Practice Test Geeks(CTE) Certified Telecommunications Executive Practice Test
← All CTE Flashcard Decks

Network Security & Protocols Flashcards

7 cards from real CTE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Network Security & Protocols flashcards as text

  1. Which protocol provides secure, authenticated time synchronization to prevent replay attacks that exploit timestamp manipulation?

    Answer: NTP with MD5 authentication

    NTP with MD5 authentication ensures time synchronization messages are authenticated, preventing spoofed timestamp attacks.

  2. A CTE candidate is asked about 'zero trust architecture.' What is the core principle?

    Answer: Never trust, always verify — authenticate and authorize every request regardless of location

    Zero Trust requires continuous verification of every user and device, eliminating implicit trust based on network location.

  3. Which protocol encrypts DNS queries between a client and resolver to prevent eavesdropping on DNS lookups?

    Answer: DoH (DNS over HTTPS)

    DNS over HTTPS (DoH) encrypts DNS queries using HTTPS, preventing ISPs and attackers from seeing DNS lookups.

  4. What is the function of a Certificate Revocation List (CRL) in PKI?

    Answer: Contains certificates that have been revoked before their expiration date

    A CRL is a list maintained by a CA containing certificates that have been invalidated before their expiration dates.

  5. A telecom network experiences repeated unauthorized configuration changes. Which security control would best detect and alert on these changes?

    Answer: File integrity monitoring (FIM)

    File integrity monitoring detects unauthorized changes to configuration files and generates alerts for investigation.

  6. Which BGP security mechanism uses cryptographically signed route origin attestations to prevent prefix hijacking?

    Answer: RPKI (Resource Public Key Infrastructure)

    RPKI uses cryptographic Route Origin Authorizations (ROAs) to validate that ASes are authorized to announce specific prefixes.

  7. An enterprise telecom customer requests network access control that evaluates endpoint posture (patch level, antivirus status) before allowing connection. Which technology provides this?

    Answer: NAC (Network Access Control)

    NAC solutions assess endpoint health posture and enforce policy-based admission, quarantining non-compliant devices.