NSE Network Security Protocols & Technologies 4

Question 1

What vulnerability does a TLS downgrade attack such as POODLE exploit?

Accepted Answer

Fallback to older, weaker protocol versions like SSLv3

Answer

POODLE exploits servers and clients that fall back to SSLv3, which has a CBC padding oracle vulnerability allowing decryption of ciphertext.

Question 2

In a split-tunnel VPN configuration, which traffic is sent through the encrypted VPN tunnel?

Accepted Answer

Only traffic destined for the corporate network

Answer

Split tunneling routes only corporate-destined traffic through the VPN, while general internet traffic goes directly through the local ISP.

Question 3

Which RADIUS attribute is most commonly used to assign a VLAN to an authenticated user upon 802.1X success?

Accepted Answer

Attributes 64, 65, and 81 (Tunnel attributes)

Answer

RADIUS Tunnel-Type (64), Tunnel-Medium-Type (65), and Tunnel-Private-Group-ID (81) are used together to dynamically assign a VLAN after 802.1X authentication.

Question 4

What is the purpose of the Diffie-Hellman group parameter in an IPsec IKE Phase 1 negotiation?

Accepted Answer

It defines the modulus size or elliptic curve used for the key exchange

Answer

The DH group specifies the mathematical parameters (prime modulus size or EC curve) that determine the strength of the key exchange.

Question 5

Which attack targets the BGP routing protocol by injecting false route advertisements to redirect internet traffic?

Accepted Answer

BGP hijacking

Answer

BGP hijacking occurs when a router announces more-specific or falsified prefixes, causing other ASes to route traffic through the attacker's network.

(NSE) Network Security Expert Practice Test

(NSE) Network Security Expert Practice Test

NSE Network Security Protocols & Technologies 4