CAP Network Security Fundamentals 2 — Questions and Answers
Question 1: Which protocol provides secure, encrypted remote administration of network devices and replaces Telnet?
- SNMP
- SSH (Correct answer)
- RDP
- TFTP
Correct answer: SSH
SSH (Secure Shell) encrypts all traffic between client and server, replacing the plaintext Telnet protocol for secure remote administration.
Question 2: A network administrator wants to prevent unauthorized devices from connecting to the corporate LAN. Which technology should be implemented?
- VLAN tagging
- 802.1X port-based Network Access Control (Correct answer)
- MAC flooding protection
- DHCP snooping only
Correct answer: 802.1X port-based Network Access Control
802.1X enforces authentication before granting network access, ensuring only authorized devices can connect to LAN ports.
Question 3: In the context of the CAP framework, what does 'defense-in-depth' mean for network security?
- Using the deepest firewall ruleset possible
- Layering multiple security controls so no single failure exposes assets (Correct answer)
- Placing all security devices at the network perimeter
- Encrypting data at multiple depths of the OSI model
Correct answer: Layering multiple security controls so no single failure exposes assets
Defense-in-depth means implementing multiple overlapping security layers so that a failure in one control does not leave systems unprotected.
Question 4: Which type of attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?
- Denial of Service
- Man-in-the-Middle (MitM) (Correct answer)
- SQL Injection
- Cross-Site Scripting
Correct answer: Man-in-the-Middle (MitM)
A Man-in-the-Middle attack occurs when an adversary secretly intercepts and can modify communications between two parties who believe they are communicating directly.
Question 5: What is the primary function of a demilitarized zone (DMZ) in network security architecture?
- To isolate internal users from each other
- To host public-facing services while protecting the internal network (Correct answer)
- To terminate VPN connections from remote users
- To store backup copies of sensitive data
Correct answer: To host public-facing services while protecting the internal network
A DMZ is a network segment that hosts public-facing services (e.g., web servers) while keeping them isolated from the trusted internal network.
Question 6: Which network security device inspects traffic at the application layer and can make decisions based on the content of packets?
- Packet-filtering firewall
- Stateful inspection firewall
- Next-Generation Firewall (NGFW) (Correct answer)
- Network hub
Correct answer: Next-Generation Firewall (NGFW)
Next-Generation Firewalls operate at layer 7, performing deep packet inspection and making policy decisions based on application identity and content.
Question 7: When implementing network segmentation, what is the primary security benefit?
- Increases network bandwidth for all users
- Limits the blast radius of a security breach by containing lateral movement (Correct answer)
- Eliminates the need for firewalls
- Reduces the number of IP addresses required
Correct answer: Limits the blast radius of a security breach by containing lateral movement
Network segmentation contains breaches within a segment, preventing attackers from freely moving laterally across the entire network.
CAP Network Security Fundamentals 2
Which protocol provides secure, encrypted remote administration of network devices and replaces Telnet?