CyberVista Network and Communication Security Questions and Answers

Question 1

A network administrator wants to implement the most current and secure standard for a new corporate wireless network.
The new standard must provide robust protection against offline dictionary attacks and ensure that even if a password is compromised, past session traffic cannot be decrypted.
Which of the following wireless security protocols should be implemented?

Accepted Answer

WPA3 (Wi-Fi Protected Access 3)

Answer

WPA (Wi-Fi Protected Access)

Answer

WEP (Wired Equivalent Privacy)

Answer

WPA2 (Wi-Fi Protected Access 2)

Question 2

An organization is experiencing a high volume of phishing attacks where malicious actors are spoofing the company's email domain to trick employees. To combat this, the security team decides to publish a DNS record that specifies which mail servers are authorized to send email on behalf of their domain. What email security mechanism is being described?

Accepted Answer

Sender Policy Framework (SPF)

Answer

DomainKeys Identified Mail (DKIM)

Answer

Domain-based Message Authentication, Reporting, and Conformance (DMARC)

Answer

Pretty Good Privacy (PGP)

Question 3

Which of the following BEST describes the primary security function of Domain Name System Security Extensions (DNSSEC)?

Accepted Answer

To authenticate the origin of DNS data and verify its integrity.

Answer

To encrypt DNS queries and responses to ensure confidentiality.

Answer

To provide a faster and more efficient DNS lookup process.

Answer

To block access to known malicious domains at the DNS level.

Question 4

A company needs to establish a secure VPN connection between its headquarters and a branch office over the public internet. The security policy requires that the entire original IP packet, including the source and destination IP headers, be encrypted and encapsulated within a new packet for transit. Which IPsec mode accomplishes this?

Accepted Answer

Tunnel Mode

Answer

Transport Mode

Answer

Encapsulation Mode

Answer

Gateway Mode

Question 5

A network architect is designing a corporate network and wants to logically divide a single physical network into multiple, isolated broadcast domains. The goal is to improve security by containing traffic within specific departments (e.g., Finance, HR, Engineering) and reducing unnecessary network traffic. Which technology is MOST suitable for this purpose?

Accepted Answer

Virtual Local Area Networks (VLANs)

Answer

Subnetting

Answer

Network Address Translation (NAT)

Answer

Dynamic Host Configuration Protocol (DHCP)

Question 6

To proactively block malicious network activity in real-time, a security engineer is deploying a Network Intrusion Prevention System (NIPS). What is the correct placement for this device to ensure it can inspect and take action on traffic before it reaches its destination?

Accepted Answer

Inline, directly in the path of network traffic

Answer

Connected to a SPAN port on a core switch

Answer

Out-of-band, analyzing copies of network traffic

Answer

On a separate management network