• Which menu includes options to manipulate, display and apply filters, enable or disable protocol dissection, configure user-specified decodes, and follow a different stream including TCP, UDP, and SSL.
• Which model assigns permissions to a user role dynamically based on administrator-defined rules?
• Which term describes virtualization that uses storage area network (SAN) technology to pool storage for multiple virtual machines?
• Which 802.11 amendment extends the standard to a maximum bandwidth of 54 Mbps using OFDM in the 2.4 GHz band?
• A free password security and password recovery tool that supports many operating systems.
• Which component provides nonvolatile storage for the RAID system's primary cache?
• Block Interleaved Distributed Parity describes a RAID level that stripes data across multiple drives with parity shared across all members. Which RAID level uses this parity scheme?
• Which caching proxy for the web supports HTTP, HTTPS, FTP, and more, reducing bandwidth by caching and reusing content?
• Which CNM component lies between a sandbox and the transport network, enabling portability across different network drivers?
• Which UI element filters the traffic based on filter options?
• Network/IP CCTV cameras can be wired or wireless and transmit images over the Internet. Which statement is correct?
• What term refers to a network that spans a metropolitan area and is used to provide broadband access, often using exterior antennas?
• Which field helps determine whether a packet is from a valid source?
• Which DoS tool is described as a network stress testing and DoS attack application commonly used to test the resilience of web services?
• ISO/IEC TR 27015 is the ISMS implementation guide for which industry?
• An omnidirectional antenna provides what pattern?
• Which term is used to describe software and services enabling an organization to secure, manage, and distribute enterprise applications on user mobile devices, without interfering with personal apps and data?
• Standpipe systems provide water to hose lines by connecting to the water supply. Which statement is true?
• Which honeypot type emulates the real production network and aims to draw attackers toward the production system?
• Which principle applies to the IoT communication layer, focusing on machine-to-machine identification, authentication, and encryption rather than human credentials?
• Security Concept of Operation defines what?
• Which menu can start, stop, or restart capture and edit capture filters?
• Which UI element allows filtering the traffic being displayed in the capture window?
• Zigbee is the specification used in which IEEE standard?
• Which controls are used to prevent unauthorized access to resources and may include fences, locks, biometrics, and mantraps?
• Displays the captured packets?
• An anomaly is detected when an event occurs outside the tolerance threshold of normal traffic. Which detection approach does this describe?
• WPA3 employs which encryption and authentication scheme?
• In remote control via mobile apps, which hardware constitutes the IoT ecosystem endpoints?
• This connects a sandbox to a network and abstracts the actual connection to the network from the application. An endpoint aids in maintaining portability, to enable the service to utilize various types of network drivers
• Which Docker networking construct is created with the overlay driver and enables container-to-container communication over the physical network infrastructure?
• Which layer provides dashboards for monitoring and proactive decision-making?
• Which set of concepts is included in security policy requirements per ISO/IEC 27039?
• Which spread spectrum technique multiplies the original data signal with a pseudo-random noise spreading code to protect against interference?
• Which tool is a command-line SQL injection exploitation tool?
• Which component is described as acquiring information from sensors such as temperature, gases, location, and health data?
• Which Docker networking option enables a container to use the host's networking stack?
• Permissive Policy is best described as:
• Which term refers to methods or techniques used to inform decision making for countering future attacks on the target network?
• Which model describes direct communication from IoT device to cloud without an intermediary gateway?
• In the gateway-mediated model, which component acts as an intermediary between a device and the cloud?
• Which type is described as emulating the real production network of a target organization?
• Which tool lets you capture and interactively browse the traffic on a computer network and uses WinPcap to capture packets?
• Standpipe systems differ according to which two characteristics?
• What is the primary role of a RAID controller?
• What term describes the process of restricting access to data based on data sensitivity, user clearance, rights, and permissions?
• Which tool is a robust network threat detection engine capable of real-time intrusion detection, inline intrusion prevention, network security monitoring, and offline pcap processing?
• Which statement characterizes WEP encryption?
• Context-based signature analysis analyzes header information such as IP addresses, ports, etc?
• Emergency Lighting is described as being made of which material?
• What security consideration is highlighted for the cloud layer in IoT architecture?
• Which title consists of four sections and defines practices to restore investor confidence in securities analysts?
• Which policy focuses on directives for configuring or maintaining a system to ensure overall security and includes DMZ policy, encryption policy, acceptable use policy, and intrusion detection and prevention policy?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where what condition exists?
