TOC Network Security & Protocols 3

Question 1

What is the difference between an IDS and an IPS in network security?

Accepted Answer

IDS only detects and alerts on threats; IPS detects and actively blocks them

Answer

An Intrusion Detection System (IDS) passively monitors and alerts, while an Intrusion Prevention System (IPS) sits inline and actively blocks malicious traffic.

Question 2

Which attack exploits the trust relationship between a DNS resolver and its cache to redirect users to malicious sites?

Accepted Answer

Pharming via DNS cache poisoning

Answer

DNS cache poisoning (pharming) inserts fraudulent DNS records into a resolver's cache, redirecting users to attacker-controlled IP addresses without their knowledge.

Question 3

A security team wants to monitor all traffic passing through a network switch for analysis. Which switch feature should they enable?

Accepted Answer

Port mirroring / SPAN

Answer

Port mirroring (also called SPAN) copies traffic from one or more switch ports to a designated monitoring port, allowing a sensor or analyzer to capture all traffic.

Question 4

Which of the following BEST describes a zero-day vulnerability?

Accepted Answer

A vulnerability unknown to the vendor with no available patch

Answer

A zero-day vulnerability is one that is unknown to (or unaddressed by) the software vendor, meaning no patch exists, leaving systems exposed to exploitation.

Question 5

What is the purpose of network access control (NAC) in enterprise environments?

Accepted Answer

To ensure only compliant, authenticated devices can connect to the network

Answer

NAC enforces security policy by checking device health (patches, antivirus, certificates) before granting network access, preventing non-compliant endpoints from connecting.

(TOC) Talent Optimization Consultant Practice Test

(TOC) Talent Optimization Consultant Practice Test

TOC Network Security & Protocols 3