CAP Network Security Fundamentals 4

Question 1

A CAP practitioner is reviewing a system's network controls. Which document would define the boundary of the information system including all hardware and network components within scope?

Accepted Answer

System Security Plan (SSP)

Answer

The System Security Plan (SSP) defines the authorization boundary, describing all hardware, software, and network components included in the system.

Question 2

What type of network attack floods a switch's MAC address table to cause it to behave like a hub, broadcasting all frames?

Accepted Answer

MAC Flooding

Answer

MAC flooding overflows a switch's CAM table with fake MAC addresses, causing the switch to broadcast traffic to all ports, enabling sniffing.

Question 3

Which DNS security extension helps prevent DNS cache poisoning by digitally signing DNS records?

Accepted Answer

DNSSEC

Answer

DNSSEC uses cryptographic signatures to verify the authenticity and integrity of DNS responses, preventing cache poisoning attacks.

Question 4

In network security, what is the function of a proxy server used as a reverse proxy?

Accepted Answer

Receives external client requests and forwards them to internal servers, hiding server identity

Answer

A reverse proxy sits in front of internal servers, receiving external requests and forwarding them internally, masking server details and adding a security layer.

Question 5

Which network monitoring approach captures every packet on the wire for deep analysis but requires significant storage?

Accepted Answer

Full packet capture (PCAP)

Answer

Full packet capture (PCAP) records every byte of every packet, enabling forensic-level analysis but consuming very large amounts of storage.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Network Security Fundamentals 4