CND Network Security Controls & Protocols 3

Question 1

Which protocol replaces Telnet with encrypted remote management and supports public key authentication?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts all traffic and supports password or public-key authentication for remote CLI access.

Question 2

What is the role of a Certificate Revocation List (CRL) in PKI?

Accepted Answer

List certificates no longer trusted before expiry

Answer

A CRL is a signed list published by a CA containing serial numbers of certificates that have been revoked before their expiration.

Question 3

Which network segmentation control isolates traffic by assigning logical broadcast domains on a physical switch?

Accepted Answer

VLAN

Answer

VLANs (Virtual Local Area Networks) segment broadcast domains logically, limiting lateral movement between device groups.

Question 4

A security engineer needs to ensure data integrity without confidentiality for routing protocol updates. Which IPsec mode is most appropriate?

Accepted Answer

AH in Transport mode

Answer

AH in Transport mode authenticates the packet payload and IP header without encrypting data, providing integrity only.

Question 5

What is the function of Network Address Translation (NAT) as a security control?

Accepted Answer

Hides internal IP address space from external networks

Answer

NAT maps private internal IP addresses to a public address, obscuring the internal network topology from external observers.

(CND) Certified Network Defender Practice Test