Design - 2022 - Practice Test with

WGU - MSCSIA - C700 - Secure Network Design - 2022 - Practice Test with complete solution What is another term for a demilitarized zone (DMZ)? Correct answer- Screened subnet is another term for a demilitarized zone (DMZ). Two firewalls are used in this configuration: one firewall resides between the public network and DMZ, and the other resides between the DMZ and private network.Screened subnet Correct answer- is another term for a demilitarized zone (DMZ). Two firewalls are used in this configuration: one firewall resides between the public network and DMZ, and the other resides between the DMZ and private network.A screened host is Correct answer- a firewall that resides between the router that connects a network to the Internet and the private network. The router acts as a screening device, and the firewall is the screen host. This firewall employs two network cards and a single screening router.A dual-homed firewall is Correct answer- one that has two network interfaces: one interface connects to the Internet, and the other connects to the private network. One of the most common drawbacks to dual-homed firewalls is that internal routing may accidentally become enabled.APIPA Correct answer- ?Infrastructure mode Correct answer- allows wireless computers to connect to a LAN, a WAN, or the Internet.This means that infrastructure mode wireless computers can access all computers on the LAN, WAN, and Internet.Infrastructure mode is much more expensive to implement than ad hoc mode because you must configure wireless access points.While infrastructure mode is harder to set up and configure, it is much easier to manage than ad hoc mode.Ad hoc mode Correct answer- allows wireless computers to be configured much more quickly than infrastructure mode. 1 / 3

computers all participate in the same network.This means that the wireless computers can access each other, but cannot access network resources on a LAN, WAN, or Internet.is much cheaper than infrastructure mode to implement.In addition, it is easy to set up and configure and can provide better performance than infrastructure mode.However, it is difficult to manage.Static IP addresses should not be implemented because the corporate network contains a DHCP server. Correct answer- static IP APIPA should not be used for the same reason. In addition, APIPA is utilized only if a DHCP server is not found. Correct answer- APIPA The Ethernet LAN technology does NOT use a multistation access unit (MAU) as its central device Correct answer- The Ethernet LAN technology does NOT use a multistation access unit (MAU) as its central device Multi-station Access Unit (MAU) Correct answer- Central device in a Token Ring network which passes the Token from device to device serially in order and in a one- way direction.Token Ring supports Correct answer- full duplex transmission using carrier sense multiple access with collision avoidance (CSMA/CA).Ethernet LAN technology Correct answer- supports full duplex transmissions.It uses carrier sense multiple access with collision detection (CSMA/CD).It is defined by IEEE 802.3 Full-duplex can Correct answer- transmit and receive information in both directions simultaneously.synchronous transmission has Correct answer- a start bit is used to indicate the beginning of transmission.The start bit is followed by data bits, and then one or two stop bits follow to indicate the end of the transmission. 2 / 3

In synchronous transmission, Correct answer- the transmitter and receiver have synchronized clocks and the data is sent in a continuous stream.The clocks are synchronized by using transitions in the data and, therefore, start and stop bits are not required for each unit of data sent Half-duplex transmissions are Correct answer- transmissions in which information can be transmitted in two directions, but only one direction at a time.You should complete all of the following steps to protect against war-driving attacks: Correct answer- 1. Change the default SSID.

• Disable SSID broadcasts.
• Configure the network to use

authenticated access only.f

• Implement Wi-Fi Protected Access (WPA) or WPA2 instead of WEP.
• Reduce the access point signal strength.

NetStumbler is a Correct answer- common war-driving tool.To idenfity unauthorized wireless access points you should Correct answer- periodically complete a site survey The reason you would disable SSID broadcasts is to Correct answer- protect a wireless network from hackers and to prevent unauthorized site surveys.WEP - Uses a X-bit or X-bit key Correct answer- 40bit or 104 bit WPA/WPA2 Personal - Uses a x-bit key Correct answer- 256-bit pre-shared key WPA/WPA2 Enterprise - Requires a Correct answer- RADIUS server Dictionary attack - occurs when a Correct answer- hacker tries to guess passwords using a list of common words DoS attack - occurs when a Correct answer- server or resource is overloaded so that legitimate users cannot access it Pharming attack - occurs when Correct answer- traffic is redirected to a site that looks identical to the intended site Phishing attack - occurs when Correct answer- confidential information is requested by an entity that appears to be legitimate WEP/WPA cracking - Correct answer- Mathematical algorithms are used to determine the pre-shared key used on the access point.

• / 3