CTE Network Security & Protocols 2 — Questions and Answers
Question 1: Which protocol provides secure shell access for remote network device management and encrypts all session traffic?
- Telnet
- SSH (Secure Shell) (Correct answer)
- SNMP v1
- TFTP
Correct answer: SSH (Secure Shell)
SSH encrypts all data in transit, replacing the insecure Telnet protocol for remote device management.
Question 2: A telecom operator needs to authenticate users before granting network access. Which 802.1X component issues or denies access credentials?
- Supplicant
- Authenticator
- Authentication Server (Correct answer)
- RADIUS Proxy
Correct answer: Authentication Server
In 802.1X, the Authentication Server (typically RADIUS) validates credentials and grants or denies access.
Question 3: What type of attack floods a network with spoofed ICMP echo requests, overwhelming the victim with amplified response traffic?
- Smurf attack (Correct answer)
- SYN flood
- Teardrop attack
- Ping of Death
Correct answer: Smurf attack
A Smurf attack sends spoofed ICMP requests to a broadcast address, causing all hosts to reply to the victim.
Question 4: In IPsec, which mode encapsulates the entire original IP packet inside a new IP header, commonly used for VPN tunnels?
- Transport mode
- Tunnel mode (Correct answer)
- Aggressive mode
- Quick mode
Correct answer: Tunnel mode
Tunnel mode encapsulates the entire original packet, making it suitable for site-to-site VPN connections.
Question 5: Which cryptographic concept ensures that a sender cannot later deny having sent a message?
- Confidentiality
- Integrity
- Non-repudiation (Correct answer)
- Availability
Correct answer: Non-repudiation
Non-repudiation, typically provided through digital signatures, prevents a sender from denying a transmitted message.
Question 6: A network administrator wants to segment VoIP traffic from data traffic on the same physical switch. Which technology should be used?
- STP (Spanning Tree Protocol)
- VLANs (Virtual LANs) (Correct answer)
- MPLS
- NAT
Correct answer: VLANs (Virtual LANs)
VLANs logically separate network traffic at Layer 2, isolating VoIP from data traffic on shared switch infrastructure.
Question 7: Which TLS handshake message is used by the server to prove its identity to the client during session establishment?
- ClientHello
- ServerHello
- Certificate (Correct answer)
- ChangeCipherSpec
Correct answer: Certificate
The server sends its digital Certificate during the TLS handshake so the client can verify the server's identity.
CTE Network Security & Protocols 2
Which protocol provides secure shell access for remote network device management and encrypts all session traffic?