CompTIA Network+ Network+ Network Security 2

Question 1

Which attack sends unsolicited ARP replies to poison a host's ARP cache and redirect traffic?

Accepted Answer

ARP poisoning

Answer

DNS spoofing

Answer

MAC flooding

Answer

VLAN hopping

Question 2

What is the primary purpose of a honeynet?

Accepted Answer

Lure attackers into an isolated environment to study their techniques

Answer

Filter malicious traffic before it reaches production systems

Answer

Encrypt data in transit between network segments

Answer

Balance load across multiple security appliances

Question 3

Which protocol provides mutual authentication and encrypts 802.1X EAP exchanges using TLS tunnels?

Accepted Answer

PEAP

Answer

EAP-MD5

Answer

LEAP

Answer

EAP-FAST

Question 4

A company wants to prevent users from accessing social media during work hours. Which security control is BEST suited?

Accepted Answer

Content/URL filtering

Answer

IDS signature update

Answer

NAC health check

Answer

Port security on switches

Question 5

In the context of firewalls, what does a stateful inspection firewall track that a basic packet filter does not?

Accepted Answer

The state of active TCP/UDP connections

Answer

Application layer payloads

Answer

User identity and role

Answer

Encrypted VPN tunnels

Question 6

Which wireless security attack exploits the TKIP implementation in WPA to recover keystream bytes?

Accepted Answer

TKIP MIC exploit (Beck-Tews)

Answer

Evil twin attack

Answer

KRACK

Answer

Deauthentication flood

Question 7

What distinguishes a zero-day vulnerability from other security vulnerabilities?

Accepted Answer

No patch or fix is publicly available at the time of exploitation

Answer

It targets only legacy operating systems

Answer

It requires physical access to exploit

Answer

It only affects web applications