CCP Network Security & Communication Protection 3

Question 1

Which wireless security protocol uses SAE (Simultaneous Authentication of Equals) to protect against offline dictionary attacks?

Accepted Answer

WPA3

Answer

WPA3 replaces WPA2's PSK handshake with SAE, which prevents offline password guessing even if an attacker captures the four-way handshake.

Question 2

A company wants to ensure that only authenticated and policy-compliant devices can connect to the corporate network. Which technology enforces this?

Accepted Answer

Network Access Control (NAC)

Answer

NAC evaluates device health posture and authentication status before granting network access, quarantining non-compliant endpoints.

Question 3

Which DNS security extension mechanism digitally signs DNS resource records to prevent DNS cache poisoning?

Accepted Answer

DNSSEC

Answer

DNSSEC uses public key cryptography to sign DNS records, allowing resolvers to verify record authenticity and detect tampering.

Question 4

An IDS generates an alert for legitimate traffic that matches a known attack signature. What is this called?

Accepted Answer

False positive

Answer

A false positive occurs when an IDS incorrectly flags benign traffic as malicious, which can lead to alert fatigue and blocking legitimate activity.

Question 5

Which protocol provides secure, encrypted remote command-line access to network devices and replaces Telnet?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts all traffic including authentication credentials, replacing the plaintext Telnet protocol for remote administration.

(CCP) Certified Cybersecurity Professional Practice Test