NSE Network Security Protocols & Technologies 3

Question 1

Which firewall inspection technique tracks the state of active connections and only allows packets that match a known connection?

Accepted Answer

Stateful inspection

Answer

Stateful inspection firewalls maintain a connection state table and verify that incoming packets belong to an established, allowed session.

Question 2

What mechanism does SSH use to protect against man-in-the-middle attacks during the initial key exchange?

Accepted Answer

Host key fingerprint verification

Answer

SSH relies on the client verifying the server's host key fingerprint against a known-hosts database to detect impersonation.

Question 3

In SNMPv3, which security feature was added that was absent in SNMPv1 and SNMPv2c?

Accepted Answer

User-based authentication and encryption

Answer

SNMPv3 introduced the User-based Security Model (USM), providing authentication (HMAC) and encryption (DES/AES) that earlier versions lacked.

Question 4

What is the primary security advantage of using certificate pinning in mobile applications?

Accepted Answer

It prevents the app from trusting rogue CA-signed certificates

Answer

Certificate pinning hardcodes the expected certificate or public key, so the app rejects connections even if a trusted CA issues a fraudulent cert.

Question 5

Which protocol is used by FortiGate to dynamically learn and enforce role-based access policies based on user identity from an Active Directory domain controller?

Accepted Answer

FSSO (Fortinet Single Sign-On)

Answer

FSSO monitors domain controller login events and maps user-to-IP associations so FortiGate can apply identity-based security policies.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Network Security Protocols & Technologies 3