CSX Network Security Fundamentals Flashcards
6 cards from real CSX practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CSX Network Security Fundamentals flashcards as text
Which attack exploits the lack of source validation in DNS to amplify traffic toward a victim?
Answer: DNS amplification attack
DNS amplification attacks send forged DNS queries with the victim's IP as the source, causing large response floods.
What is the purpose of network access control (NAC) in a corporate environment?
Answer: Ensuring only compliant and authenticated devices connect to the network
NAC enforces security policies by verifying device health and identity before granting network access.
Which protocol is used to securely manage network devices by encrypting the management session?
Answer: SSH
SSH encrypts management sessions, replacing insecure protocols like Telnet that transmit data in plaintext.
What does an IDS (Intrusion Detection System) do that differentiates it from an IPS?
Answer: It monitors and alerts on suspicious activity without blocking
An IDS passively monitors traffic and generates alerts, while an IPS actively blocks detected threats.
Which of the following best describes a man-in-the-middle (MitM) attack?
Answer: An attacker intercepts and potentially alters communication between two parties
In a MitM attack, the adversary secretly intercepts and can modify communications between two parties who believe they are communicating directly.
What security control helps mitigate ARP spoofing attacks on a local network?
Answer: Dynamic ARP Inspection (DAI)
Dynamic ARP Inspection validates ARP packets against a trusted DHCP snooping binding table to prevent spoofing.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- isaca.org — Test delivery, eligibility, fees, passing score, registration deadline, renewal, retake fee, retake policy, score release, time limit · verified Oct 2026