• In the IoT architecture, which components are endpoints that acquire data for a use case when remotely controlled by mobile apps?
• Which standard is intended to help energy industry interpret and apply ISO/IEC 27002:2005?
• Informational are detected by analyzing the data in the payload and matching a text string to a specific set of characters. If undetected, these signatures can open backdoors in a system, providing administrative controls to an outsider.
• Which term describes the active entity that attempts to access resources?
• RSA is a public-key cryptosystem used for Internet encryption and authentication. It is primarily used for which purpose?
• The Retrospective Approach examines the causes of attacks and includes fault finding mechanisms such as protocol analyzers and traffic monitors, as well as CSIRT and CERT. What is this approach called?
• Disk striping with parity, using a dedicated parity drive, is characteristic of which RAID level?
• ISO/IEC 27011 is a Technical Report intended to help which sector interpret ISO/IEC 27002:2005 to secure electronic process control systems?
• Which element allows following a stream including TCP, UDP, and SSL?
• Which statement best describes the Device Layer in an IoT architecture?
• Which statement best describes the Gateway/Control Tier in an IoT architecture?
• Hybrid Heat Split System uses what as the heat source instead of gas furnace heat?
• Which virtualization term refers to virtualization of data at the file-system level to enable sharing and protection?
• Which approach includes security monitoring methods such as IDS, SIMS, TRS, and IPS?
• Which access control concept determines the usage and access policies for users, often applied to highly confidential data?
• Which act requires financial institutions to explain their information-sharing practices to customers?
• What is the primary role of the mobile interface in the IoT architecture?
• Which security requirement directs the usage of technology-based systems with guidelines and includes examples such as remote access, wireless policies, and password policies?
• Which statement correctly describes the cloud component's risk profile in IoT architecture?
• Which HIPAA rule establishes national standards to protect individuals' electronic PHI created, received, used, or maintained by a covered entity?
• Which tool is described as an integrated penetration testing tool for web applications?
• Which device accepts VPN connections from VPN clients?
• Zigbee is the specification used in which IEEE standard?
• A software for establishing and maintaining an on-the-fly-encrypted volume (data storage device).
• Which type of honeypot emulates the real production network of a target organization, drawing attackers to the critical production system?
• Which antenna is a unidirectional antenna with a reflector, a dipole, and directors, designed to produce an end-fire radiation pattern?
• Which cloud service model delivers software applications to subscribers over the internet on a pay-as-you-go basis?
• Which of the following is an example of Infrastructure-as-a-Service (IaaS) provider?
• Which title is described as consisting of nine sections and establishes standards for external auditor independence to limit conflicts of interest?
• Which term describes traffic signatures that indicate a DoS attempt floods a server?
• What are potential effects of high electromagnetic interference on equipment?
• Atomic-signature-based analysis detects a signature in a single packet?
• RC4 is notable for having what kind of key usage?
• A computer that initiates a secure remote connection to a VPN server is known as what?
• Which category includes examples such as Firewall, NAC, NAP, IPSec, and SSL to prevent threats?
• Which capability ensures Kubernetes automatically restarts failed containers and reschedules them on available nodes?
• Which act requires financial institutions to explain how they share and protect their customers' private information?
• Modern microprocessor architectures have special instructions to aid the virtualization of hardware, enabling the guest OS to execute privileged instructions directly on the processor.
• Which approach is primarily used to inform decision making for countering future attacks?
• If informational signatures are undetected, what risk occurs?
• Which service is described as a cloud-based service focusing on mobile device management (MDM) and mobile application management (MAM) with policy configuration for applications?
• Which term is described as offering various access control mechanisms for network devices like routers and switches?
• Which service allows configuring policies to control applications and devices across the organization, focusing on mobile device management and mobile application management?
• Which caching proxy for the web reduces bandwidth by caching and reusing content?
• Which RAID level uses mirroring to provide data availability when a drive fails?
• Sprinkler systems are used primarily to avoid human and asset loss. Which of the following statements reflects this purpose?
• Which term describes traffic signatures that may appear suspicious but might not be malicious?
• Non-transparent proxies provide added services to the user agent such as group annotation services, media-type transformation, protocol reduction, and anonymity filtering. Which service is listed?
• Which backup media is described as portable and suitable for enterprise-level backups?
• Which term best describes a proactive approach to detect unauthorized access attempts based on traffic signatures?
• For a container that fails to respond to health checks, what does Kubernetes do?
