Questions and answers for exam Preparation

MCQs

Total Questions : 69 | Page 5 of 7 pages

Question 41. What is best practice in firewall domain environment ?

Create two domain trusted and untrusted domain
Create strong policy in firewall to support different types of users
Create one Demiliatarized zone
Create two DMZ zones with one untrusted domain

Discuss Question

Answer: Option C. -> Create one Demiliatarized zone

All live servers or workstations are kept in a separate zone than inside and outside to enhance protection.

Question 42. What is used to protect network from outside internet access ?

A trusted antivirus
24 hours scanning for virus
Firewall to separate trusted and untrusted network
Deny users access to websites which can potentially cause security leak.

Discuss Question

Answer: Option C. -> Firewall to separate trusted and untrusted network

Firewall create a protective barrier to secure internal network. A antivirus can only detect harmful viruses but cannot stop illegal access by remote attacker.

Question 43. What is known as sandbox ?

It is a program which can be molded to do desired task.
It is program that is controlled or emulated section of OS
It is a special mode of antivirus
None of the mentioned

Discuss Question

Answer: Option B. -> It is program that is controlled or emulated section of OS

None.

Question 44. Which direction access cannot happen using DMZ zone by default ?

Company computer to DMZ
Internet to DMZ
Internet to company computer
Company computer to internet

Discuss Question

Answer: Option C. -> Internet to company computer

Connection from internet are never allowed to directly access internal PCs but is routed through DMZ zone to prevent attacks.

Question 45. How do viruses avoid basic pattern matchof antivirus ?

They are encrypted
They act with special permissions
They modify themselves
None of the mentioned

Discuss Question

Answer: Option C. -> They modify themselves

None.

Question 46. Which of the following is true regarding access lists applied to an interface?

You can place as many access lists as you want on any interface until you run out of memory.
You can apply only one access list on any interface.
One access list may be configured, per direction, for each layer 3 protocol configured on an interface.
You can apply two access lists to any interface.

Discuss Question

Answer: Option C. -> One access list may be configured, per direction, for each layer 3 protocol configured on an interface.

Question 47. You are working on a router that has established privilege levels that restrict access to certain functions. You discover that you are not able to execute the command show running-configuration. How can you view and confirm the access lists that have been applied to the Ethernet 0 interface on your router?

show access-lists
show interface Ethernet 0
show ip access-lists
show ip interface Ethernet 0

Discuss Question

Answer: Option D. -> show ip interface Ethernet 0

Question 48.
You need to create an access list that will prevent hosts in the network range of 192.168.160.0 to 192.168.191.0. Which of the following lists will you use?

access-list 10 deny 192.168.160.0 255.255.224.0
access-list 10 deny 192.168.160.0 0.0.191.255
access-list 10 deny 192.168.160.0 0.0.31.255
access-list 10 deny 192.168.0.0 0.0.31.255

Discuss Question

Answer: Option C. -> access-list 10 deny 192.168.160.0 0.0.31.255

Question 49. Which of the following is an example of a standard IP access list?

access-list 110 permit host 1.1.1.1
access-list 1 deny 172.16.10.1 0.0.0.0
access-list 1 permit 172.16.10.1 255.255.0.0
access-list standard 1.1.1.1

Discuss Question

Answer: Option B. -> access-list 1 deny 172.16.10.1 0.0.0.0

Question 50. You want to create a standard access list that denies the subnet of the following host: 172.16.50.172/20. Which of the following would you start your list with?