CND Network Security Controls & Protocols 5

Question 1

Which security protocol is used by RADIUS to encrypt only the user password field in authentication packets?

Accepted Answer

MD5 with a shared secret

Answer

RADIUS encrypts only the password using MD5 XOR with a shared secret, while the rest of the packet is sent in cleartext.

Question 2

What is the key difference between IDS and IPS deployment in a network?

Accepted Answer

IPS is placed inline and can block traffic; IDS passively monitors

Answer

IPS is deployed inline in the traffic path and can drop or modify packets, while IDS monitors a copy of traffic and only alerts.

Question 3

Which VPN protocol operates at Layer 2 and is commonly used to extend VLANs across WAN connections?

Accepted Answer

L2TP

Answer

L2TP (Layer 2 Tunneling Protocol) operates at Layer 2 and is often paired with IPsec for security to create secure tunnels.

Question 4

A network defender discovers an unauthorized device is responding to ARP requests for the default gateway IP. Which attack is occurring?

Accepted Answer

ARP Spoofing/Poisoning

Answer

ARP Spoofing involves sending fake ARP replies to associate the attacker's MAC with a legitimate IP, enabling man-in-the-middle attacks.

Question 5

Which feature of Next-Generation Firewalls (NGFW) differentiates them from traditional stateful firewalls?

Accepted Answer

Deep packet inspection with application awareness

Answer

NGFWs perform deep packet inspection to identify applications regardless of port, enabling application-layer policy enforcement.

(CND) Certified Network Defender Practice Test