• Which honeypot type emulates a real OS and applications and captures more useful data, responding only to preconfigured commands?
• Which backup strategy is described as a combination of a full backup and an incremental backup?
• Which tool is an integrated platform for security testing of web applications?
• High-level Security Requirements include which elements?
• The policy that drives an organization's scope and provides direction to their security policies, with examples like application policy and server policy, is called what?
• Which security method does WPA provide for encryption and authentication?
• Which proxy type is described as not transferring the IP address and enabling private surfing?
• Which backup type copies only files that have changed or been created since the last backup?
• Low-interaction Honeypots are characterized by emulating only a limited number of services and generating an error for unexpected actions.
• Which backup medium is readily available at reasonable prices and can store more data than DVDs?
• Which of the following is an example of detective controls?
• Storage Area Network (SAN) is best described as which of the following?
• Which standard corresponds to WLANs and historically uses FHSS or DSSS as the frequency hopping spectrum?
• AES stands for which of the following?
• The layer that aggregates information and informs decision-making across stakeholders is the which layer?
• What is the National Provider Identifier (NPI) used for?
• Which software is a free, self-contained wireless-auditing toolkit?
• Which term describes restricting access to data based on data sensitivity and user clearance?
• Which mode is mainly used to deliver password-based authentication?
• THC-Hydra is a network logon cracker that supports many services, including IPv6 and RFC 4013.
• Which term represents the data that, after processing, is transmitted to the user for action?
• Standby power supplies for personal computers are most commonly used for which equipment?
• Which authentication uses a null method and allows a device to associate with an AP via cleartext transmission?
• The unidirectional antenna with end-fire characteristics is commonly known as which antenna?
• Which solution is described as a mobile intrusion prevention app that uses machine learning to identify and prevent network-based and host-based threats on iOS and Android?
• Which controls are designed to discourage violations by signaling consequences, such as warning signs and security guards?
• Which SIEM feature aggregates all similar events into a single summary report?
• WPA2 uses which combination for wireless data encryption?
• Which act, commonly cited as DPA 2018, governs the processing of personal data in the United Kingdom?
• Collecting network infrastructure information for monitoring is used to improve security posture and performance. Which term describes this process?
• What is a primary capability of network monitoring described?
• Which platform helps you develop, deploy, and operate industrial apps at the edge and in the cloud?
• Which statement about the statistics toolbar is true?
• Which proxy type is described as requiring client software to be configured and is also known as an explicit proxy?
• Which of the following is an example of deterrent controls?
• Movable Lighting is best described as which of the following?
• It is an all-in-one burning, authoring, and backup Solution.
• Which standard is mainly used for exchanging data between fixed and mobile devices over short distances?
• Which PCI-DSS control prohibits unauthorized outbound traffic from the cardholder data environment to the Internet?
• Which guideline addresses financial services ISMS adoption within the ISO/IEC 27000 family?
• StegSpy identifies a steganographed file and detects steganography, the program used to hide the message, and the location of the hidden content.
• Which act prohibits circumvention of digital protections and the removal of copyright management information?
• Which algorithm uses a sponge construction and is designed to complement the SHA-2 family?
• Standby Lighting is an extension of which type of lighting system?
• In WPA3, which process results in each wireless station receiving a shared secret key over a secure channel distinct from 802.11 network communications?
• Which data classification level allows access to secret, confidential, restricted, and unclassified data for authorized users, but not top secret?
• In RAID Level 0, data is striped across disks with no redundancy.
• In VPN terminology, which device terminates VPN tunnels at the network edge?
• Which algorithm is described as the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS) and adopted as FIPS 186?
• Explicit proxies are commonly referred to as Non-transparent proxies and require client software to be configured. Which statement best describes this requirement?
• Which security policy category includes backup and restore policy as an example?
• It is a command-line interface SQL injection exploitation tool, used to exploit both union-based and blind Boolean-based injections?
• A non-transparent proxy is described as modifying a request or response and the client is made aware of the proxy's existence. Which proxy type matches this description?
• Which device is used to connect two or more LANs at the MAC layer to extend wireless coverage?
• Deterrence Controls are used to discourage policy violations and may include security guards and warning signs.
• What is the main function of intrusion prevention systems (IPSs)?
• Which term describes hardware-level virtualization that makes virtual devices independent of the physical hardware?
• Which component initiates a secure remote connection to a VPN server?
• Which model determines the access control taken by any possessor of an object to decide the access control of a subject on that object?
