CCP Network Security & Threat Mitigation 3

Question 1

Which technology creates an encrypted tunnel over a public network to securely connect remote users to an organization's internal network?

Accepted Answer

VPN

Answer

A Virtual Private Network (VPN) establishes an encrypted tunnel that allows remote users to securely access internal corporate resources over the internet.

Question 2

What is the role of an Intrusion Prevention System (IPS) compared to an Intrusion Detection System (IDS)?

Accepted Answer

IPS actively blocks malicious traffic; IDS only detects and alerts

Answer

An IPS is deployed inline and can actively block or drop malicious traffic, while an IDS monitors traffic passively and generates alerts without blocking.

Question 3

Which network attack exploits trust relationships between systems by forging the source IP address of packets?

Accepted Answer

IP spoofing

Answer

IP spoofing involves crafting packets with a falsified source IP address to impersonate trusted systems or conceal the attacker's identity.

Question 4

In the context of wireless security, what does a deauthentication attack accomplish?

Accepted Answer

Forces clients to disconnect from an access point

Answer

A deauthentication attack sends forged 802.11 deauth frames to disconnect clients from a wireless access point, which can be used to capture handshakes or cause disruption.

Question 5

What is the primary function of a DMZ (Demilitarized Zone) in network architecture?

Accepted Answer

To provide a buffer zone for publicly accessible servers between the internet and internal network

Answer

A DMZ is a subnet that exposes external-facing services (web, email, DNS) to the internet while isolating the internal network from direct external access.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP Network Security & Threat Mitigation 3