CCST Network Security & Best Practices 2

Question 1

Which type of attack involves an attacker secretly relaying and possibly altering communications between two parties who believe they are communicating directly?

Accepted Answer

Man-in-the-middle attack

Answer

A man-in-the-middle (MitM) attack occurs when an attacker secretly intercepts and potentially alters communications between two parties.

Question 2

What is the primary purpose of a DMZ (Demilitarized Zone) in network security?

Accepted Answer

To host public-facing services while isolating them from the internal network

Answer

A DMZ is a network segment that hosts public-facing services (like web servers) while keeping them isolated from the internal trusted network.

Question 3

Which 802.1X component is responsible for authenticating end-user devices before granting network access?

Accepted Answer

Authentication Server

Answer

In 802.1X, the Authentication Server (typically a RADIUS server) verifies the credentials provided by the supplicant.

Question 4

A technician discovers that a switch port is receiving BPDU frames from an unauthorized device. Which Cisco feature should be enabled to protect against rogue switches?

Accepted Answer

BPDU Guard

Answer

BPDU Guard disables a port when unexpected BPDU frames are received, preventing unauthorized switches from influencing the Spanning Tree topology.

Question 5

What does the principle of 'defense in depth' mean in network security?

Accepted Answer

Using multiple layers of security controls so that if one fails, others still protect the network

Answer

Defense in depth uses multiple overlapping security layers so that a failure in one control does not compromise the entire network.

(CCST) Cisco Certified Support Technician Networking Practice Test

(CCST) Cisco Certified Support Technician Networking Practice Test

CCST Network Security & Best Practices 2