• Which role might a cloud consumer interact with to request cloud services instead of contacting a CSP directly?
• Which antenna is a straight electrical conductor measuring half a wavelength and is commonly described as the doublet?
• Which cloud service model delivers application software to subscribers on-demand over the internet?
• In historical terms, Safety Officers were commonly described as what type of professional?
• Which concept monitors the restrictions imposed by access control rules and implements a set of rules on the subject's actions on the object?
• What is the purpose of hot and cold aisles in data centers?
• Which function is a cryptographic hash function developed by NIST and included in the Secure Hash Standard?
• Which entity acts as an intermediary that provides connectivity and transport services between CSPs and cloud consumers?
• RC4 is described as a variable key-size symmetric-key stream cipher with byte-oriented operations based on a random permutation. Which statement best describes RC4?
• It includes VPN specific protocols used to manage tunnels and encapsulate private data, including PPTP and L2TP along with IPsec.
• Which term is described as the resource that monitors the restrictions and enforces rules on the subject's actions?
• Which description matches the Cloud Layer's role?
• Which concept is described as the use of machine-learning techniques to identify threats on mobile devices?
• IO Graphs are used to visualize which metric?
• Composite-signature-based analysis uses a series of packets over time; ICMP floods example?
• Dome CCTV cameras are typically used for indoor security and are dome-shaped to prevent damage. Which of the following statements is true?
• Which toolbar is explicitly stated as non-customizable?
• Which PCI-DSS requirement mandates antivirus software deployment on systems commonly affected by malicious software?
• Which statement best describes Decentralized Authorization?
• What is Cain & Abel described as?
• It connects multiple LANs at the MAC layer and is used for increasing the coverage area of the wireless network. What device is this?
• Which network type can cover a region or the entire globe and often uses embedded cellular radio technologies for data transmission?
• Which data classification level is described as allowing any person at any level to access unclassified documents?
• Which window displays the protocol hierarchy statistics?
• What is the primary shape of a common reflector antenna?
• This CNM concept contains the configuration of a container's network stack such as routing table, management of container's interfaces, and DNS settings. CNM sandbox can be implemented for Windows HNS, Linux network namespace, or a FreeBSD jail
• Access policies, accountability, continuity of operations, and documentation are described under which security requirement?
• NAND flash memory is typically used for what purpose in storage devices?
• The menu contains options to display various statistic windows. Which of the following is NOT among those windows?
• Which term refers to the infrastructure where processed data is stored after analysis?
• Which term is defined as an explicit resource on which an access restriction is imposed?
• DES stands for which of the following?
• Which data classification level is described as only a few people can access the data or object?
• Sprinkler systems are mainly used in areas where firefighters are not able to reach with their hose lines. Which option is true?
• Which policy provides high-level direction for an organization's information security program?
• MD5 outputs a 128-bit digest.
• The Stand by Ferro UPS uses which type of transformer to filter the output?
• Which statement best defines HMAC?
• What is the function of the C2 component within the cloud architecture?
• Which Docker networking option allows a container to use the host's network namespace?
• Continuous Lighting is described as:
• Which term describes the framework that encrypts data and restricts access to authorized apps on mobile devices?
• Which cable is described as being prone to wiretapping?
• a powerful, adaptable SIEM that delivers real-time threat detection and native SOAR technology to your SOC.
• Packaged Heating and Air-Conditioning System is best suited for locations with what characteristic?
• Which backup type backs up all changes made since the last full backup?
• Wi-Fi security auditing tools ability to detect, analyze, and identify wireless threats?
• Which layer is primarily responsible for data storage, processing, and dashboards for monitoring and proactive decision-making?
• What is the primary responsibility of Plant's Security Officers or Supervisors?
• Which term describes traffic containing signatures indicating an attempt to gain unauthorized access?
• An attacker broadcasts DHCP requests with spoofed MAC addresses with the help of tools such as Yersinia, Hyenae, and Gobbler. Which tool is commonly used to such a DHCP attack?
• Standpipe systems have three classifications: Class I - A, Class II - A, Class III - A. These classifications differ in what aspect?
• In this type of virtualization, the guest OS is not aware that it is running in a virtualized environment. The VMM translates commands to binary instructions and forwards them to the host OS.
• It allows easy recovery of various types of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks.
• Which menu contains items to open and merge, capture files, save, print, import and export capture files in whole or in part, and quit the Wireshark application.
• Which of the following best describes WPA3 encryption?
