N10-008 practice questions 611–620

1. Question 611 · 871 in bank

   Which of the following passwords would provide the best defense against a brute-force attack?

   • AThisIsMyPasswordForWork
   • BQwerty!@#$
   • CPassword!1
   • DT5!8j5

   Show answer

   Answer: A

   Explanation

   If you wanna be mathematical: Uppercase letters: There are 26 uppercase letters (A-Z). Lowercase letters: There are 26 lowercase letters (a-z). Numbers: There are 10 digits (0-9). Symbols: Let's assume a set of commonly used symbols, such as !"#$%&'()*+,-./:; ?@[]^_`{|}~. This set contains 32 symbols. ThisIsMyPasswordForWork contains 26+26 (uppercase and lowercase) possible characters, and is 23 digits long. Thats 52^23 possible combinations, or 3.2x10^29. T5!8j5 contains uppercase, lowercase, numbers and symbols, but is only 6 digits long, this allows for 6.8x10^11 combinations. Therefore A is more secure when it comes to bruteforcing.

   Source: Adapted from community discussion — kinny4000

   Next question

2. Question 612 · 871 in bank

   Which of the following is most likely to be implemented to actively mitigate intrusions on a host device?

   • AHIDS
   • BNIDS
   • CHIPS
   • DNIPS

   Show answer

   Answer: C

   Explanation

   C. HIPS HIPS stands for Host-based Intrusion Prevention System. It is a security measure that operates on individual host devices to actively monitor and prevent intrusions at the host level. HIPS monitors the activities and behaviors of applications and processes on a host, looking for any signs of malicious behavior. If it detects suspicious activity, it can take preventive actions to stop or contain the potential intrusion.

   Source: Adapted from community discussion — salah112

   Next question

3. Question 613 · 871 in bank

   A network administrator wants to know which systems on the network are at risk of a known vulnerability. Which of the following should the administrator reference?

   • ASLA
   • BPatch management policy
   • CNDA
   • DSite survey report
   • ECVE

   Show answer

   Answer: E

   Explanation

   E. CVE (Common Vulnerabilities and Exposures) The Common Vulnerabilities and Exposures (CVE) system is a reference dictionary of publicly known information security vulnerabilities and exposures. Each CVE entry includes a unique identifier, a description of the vulnerability, and references for additional information. Security professionals, including network administrators, use CVE identifiers to assess and prioritize vulnerabilities in their systems.

   Source: Adapted from community discussion — salah112

   Next question

4. Question 614 · 871 in bank

   A network engineer is upgrading an existing edge gateway. The company currently uses a router and needs to be able to filter on all OSI layers. Which of the following should the engineer use to upgrade the gateway?

   • ANGFW
   • BProxy
   • CLayer 3 switch
   • DLoad balancer

   Show answer

   Answer: A

   Explanation

   A. NGFW (Next-Generation Firewall) To upgrade the existing edge gateway and have the ability to filter on all OSI layers, the network engineer should use a Next-Generation Firewall (NGFW). NGFWs offer advanced security features beyond traditional firewalls, providing the capability to inspect and filter traffic at multiple OSI layers, including Layers 3 to 7.

   Source: Adapted from community discussion — salah112

   Next question

5. Question 615 · 871 in bank

   Which of the following architectures would allow the network-forwarding elements to adapt to new business requirements with the least amount of operating effort?

   • ASoftware-defined network
   • BSpine and leaf
   • CThree-tier
   • DBackbone

   Show answer

   Answer: A

   Explanation

   A. Software-defined network A Software-Defined Network (SDN) allows for network-forwarding elements to adapt to new business requirements with the least amount of operating effort. SDN separates the network control plane from the data plane, allowing for centralized control and programmability of the network. This enables network administrators to dynamically configure and manage network resources based on changing business needs through software control, reducing manual configuration efforts.

   Source: Adapted from community discussion — salah112

   Next question

6. Question 616 · 871 in bank

   A customer lost the connection to the telephone system. The administration console is configured with multiple network interfaces and is connected to multiple switches. The network administrator troubleshoots and verifies the following: • The support team is able to connect remotely to the administration console. • Rebooting the switch shows solid link and activity lights even on unused ports. • Rebooting the telephone system does not bring the system back online. • The console is able to connect directly to individual modules successfully. Which of the following is the most likely reason the customer lost the connection?

   • AA switch failed.
   • BThe console software needs to be reinstalled.
   • CThe cables to the modules need to be replaced.
   • DA module failed.

