CND Network Security Controls & Protocols 2

Question 1

Which protocol provides hop-by-hop authentication and integrity for IPv6 packets?

Accepted Answer

AH (Authentication Header)

Answer

AH provides hop-by-hop authentication and integrity checking for IPv6 but does not provide confidentiality.

Question 2

What is the primary purpose of 802.1X port-based access control?

Accepted Answer

Authenticate devices before granting network access

Answer

802.1X enforces authentication via EAP before a port is authorized, preventing unauthorized device access.

Question 3

A network engineer wants to prevent rogue DHCP servers on a LAN. Which switch feature should be enabled?

Accepted Answer

DHCP Snooping

Answer

DHCP Snooping validates DHCP messages and restricts DHCP server responses to trusted ports only.

Question 4

Which TLS handshake message is used by the client to prove possession of a private key during mutual authentication?

Accepted Answer

CertificateVerify

Answer

The CertificateVerify message contains a digital signature over handshake data, proving the client holds the private key.

Question 5

What does a stateful firewall track that a stateless packet filter does not?

Accepted Answer

Connection state and session context

Answer

Stateful firewalls maintain a state table tracking active connections, allowing return traffic without explicit rules.

(CND) Certified Network Defender Practice Test