• Which virtualization enables the logical partitioning of a server's operating system environment by virtualization of storage devices?
• Which model describes a device communicating with an intermediate gateway that connects to the cloud?
• Which statement about WPA2-Enterprise authentication is correct?
• Which data classification level indicates documents may be highly confidential or only confidential?
• DES stands for which term?
• Which analysis focuses on detecting malicious payload strings regardless of past history?
• Which term describes a party that provides access to cloud consumers via a network or other access devices?
• Which UPS configuration is most commonly used for server rooms and is connected to the battery during a power failure?
• What is the primary purpose of intrusion detection systems (IDSs)?
• Which data classification level follows Unclassified and precedes Secret in typical hierarchies?
• Which is the cipher type in which letters are rearranged according to a regular system?
• Anomaly detection relies on a database of anomalies to identify deviations from normal behavior; which best describes this approach?
• The Device-to-Cloud model extends data sharing to authorized third parties. Which option best describes this access?
• Which data classification level requires no access permissions and allows any person to access unclassified documents?
• Which RAID level uses disk striping with parity distributed across drives?
• What authorization model provides access to resources indirectly after a user is authorized for a primary resource?
• Which layer encompasses the physical devices and networks used for connectivity and edge computing?
• Which concept describes the data collected, after traveling through the gateway, arriving at the cloud, where it is stored and subjected to data analysis, and then transmitted to the user who takes actions based on the information received?
• Prudent Policy is described as:
• Which Kubernetes concept is responsible for placing containers on nodes based on the resources and constraints specified by the user?
• Which policy describes starting with all services blocked and enabling safe and necessary services?
• Which role is described as responsible for screening visitors and employees at the main gates or entrances?
• Which cabling is least susceptible to wiretapping threats?
• Which interface is used to connect internal drives to a server?
• Which type is described as a proxy through which a client system connects to a server without its knowledge and is entirely invisible to an end user?
• Which DoS tool is described as a network stress and DoS/DDoS attack application?
• Which spreading technique multiplies the data with a pseudo-random noise sequence to spread the spectrum?
• Policies used with the compliance of various standards, certifications, and accreditations are described under which security requirement?
• Allocation of Security Enforcement to Architecture Elements describes what approach?
• Which cryptographic tool is described as using strong encryption algorithms to hide computer files?
• With evolving technology, understanding and managing the demand for network resources is important. Which term describes this concept?
• Which mode uses a pre-shared key (PSK) to protect network access?
• A wireless modem is a device that allows PCs to connect to a wireless network and access the Internet through an ISP, commonly including USB sticks. What is this device called?
• Protective measures such as access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication are described under which security requirement?
• Which policy is described as an extremely restrictive security posture, sometimes labeled 'Paranoid Policy'?
• Which menu controls display options like colorization, font zoom, and windowing of a packet?
• It is also called a media gateway or a remote-access server (RAS) and is responsible for setting up and maintaining each tunnel in a remote-access VPN. Users connect to this to use a VPN.
• Which type of solution protects organizations from threats on iOS and Android using different security technologies?
• What is the term for a straight electrical conductor measuring half a wavelength, fed at the center, and used as a basic balanced antenna?
• Emergency Lighting is described as being made of which material?
• Dome CCTV cameras are dome-shaped and provide wide-angle surveillance. Which option best describes this feature?
• Which menu handles configuration profiles and sets preferences?
• Tasklist displays the list of applications and services along with their process IDs (PIDs) for all tasks running on a local or remotely connected computer.
• Which tool is used to create and manage encrypted volumes for data storage?
• A security-first SaaS technology used to operate IoT products in a reliable, scalable, and secure manner.
• Which tool simplifies encoding and decoding of text data, enabling compression, encryption, and conversion to text for clipboard or text file storage?
• Which tool identifies a steganographed file and reveals the location of the hidden content and the hiding program?
• Which statement best describes Mobile Device Management Solutions?
• Which standard defines the Digital Signature Algorithm (DSA) used in the Digital Signature Standard (DSS)?
• Standby Lighting is best described as what type of lighting system?
• Which term describes a centralized method of granting access decisions across resources due to the complexity of per-resource authorization?
• Which SIEM capability collects and manages all the object access audit logs at the central repository to track access attempts?
• Which controls are used to detect unauthorized access attempts, such as CCTV and alarms?
• In the past, Safety Officers were typically described as individuals who came from which background?
