CND CND Network Defense Infrastructure 2

Question 1

What is the purpose of Network Address Translation (NAT) from a security perspective?

Accepted Answer

It hides internal IP addresses from external networks

Answer

NAT translates private internal IP addresses to a public IP address, effectively hiding the internal network topology from external observers.

Question 2

Which firewall rule processing model checks rules sequentially and stops at the first match?

Accepted Answer

First-match rule base

Answer

Most firewalls use a first-match (first-fit) rule processing model where rules are evaluated top-to-bottom and the first matching rule is applied, making rule ordering critical.

Question 3

A honeypot deployed in a network serves which primary defensive security function?

Accepted Answer

Luring and detecting attackers to study their techniques

Answer

A honeypot is a decoy system intentionally made to appear vulnerable to attract attackers, allowing defenders to detect intrusions and study attacker behavior without risking real assets.

Question 4

What is the purpose of implementing network access control (NAC) in an enterprise environment?

Accepted Answer

To ensure only compliant and authorized devices connect to the network

Answer

NAC enforces security policies on endpoints before granting network access, verifying device compliance (e.g., updated AV, patched OS) and user authentication.

Question 5

Which protocol is used by 802.1X network access control to authenticate devices before they are allowed onto the network?

Accepted Answer

EAP (Extensible Authentication Protocol)

Answer

802.1X uses EAP over LAN (EAPOL) to authenticate supplicants (clients) via an authenticator (switch/AP) to an authentication server (typically RADIUS).

(CND) Certified Network Defender Practice Test

(CND) Certified Network Defender Practice Test

CND CND Network Defense Infrastructure 2