CCP Network Security & Threat Mitigation 2

Question 1

Which type of attack involves an adversary intercepting and potentially altering communications between two parties without their knowledge?

Accepted Answer

Man-in-the-middle (MitM) attack

Answer

A man-in-the-middle attack occurs when an attacker secretly intercepts and relays messages between two parties who believe they are communicating directly.

Question 2

What is the primary purpose of network segmentation in a defense-in-depth strategy?

Accepted Answer

Limit lateral movement by containing breaches to isolated zones

Answer

Network segmentation divides a network into isolated zones so that a compromise in one segment cannot easily spread to others, limiting lateral movement.

Question 3

A security team detects a high volume of UDP packets flooding a target server. Which attack type does this most likely represent?

Accepted Answer

UDP flood DDoS attack

Answer

A UDP flood is a volumetric DDoS attack that overwhelms the target with large numbers of UDP packets, exhausting network resources.

Question 4

Which protocol is commonly used to securely manage network devices remotely, replacing the insecure Telnet protocol?

Accepted Answer

SSH

Answer

SSH (Secure Shell) provides encrypted remote management of network devices, making it the secure replacement for plaintext Telnet.

Question 5

What does a stateful firewall track that a stateless packet filter does not?

Accepted Answer

The state of active network connections

Answer

A stateful firewall maintains a connection state table to track active sessions, allowing it to make context-aware filtering decisions.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP Network Security & Threat Mitigation 2