CAP Network Security Fundamentals 2

Question 1

Which protocol provides secure, encrypted remote administration of network devices and replaces Telnet?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts all traffic between client and server, replacing the plaintext Telnet protocol for secure remote administration.

Question 2

A network administrator wants to prevent unauthorized devices from connecting to the corporate LAN. Which technology should be implemented?

Accepted Answer

802.1X port-based Network Access Control

Answer

802.1X enforces authentication before granting network access, ensuring only authorized devices can connect to LAN ports.

Question 3

In the context of the CAP framework, what does 'defense-in-depth' mean for network security?

Accepted Answer

Layering multiple security controls so no single failure exposes assets

Answer

Defense-in-depth means implementing multiple overlapping security layers so that a failure in one control does not leave systems unprotected.

Question 4

Which type of attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?

Accepted Answer

Man-in-the-Middle (MitM)

Answer

A Man-in-the-Middle attack occurs when an adversary secretly intercepts and can modify communications between two parties who believe they are communicating directly.

Question 5

What is the primary function of a demilitarized zone (DMZ) in network security architecture?

Accepted Answer

To host public-facing services while protecting the internal network

Answer

A DMZ is a network segment that hosts public-facing services (e.g., web servers) while keeping them isolated from the trusted internal network.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Network Security Fundamentals 2