CAP Network Security Fundamentals 3

Question 1

Which encryption protocol is considered insecure and should NOT be used for securing wireless networks?

Accepted Answer

WEP

Answer

WEP (Wired Equivalent Privacy) uses weak RC4 encryption and has known cryptographic flaws that allow it to be cracked in minutes.

Question 2

What is the purpose of a Security Information and Event Management (SIEM) system in network security?

Accepted Answer

To aggregate, correlate, and analyze security event logs across the network

Answer

A SIEM collects and correlates log data from multiple sources to detect security incidents and support incident response and compliance reporting.

Question 3

Under NIST SP 800-53, which control family specifically addresses network boundary protection?

Accepted Answer

System and Communications Protection (SC)

Answer

NIST SP 800-53 SC (System and Communications Protection) controls cover network boundary protection, including firewalls, encryption, and secure communications.

Question 4

What does an Intrusion Prevention System (IPS) do that an Intrusion Detection System (IDS) does not?

Accepted Answer

Actively blocks or drops malicious traffic in real time

Answer

An IPS actively blocks or drops malicious traffic inline, while an IDS only detects and alerts without taking preventive action.

Question 5

Which VPN protocol is commonly used with IPsec to provide site-to-site connectivity and operates at Layer 3?

Accepted Answer

L2TP/IPsec

Answer

L2TP/IPsec combines L2TP tunneling with IPsec encryption and authentication, commonly used for site-to-site Layer 3 VPN connectivity.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Network Security Fundamentals 3