NE NE Network Security 3

Question 1

Which security framework is commonly used for US federal agencies and their contractors to manage cybersecurity risk?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST CSF provides guidelines for identifying, protecting, detecting, responding to, and recovering from cybersecurity events.

Question 2

What is port security on a managed switch designed to prevent?

Accepted Answer

Unauthorized devices connecting to switch ports via MAC address control

Answer

Port security limits which MAC addresses can communicate on a switch port, preventing unauthorized devices from connecting.

Question 3

Which attack involves sending crafted DHCP responses to clients in an attempt to become their default gateway?

Accepted Answer

DHCP spoofing

Answer

DHCP spoofing involves a rogue DHCP server providing false gateway/DNS info to clients, enabling traffic interception.

Question 4

What is the purpose of DHCP snooping on a switch?

Accepted Answer

To block unauthorized DHCP servers and validate DHCP messages

Answer

DHCP snooping designates trusted ports (uplinks) and untrusted ports (access), dropping DHCP server replies from untrusted ports.

Question 5

What is the primary security benefit of network segmentation using VLANs?

Accepted Answer

It limits the blast radius of a breach by containing threats within a segment

Answer

VLAN segmentation contains lateral movement; a compromised device in one VLAN cannot directly communicate with devices in another without routing through a firewall.

NE - Network Engineer Practice Test

NE - Network Engineer Practice Test

NE NE Network Security 3