IKM - International Knowledge Measurement Network Engineering and Security Questions and Answers

Question 1

A network security engineer is hardening a perimeter firewall.
The policy requires that only explicitly allowed traffic can enter the network.
After adding rules to permit necessary services like HTTPS (port 443), which of the following rules is MOST critical to place at the very end of the inbound Access Control List (ACL)?

Accepted Answer

deny ip any any

Answer

permit ip any any

Answer

permit tcp any established

Answer

deny udp any any

Question 2

In the OSPF routing protocol, what is the primary purpose of electing a Designated Router (DR) on a multi-access network segment like Ethernet?

Accepted Answer

To reduce the number of adjacencies and routing updates exchanged.

Answer

To assign IP addresses to other routers on the segment.

Answer

To encrypt all routing information shared on the segment.

Answer

To act as the sole default gateway for all hosts on the network.

Question 3

A company wants to provide remote employees with access to a specific internal web-based application. The goal is to offer a solution that does not require installing a dedicated VPN client and can be easily accessed through a standard web browser. Which of the following VPN technologies is best suited for this requirement?

Accepted Answer

SSL/TLS VPN

Answer

IPsec VPN

Answer

L2TP/IPsec

Answer

GRE Tunnel

Question 4

A junior network administrator connects two switches using two separate Ethernet cables, intending to provide redundancy. Shortly after, users report that the network is extremely slow and unusable. The activity lights on the switches are blinking constantly and rapidly. What is the MOST likely cause of this issue?

Accepted Answer

A broadcast storm caused by a Layer 2 loop.

Answer

A misconfigured Network Address Translation (NAT) pool.

Answer

The switches have insufficient RAM to handle the traffic.

Answer

The Ethernet cables have exceeded their maximum supported length.

Question 5

Which statement accurately describes the fundamental difference between an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS)?

Accepted Answer

An IDS is deployed out-of-band to monitor and alert, while an IPS is deployed inline to actively block threats.

Answer

An IDS is a hardware appliance, while an IPS is a software solution.

Answer

An IDS can only use signature-based detection, while an IPS uses anomaly-based detection.

Answer

An IDS is used for internal networks, while an IPS is used for perimeter security.

Question 6

A company needs to logically separate the network traffic of its Human Resources and Engineering departments, despite all employees being connected to the same physical switches. The primary goals are to enhance security by preventing devices in one department from easily accessing devices in the other and to reduce broadcast traffic. Which technology is MOST suitable for this purpose?

Accepted Answer

Virtual Local Area Networks (VLANs)

Answer

Physical air-gapping of networks

Answer

Subnetting with static IP addresses

Answer

Quality of Service (QoS) tagging