CSX CSX Network Security Fundamentals 2

Question 1

Which attack exploits the lack of source validation in DNS to amplify traffic toward a victim?

Accepted Answer

DNS amplification attack

Answer

DNS amplification attacks send forged DNS queries with the victim's IP as the source, causing large response floods.

Question 2

What is the purpose of network access control (NAC) in a corporate environment?

Accepted Answer

Ensuring only compliant and authenticated devices connect to the network

Answer

NAC enforces security policies by verifying device health and identity before granting network access.

Question 3

Which protocol is used to securely manage network devices by encrypting the management session?

Accepted Answer

SSH

Answer

SSH encrypts management sessions, replacing insecure protocols like Telnet that transmit data in plaintext.

Question 4

What does an IDS (Intrusion Detection System) do that differentiates it from an IPS?

Accepted Answer

It monitors and alerts on suspicious activity without blocking

Answer

An IDS passively monitors traffic and generates alerts, while an IPS actively blocks detected threats.

Question 5

Which of the following best describes a man-in-the-middle (MitM) attack?

Accepted Answer

An attacker intercepts and potentially alters communication between two parties

Answer

In a MitM attack, the adversary secretly intercepts and can modify communications between two parties who believe they are communicating directly.

(CSX) Cybersecurity Nexus Certification Practice Test