• Which statement best describes the functions of intrusion detection systems and intrusion prevention systems?
• Which statement best describes RAID Level 1?
• Which access control model is described as permissions provided by the system and cannot be amended by users, governed by administrator-defined rules?
• Which title consists of nine sections and establishes standards for external auditor independence to limit conflicts of interest, including auditor approval requirements, audit partner rotation, and auditor reporting requirements?
• Which document is the telecom ISMS implementation guide?
• Which term refers to a storage device that is connected to a network and provides centralized storage for a LAN?
• A collection of endpoints that have connectivity between them. When a network is created or updated, the corresponding driver is notified. A CNM network can be used to implement a Linux bridge, VLAN, etc.
• Which feature should the edge gateway support to counter vulnerabilities and maintain secure operation?
• Which wireless technology interconnects devices around a person within a very short range (about 10 meters)?
• KFSensor is a host-based IDS that acts as a honeypot to attract and detect hackers by simulating vulnerable system services and Trojans.
• Packaged Heating and Air-Conditioning System is most appropriate in which scenario?
• Which authorization approach maintains separate authorization details for each resource request?
• Which combination of statistic windows is explicitly listed as available in the menu?
• In WPA3, which concept used in WPA2-Personal is replaced by Dragonfly Key Exchange?
• Content-based signature analysis detects signatures by analyzing payload?
• C-Mount CCTV cameras use detachable lenses and can cover distances beyond 40 ft, with the ability to use different lenses as distance requires. Which option reflects this?
• What capability is described as a security principle on the device layer?
• Which type of honeypot is noted for capturing complete information about an attack vector such as techniques and tools?
• Which CNM concept contains the configuration of a container's network stack such as routing tables, management of interfaces, and DNS settings?
• Which statistic window provides an overview of the packets that have been captured?
• Which authentication method is typically used with WPA2-Enterprise?
• Which technology uses multiple antennas at the transmitter and receiver to improve data rate and link reliability?
• Which data label indicates the highest level mentioned in the material that requires a higher clearance and is not accessible to many?
• Which analysis detects attack patterns across multiple packets, such as ICMP floods?
• Which proxy hides the user's IP address, enabling private surfing?
• Which component is described as sensors embedded in devices that acquire information from the surroundings such as temperature, gases, location, working of industrial machines, and health data of a patient?
• Which virtualization term refers to data virtualization at the file-system level, enabling sharing and protection within software?
• Which backup type copies only files that have changed since the last backup, with the last backup potentially being of any type?
• Which term describes software and services enabling secure distribution of enterprise apps on mobile devices, without interfering with personal apps and data?
• RC5 was designed by which cryptographer?
• Which policy category includes examples such as application policy and network policy, and related policies for auditors or backups?
• Which term describes a local area wireless network that connects wireless users to a wired network and can operate in peer-to-peer or infrastructure modes?
• Which tool can be used to extract hidden data from steganographic content?
• Which menu contains items to access basic help manual pages for command-line tools, online webpages, and the About Wireshark dialog?
• Network monitoring techniques are necessary for establishing service level agreements (SLAs) and compliance. Which outcome best describes the primary aim of these techniques?
• Which security requirement covers actions to be taken for various components that need to be secured such as computer security, operations security, network security, personnel security, and physical security?
• Which standard defines quality of service (QoS) and is implemented at the MAC layer to support real-time applications?
• Wireless network interface cards (NICs) or adapters locate and communicate to an access point to provide network access. Which term describes these devices?
• It is a free, self-contained wireless-auditing toolkit.
• Which firewall component checks the protocol in use to decide whether to allow or deny a packet?
• Which tool helps web security researchers detect time-based blind SQL injection on HTTP headers?
• Which title consists of eight sections and mandates that senior executives take individual responsibility for the accuracy and completeness of corporate financial reports?
• Flow Graphs are best used to visualize which aspect?
• The statistics menu option that provides quick access to items is described as which of the following?
• Which Docker networking construct connects container interfaces to a parent host interface (or sub-interfaces)?
• Which authentication enables a user to authenticate themselves to multiple servers on a network with a single password without re-entering it every time?
• Which HIPAA rule contains provisions relating to compliance and investigation, as well as the imposition of civil monetary penalties for violations of the HIPAA Administrative Simplification Rules and procedures for hearings?
• Which IoT component preprocesses the data generated by sensors before sending it to the cloud, reducing the amount of data forwarded?
