CCD Network Security 3

Question 1

What is ARP spoofing and what layer of the OSI model does it target?

Accepted Answer

Sending fake MAC-to-IP mappings at Layer 2

Answer

ARP spoofing sends forged ARP replies to link the attacker's MAC address with a legitimate IP, enabling MitM attacks at Layer 2.

Question 2

Which firewall inspection method tracks the state of active connections and makes decisions based on connection context?

Accepted Answer

Stateful inspection

Answer

Stateful inspection firewalls maintain a state table of active connections and allow only packets that match established sessions.

Question 3

What is the function of a Network Access Control (NAC) system?

Accepted Answer

Enforcing security policies before granting network access

Answer

NAC systems verify that endpoints meet security requirements (patch level, antivirus status) before allowing them onto the network.

Question 4

Which protocol is commonly used for centralized authentication, authorization, and accounting (AAA) in network environments?

Accepted Answer

RADIUS

Answer

RADIUS (Remote Authentication Dial-In User Service) is widely used for centralized AAA in networks including Wi-Fi and VPN environments.

Question 5

What is a 'zero-day' vulnerability in the context of network security?

Accepted Answer

A flaw unknown to the vendor with no patch available

Answer

A zero-day vulnerability is an unknown security flaw for which no patch exists, giving defenders zero days to prepare before exploitation.

(CCD) Certified Cyber Defender Practice Test