Question 91 · 191 in bank
As a network administrator, you have implemented WPA2 encryption in your corporate wireless network. The WPA2's __________ integrity check mechanism provides security against a replay attack.
Show answer
Answer: A
312-38AssociateEC-CouncilAll questions freePage 10 of 20
312-38 practice questions 91–100
Certified Network Defender (CND)191 questions across 20 pages are complete and free, with no account or card.
Official study references
191 questions in this bank
Free access · progress saved on this device
Question 92 · 191 in bank
Paul is a network security technician working on a contract for a laptop manufacturing company in Chicago. He has focused primarily on securing network devices, firewalls, and traffic traversing in and out of the network. He just finished setting up a server a gateway between the internal private network and the outside public network. This server will act as a proxy, limited amount of services, and will filter packets. What is this type of server called?
Show answer
Answer: C
Explanation
A bastion host is a computer system designed and configured to protect network resources from attacks. It acts as a mediator between the inside and the outside network. The firewall resides between the Internet and the protected private network. It filters all incoming and outgoing traffic from the network.
Source: Adapted from community discussion — ui
Question 93 · 191 in bank
Your company is planning to use an uninterruptible power supply (UPS) to avoid damage from power fluctuations. As a network administrator, you need to suggest an appropriate UPS solution suitable for specific resources or conditions. Match the type of UPS with the use and advantage:
Show answer
Answer: C
Explanation
Line Interactive: Most commonly used for small business, web, and departmental server Standby-Ferro: No longer commonly used because it becomes unstable when operating a modern computer power supply load Double Conversion On-Line: Generally used in environments where electrical isolation is necessary Delta Conversion On-Line: Can be useful where complete isolation and/or direct connectivity is required p.3182
Source: Adapted from community discussion — ahmetzimba
Question 94 · 191 in bank
John has successfully remediated the vulnerability of an internal application that could have caused a threat to the network. He is scanning the application for the existence of a remediated vulnerability, this process is called a __________ and it has to adhere to the __________.
Show answer
Answer: B
Question 95 · 191 in bank
Which filter to locate unusual ICMP request an Analyst can use in order to detect a ICMP probes from the attacker to a target OS looking for the response to perform ICMP based fingerprinting?
Show answer
Answer: B
Question 96 · 191 in bank
The Circuit-level gateway firewall technology functions at which of the following OSI layer?
Show answer
Answer: C
Question 97 · 191 in bank
Individuals in the organization using system resources in a way that violates acceptable usage policies indicates which of the following security incident(s):
Show answer
Answer: B
Question 98 · 191 in bank
The GMT enterprise is working on their internet and web usage policies. GMT would like to control internet bandwidth consumption by employees. Which group of policies would this belong to?
Show answer
Answer: C
Question 99 · 191 in bank
Which of the following intrusion detection techniques observes the network for abnormal usage patterns by determining the performance parameters for regular activities and monitoring for actions beyond the normal parameters?
Show answer
Answer: A
Explanation
Anomaly-based IDS: An anomaly-based IDS uses statistical techniques to compare the monitored traffic with the normal traffic. This method can identify new forms of attacks that are not in the IDS signature database and issue a warning. The disadvantage of this method is issuing false positive messages, which will complicate the functioning of an administrator. In the anomaly detection step, if the attack signature matches, the connections will be disconnected from the source IP, the packet will be dropped, the activity will be logged, and an alarm will be initiated. Alternatively, the packet will be sent to stateful protocol analysis.
Source: Adapted from community discussion — ui
Question 100 · 191 in bank
An administrator wants to monitor and inspect large amounts of traffic and detect unauthorized attempts from inside the organization, with the help of an IDS. They are not able to recognize the exact location to deploy the IDS sensor. Can you help him spot the location where the IDS sensor should be placed?
Show answer
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-38 practice, question 91. 191 questions available.
About this question bank
Version 1.0.0. How we source questions