• Duct-Free Split Heating and Air Conditioning System is most commonly used in locations where traditional split systems cannot be used. Which option matches this description?
• Which cloud service model provides on-demand infrastructure resources like computing power and storage, with the provider managing the underlying hardware?
• Which protection technology can enforce data protection by ensuring business data reside only on approved devices and apps on endpoints?
• Which wireless technique reduces interference and increases channel robustness in 4G and 5G networks?
• RC6 is best described as which type of cipher?
• In IoT architecture, which component is described as the central aggregation and data management point, with access that should be restricted and a command-and-control function?
• Which cable is described as having each pair of wires shielded with foil, reducing external interference?
• According to the material, Microsoft Intune is described as a tool used for fingerprinting and exploiting which infrastructure?
• RSA is based on which area of mathematics?
• Which term best describes a framework for managing mobile devices and corporate apps used by employees on personal devices?
• Which technology covers areas larger than a WLAN and supports cellular technologies such as GSM and CDMA?
• What is the recommended authentication approach to ensure trusted communication between edge devices and the cloud?
• RAID is an example of which type of virtualization that aggregates multiple storage devices into a single logical unit?
• Which component includes PPTP and L2TP together with IPsec for VPN tunneling?
• Which of the following is an example of recovery controls?
• Which firewall element checks if the packet has SYN, ACK, or other bits set for establishing a connection?
• In Kubernetes networking, how is a container typically identified for addressing, enabling traffic routing?
• What key establishment protocol is used by WPA3, also known as Dragonfly Key Exchange?
• Which standard is also known as WiMAX and provides fixed broadband wireless metropolitan access networks using a point-to-multipoint architecture?
• Which SIEM function stores logged data in a central repository for long-term compliance and for forensic analysis?
• Which tool is described as a password recovery tool that recovers passwords by sniffing the network and cracking encrypted passwords?
• Which statement best describes cameras according to the material?
• Which statement is true about WPA2-Personal?
• Which cable is described as having a single copper conductor at its center with a plastic insulation layer and a braided shield?
• The Preventive Approach consists of methods or techniques that can prevent threats in a target network, with examples like firewall, NAC, NAP, IPSec, and SSL.
• Which software is described as the most secure, efficient, and fast quantum encryption software?
• Which task is NOT listed as a responsibility of the Wireless CCTV Camera?
• Which all-in-one burning, authoring, and backup Solution?
• In which virtualization type is the guest operating system aware of the virtual environment and communicates with the host to request resources?
• What does OFDM stand for in digital communications?
• RAID 0 characteristics: Which statement is true?
• Which UI element displays the captured packet bytes in a hex dump format?
• Which SIEM capability analyzes log data to identify suspected activities related to system compromise?
• Which layer uses ZigBee, Z-Wave, or Bluetooth for inter-device communication?
• Which term describes an independent examination of cloud service controls to express an opinion on adherence to standards?
• Which menu contains items to find a packet, time reference, and mark one or more packets. It handles configuration profiles and sets preferences.
• Which standard is used to declare regulatory domains among 802.11 amendments?
• What does Extensible Authentication Protocol (EAP) primarily provide?
• Which task is NOT a responsibility of Plant's Security Officers or Supervisors?
• Which backup medium is commonly used for archival storage due to scalable capacity?
• Which cable reduces crosstalk and interference between pairs of wires?
• Which service provides authentication services such as Single Sign-On, Multi-Factor Authentication, and Identity Governance, managed by a third-party?
• The telecom ISMS guide TR 27015 has been published identically as ITU-T X.1051 and which ISO/IEC standard?
• Which hash function outputs a 128-bit digest?
• Which toolbar provides quick access to frequently used items from the menu and cannot be customized by the user?
• Which virtualization describes virtualization of storage devices using data striping and mirroring, with RAID listed as an example?
• Which approach includes post-mortem analysis including risk and legal assessments after an incident?
• Which UI element provides colorization, font zoom, and the ability to display a packet in a separate window?
• Windows Information Protection provides endpoint DLP capabilities and can be configured to store business data only on approved devices and applications. Which technology is this?
• Which form of virtualization focuses on partitioning the server's operating system environment?
• Which policy forbids everything and imposes strict restrictions on all company computers and Internet usage?
• Which PCI-DSS requirement calls for a formal process for approving and testing all network connections and changes to firewall and router configurations?
• What is a security practice for the cloud component in IoT architecture?
• Which cloud service model offers development tools and deployment platforms on demand, allowing developers to deploy and configure applications without managing the underlying infrastructure?
