CompTIA Network+ Network+ Network Security 3

Question 1

Which type of IDS/IPS detection method identifies threats by looking for deviations from a learned baseline of normal behavior?

Accepted Answer

Anomaly-based detection

Answer

Anomaly-based detection establishes a baseline of normal traffic patterns and flags deviations, making it effective against novel attacks.

Question 2

An attacker sends thousands of SYN packets without completing the three-way handshake. What attack is being performed?

Accepted Answer

SYN flood

Answer

A SYN flood exhausts a server's connection table by sending SYN packets and never sending the final ACK, leaving half-open connections.

Question 3

Which security framework uses the concept of 'never trust, always verify' as its core principle?

Accepted Answer

Zero Trust

Answer

Zero Trust assumes no user or device is inherently trusted, requiring continuous verification regardless of network location.

Question 4

What is the function of a RADIUS server in network security?

Accepted Answer

Provides centralized authentication, authorization, and accounting for network access

Answer

RADIUS (Remote Authentication Dial-In User Service) centralizes AAA services, allowing network devices to authenticate users against a single server.

Question 5

Which attack technique involves an attacker sending a spoofed ICMP echo request to a network broadcast address to amplify a DoS attack?

Accepted Answer

Smurf attack

Answer

A Smurf attack sends spoofed ICMP echo requests to a broadcast address so all hosts on that network reply to the victim's spoofed source IP.

CompTIA Practice Test