CompTIA CompTIA Mobility+ N10-005 Questions & Answers

• Question 101:

  Which of the following would be used in a firewall to block incoming TCP packets that are not from established connections?

  A. Access control lists

  B. Port address translation

  C. Blocking unauthorized ports

  D. Stateful inspection

  Correct Answer: D

• Question 102:

  Which of the following would be used to place extranet servers in a separate subnet for security purposes?

  A. VPN

  B. NAT

  C. DMZ

  D. IDS

  Correct Answer: C

• Question 103:

  Which of the following a network technician would use to reverse engineer malware and virus?

  A. IDS

  B. VLAN

  C. Virtual Machine

  D. Switch

  Correct Answer: C

  Virtual Machine --- even if the VM gets infected, host machine will run as normal.

• Question 104:

  Which of the following authentication solutions use tickets that include valid credentials to access additional network resources?

  A. Kerberos

  B. RADIUS

  C. Multi-factor authentication

  D. TACACS+

  Correct Answer: A

• Question 105:

  PKI is a method of user authentication which uses which of the following?

  A. Various router commands

  B. Access control lists

  C. Certificate services

  D. A RADIUS server

  Correct Answer: C

  A PKI (public key infrastructure) enables users of a basically unsecure public network such as the Internet to securely and privately exchange data and money through the use of a public and a private cryptographic key pair that is obtained and shared through a trusted authority. The public key infrastructure provides for a digital certificate that can identify an individual or an organization and directory services that can store and, when necessary, revoke the certificates. Although the components of a PKI are generally

• Question 106:

  An administrator would like to inspect all traffic flowing over the SMTP protocol on a given network. Which of the following tools would accomplish this? (Select TWO).

  A. Packet sniffer

  B. Honeypot

  C. Port mirroring

  D. IPS

  E. Port scanner

  F. IDS

  Correct Answer: AC

  (IPS), also known as intrusion detection and prevention systems (IDPS), are network security appliances that monitor network and/or system activities for malicious activity. The main functions of intrusion prevention systems are to identify malicious activity, log information about this activity, attempt to block/stop it, and report it. And we use packet sniffer to detect the types of packet.

• Question 107:

  Stateful packet inspection is a security technology used by which of the following devices?

  A. Unmanaged switch

  B. Hardware firewall

  C. Bridge

  D. IDS

  Correct Answer: B

  With Stateful Packet Inspection (SPI), every time a packet is sent out of the computer, the firewall keeps track of it. When a packet comes back to the firewall, the firewall can tell whether or not the in-bound packet is a reply to the packet that was sent out.This way, the firewall can handle most network traffic safely without a complex configuration of firewall rules.

• Question 108:

  Which of the following features will a firewall MOST likely use to detect and prevent malicious traffic on the network?

  A. Zone filtering

  B. Signature identification

  C. Port identification

  D. Port scanner

  Correct Answer: B

  Signature-based detection really is more along the lines of intrusion detection than firewalls. However, many personal firewalls and some corporate firewalls contain this functionality. Essentially, the system can be configured to look for specific patterns, known to be malicious, and block the traffic

• Question 109:

  An administrator determines there are an excessive number of packets being sent to a web server repeatedly by a small number of external IP addresses. This is an example of which of the following attacks?

  A. DDoS

  B. Viruses

  C. Worms

  D. Man-in-the-middle

  Correct Answer: A

  DDoS attack, a type of attack on a network that is designed to bring the network to its knees by flooding it with useless traffic. Many DoS attacks, such as the Ping of Death and Teardrop attacks, exploit limitations in the TCP/IP protocols

• Question 110:

  Which of the following allows a malicious attacker to view network traffic if the attacker is on the same network segment as Joe, an administrator?

  A. DoS attack

  B. Man-in-the-middle attack

  C. Smurf attack

  D. Xmas attack

  Correct Answer: B

  An attack where a user gets between the sender and receiver of information and sniffs any information being sent. In some cases, users may be sending unencrypted data, which means the man-in-the-middle (MITM) can obtain any unencrypted information. In other cases, a user may be able to obtain information from the attack, but have to unencrypt the information before it can be read.