• Which law provides the public the right to request access to records from any federal agency, with nine exemptions?
• The ITU-T X.1051 document corresponds to which ISO/IEC TR?
• Which product is an example of anti-Trojan software?
• Which option is a primary way to access frequently used items from the menu according to the material?
• Which honeypot type is described as a proxy between two networks that is entirely invisible to an end user?
• Which term describes traffic signatures indicating an attempt to gain information?
• Which mechanism does Kubernetes use to distribute high network traffic across containers to balance the load?
• What is the method of transmitting radio signals by rapidly switching the carrier among many frequency channels?
• Which feature helps counter vulnerabilities by keeping IoT devices up to date?
• Burp Suite is an integrated platform for security testing of web applications.
• Which UPS type is no longer commonly used because it becomes unstable when connected to modern computer power loads?
• Which PCI-DSS requirement 1.3.5 entails documentation and business justification for use of all services, protocols, and ports allowed, including security features for insecure protocols?
• Which tool is an integrated penetration testing tool for web applications?
• HOIC is described as a network stress and DoS/DDoS attack application written in BASIC. Which DoS tool is this?
• Which title is described as consisting of nine sections and addressing external auditor independence?
• Which CNM construct represents a collection of endpoints that have connectivity between them and can be used to implement features like Linux bridge or VLAN?
• IO Graphs primarily display:
• Which act concerns the processing of information relating to individuals and is associated with data protection in the United Kingdom?
• Which statement about C-Mount CCTV cameras is true?
• Which intrusion detection approach creates models of possible intrusions and compares incoming events against these models to decide if an intrusion occurred?
• Which HVAC setup is described as the most traditional and commonly used system, with components located both inside and outside the building?
• Which storage option set is supported by Kubernetes, including local storage, public cloud providers, and network storage?
• What is the primary purpose of Mobile Content Management (MCM) in securing mobile access to corporate data?
• Which term refers to an action performed by a subject on an object, such as deleting a file?
• Which component acts as the first point of contact into the Internet for IoT, connecting smart devices to cloud components and supporting bidirectional authentication and automatic updates?
• ISO/IEC TR 27016 provides guidance for implementing ISMSs in which sector?
• RC5 was designed by Ronald Rivest for which organization?
• Which act defines prohibitions against circumvention of technological protection measures and removal of copyright management information?
• Who must use the National Provider Identifier (NPI) in HIPAA administrative and financial transactions?
• Which statistic window would help analyze traffic composition by protocol?
• What shape are most reflector antennas?
• Which model includes smartphones, wearable devices, autonomous machines, and tags that gather data via embedded sensors?
• Which graph type would best illustrate the relationships between distinct network flows?
• Which IoT component is responsible for preprocessing the large volume of sensor data before transmission to the cloud?
• Which policy type includes policies for servers and system security?
• Which technology covers a metropolitan area and connects subscriber stations to a base station over wireless or fiber links?
• The telecom ISMS guide TR 27015 has identical text published as ITU-T X.1051 and which ISO/IEC standard?
• OpenStego provides data hiding and watermarking capabilities and can be used to detect unauthorized file copying.
• What is the purpose of implementing a DMZ in a network security design?
• Which 802.11 amendment is an extension of the standard, offering up to 54 Mbps using OFDM and operating in the 2.4 GHz band?
• Which panel shows detailed information about captured packets at a granular level?
• Which of the following is an example of preventive controls?
• Which term describes the party that acquires and manages the computing infrastructure intended for providing cloud services to interested parties via network access?
• What best describes Network Attached Storage (NAS) in a local area network?
• Which statement best describes the radiation pattern of reflector antennas?
• Which term describes a storage solution that provides centralized storage over a network and is accessed as a file-level storage by multiple clients?
• Which standard is an enhanced version of 802.11a and 802.11b and supports regulatory domains?
• Who acquires and manages computing infrastructure intended for providing services via network access?
• Policy Description Based on Requirement is best described as:
• Which device is described as being easier to install and offering different modes for wireless transmission?
• Promiscuous Policy is described as:
• Which proxy type uses sockets and does not have caching abilities typical of HTTP proxies?
• Which act is commonly associated with the protection of personal health information and patient rights in the healthcare sector?
• The Proactive Approach uses threat intelligence and risk assessment to inform countering future attacks on the target network. Which term is this?
• LOIC is described as a network stress testing and DoS attack application. Which option best identifies this tool?