   Show answer

   Answer: A

   Explanation

   LMAO. Switch lights staying up on unused ports? Plus direct connection to modules works? (AKA MODULES WORK) Answer is A. Anyone saying D is insane.

   Source: Adapted from community discussion — JBSPLAT

   Next question

7. Question 617 · 871 in bank

   Select 2

   A network security technician is designing a solution for a secure remote access scheme with the following requirements: • The solution must allow for users at multiple locations to access corporate resources. • The on-premises equipment will not handle non-corporate, resource-bound traffic. Which of the following should the network security technician consider when designing the solution? (Choose two.)

   • AClientless VPN
   • BPersonal VPN
   • CFull-tunnel VPN
   • DClient-to-site VPN
   • ESite-to-site VPN
   • FSplit-tunnel VPN

   Show answer

   Answer: DF

   Explanation

   BING AI: Given the requirements, the network security technician should consider: D. Client-to-site VPN: This type of VPN allows users at multiple locations to access corporate resources securely over the internet. Each user establishes their own VPN connection to the network, which is ideal for remote workers or workers at different locations. F. Split-tunnel VPN: This type of VPN allows for a user to access the corporate network while simultaneously accessing the internet for non-corporate, resource-bound traffic. This means that only the traffic destined for the corporate network is sent through the VPN, fulfilling the requirement that on-premises equipment will not handle non-corporate, resource-bound traffic. So, the answers are D. Client-to-site VPN and F. Split-tunnel VPN. However, the final decision should be made by the network security technician based on a thorough understanding of the network’s requirements and constraints.

   Source: Adapted from community discussion — [Removed]

   Next question

8. Question 618 · 871 in bank

   Which of the following routing protocols is used to exchange route information between public autonomous systems?

   • AOSPF
   • BBGP
   • CEIGRP
   • DRIP

   Show answer

   Answer: B

   Explanation

   B. BGP (Border Gateway Protocol) is the correct answer as it is used to exchange route information between public autonomous systems. A. OSPF (Open Shortest Path First) is a routing protocol used within a single autonomous system, typically in an enterprise network. It is not used to exchange route information between public autonomous systems. C. EIGRP (Enhanced Interior Gateway Routing Protocol) is a proprietary routing protocol developed by Cisco Systems. It is used within a single autonomous system, typically in enterprise networks. D. RIP (Routing Information Protocol) is a distance-vector routing protocol that is used in small and medium-sized networks. It is not suitable for use in large public autonomous systems.

   Source: Adapted from community discussion — JakeCharles

   Next question

9. Question 619 · 871 in bank

   Which of the following uses an automated script to make configuration changes when interacting with a web application?

   • ASSH
   • BFTP
   • CAPI
   • DGUI

   Show answer

   Answer: C

   Explanation

   C. API An API (Application Programming Interface) is a set of rules that allows one software application to interact with another. In the context of interacting with a web application and making automated configuration changes, an API is commonly used. APIs enable automation by allowing scripts or programs to communicate with and manipulate the functionality of a web application. Options A (SSH), B (FTP), and D (GUI) are not typically used for making automated configuration changes in the context of web applications: - A. SSH (Secure Shell) is a protocol for secure remote access to systems but is not specifically designed for web application automation. - B. FTP (File Transfer Protocol) is used for transferring files and is not focused on configuration changes within a web application. - D. GUI (Graphical User Interface) refers to the visual interface that allows users to interact with a system, but it is not automated and requires manual user input.

   Source: Adapted from community discussion — salah112

   Next question

10. Question 620 · 871 in bank

    Which of the following ports is used for secure email?

    • A25
    • B110
    • C143
    • D587

    Show answer

    Answer: D

    Explanation

    D. 587 Port 587 is commonly used for secure email transmission. It is the default port for the submission of email messages to be sent out by email clients securely using the STARTTLS encryption protocol. This port is often associated with the submission of outgoing email by mail clients to a mail server. The other port numbers mentioned: - A. Port 25: This is the default port for unencrypted SMTP (Simple Mail Transfer Protocol) traffic. It is commonly used for email communication but without encryption. - B. Port 110: This is the default port for unencrypted POP3 (Post Office Protocol version 3) traffic, which is used for retrieving emails from a mail server. - C. Port 143: This is the default port for unencrypted IMAP (Internet Message Access Protocol) traffic, which is used for accessing and managing email messages on a mail server.

    Source: Adapted from community discussion — salah112

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

N10-008 practice, question 611. 871 questions available.