CSX CSX Network Security Fundamentals 3 — Questions and Answers
Question 1: Which network scanning technique sends a SYN packet and waits for a SYN-ACK without completing the TCP handshake?
- UDP scan
- Full connect scan
- SYN stealth scan (Correct answer)
- ICMP ping sweep
Correct answer: SYN stealth scan
A SYN stealth scan (half-open scan) identifies open ports without completing the three-way handshake, leaving fewer log traces.
Question 2: What is the function of a honeypot in a network security strategy?
- To back up critical data
- To lure and monitor attackers in a controlled decoy environment (Correct answer)
- To filter spam emails before delivery
- To balance load across web servers
Correct answer: To lure and monitor attackers in a controlled decoy environment
A honeypot is a decoy system designed to attract attackers, allowing defenders to observe their techniques and gather intelligence.
Question 3: Which port number is associated with HTTPS traffic by default?
- 80
- 21
- 443 (Correct answer)
- 8080
Correct answer: 443
HTTPS uses port 443 by default for encrypted web traffic secured by TLS/SSL.
Question 4: What does the term 'network baseline' mean in the context of cybersecurity monitoring?
- The minimum password complexity requirement
- A documented record of normal network behavior used to identify anomalies (Correct answer)
- The lowest acceptable firewall rule count
- The default subnet mask for a Class C network
Correct answer: A documented record of normal network behavior used to identify anomalies
A network baseline captures normal traffic patterns and behavior, enabling analysts to detect deviations that may indicate an incident.
Question 5: Which wireless security protocol replaced WEP due to its critical vulnerabilities?
- WPA2 (Correct answer)
- WEP2
- TKIP-only mode
- Open authentication
Correct answer: WPA2
WPA2 replaced WEP and uses AES-based CCMP encryption, providing significantly stronger wireless security.
Question 6: In network security, what is the purpose of port-based Network Access Control (802.1X)?
- To assign static IP addresses to devices
- To authenticate devices before granting network port access (Correct answer)
- To block all traffic on unused ports automatically
- To provide redundant network paths for high availability
Correct answer: To authenticate devices before granting network port access
IEEE 802.1X enforces port-based authentication, requiring devices to authenticate before network access is granted.
CSX CSX Network Security Fundamentals 3
Which network scanning technique sends a SYN packet and waits for a SYN-ACK without completing the TCP handshake?