CompTIA Network+ Network+ Network Security 2

Question 1

Which attack sends unsolicited ARP replies to poison a host's ARP cache and redirect traffic?

Accepted Answer

ARP poisoning

Answer

ARP poisoning (ARP spoofing) sends gratuitous ARP replies to associate an attacker's MAC with a legitimate IP, enabling man-in-the-middle attacks.

Question 2

What is the primary purpose of a honeynet?

Accepted Answer

Lure attackers into an isolated environment to study their techniques

Answer

A honeynet is a network of honeypots designed to attract attackers and gather intelligence on their tools and methods.

Question 3

Which protocol provides mutual authentication and encrypts 802.1X EAP exchanges using TLS tunnels?

Accepted Answer

PEAP

Answer

PEAP (Protected EAP) wraps EAP in a TLS tunnel, providing server authentication via certificate and protecting inner EAP credentials.

Question 4

A company wants to prevent users from accessing social media during work hours. Which security control is BEST suited?

Accepted Answer

Content/URL filtering

Answer

Content/URL filtering (typically via a proxy or next-gen firewall) inspects URLs and blocks access to categories like social media.

Question 5

In the context of firewalls, what does a stateful inspection firewall track that a basic packet filter does not?

Accepted Answer

The state of active TCP/UDP connections

Answer

Stateful inspection firewalls maintain a connection state table to verify that incoming packets belong to an established or related connection.

CompTIA Practice Test