Author: ITExamAnswers Editorial Team
The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.
1. A cyberanalyst is reviewing an entry-point ACL. What three types of ICMP traffic should be allowed to access an internal network from the internet? (Choose three.) destination unreachable time exceeded ping request reply squelch 2. A company decides to purchase a device capable of managing load balancing …
1. In profiling a server, what defines what an application is allowed to do or run on a server? software environment service accounts user accounts listening ports 2. Which metric class in the CVSS Basic Metric Group identifies the impacts on confidentiality, integrity, and availability? Impact Exploit Code …
1. Which antimalware software approach can recognize various characteristics of known malware files to detect a threat? heuristics-based routing-based behavior-based signature-based 2. In most host-based security suites, which function provides robust logging of security-related events and sends logs to a central location? safe browsing intrusion detection and prevention …
1. Which statement describes the Software-Optimized Encryption Algorithm (SEAL)? SEAL is a stream cipher. It is an example of an asymmetric algorithm. It requires more CPU resources than software-based AES does. It uses a 112-bit encryption key. 2. Which statement is a feature of HMAC? HMAC is based …
1. Which service is provided by the Cisco Talos Group? collecting information about active, existing, and emerging threats preventing online malware from affecting end user devices preventing viruses from affecting end user devices scanning updates for malware code 2. What does the MITRE Corporation create and maintain? IOC …
1. Which component of AAA is used to determine which resources a user can access and which operations the user is allowed to perform? auditing authorization authentication accounting 2. What is the biggest issue with local implementation of AAA? Local implementation cannot provide secure authentication. Local implementation supports …
1. How does BYOD change the way in which businesses implement networks? BYOD devices are more expensive than devices that are purchased by an organization. BYOD provides flexibility in where and how users can access network resources. BYOD requires organizations to purchase laptops rather than desktops. BYOD users …
1. Which action best describes a MAC address spoofing attack? flooding the LAN with excessive traffic bombarding a switch with fake source MAC addresses altering the MAC address of an attacking host to match that of a legitimate host forcing the election of a rogue root bridge 2. …
1. Users in a company have complained about network performance. After investigation, the IT staff has determined that an attacker has used a specific technique that affects the TCP three-way handshake. What is the name of this type of network attack? DNS poisoning session hijacking SYN flood DDoS …
1. What network monitoring tool can be used to copy packets moving through one port, and send those copies to another port for analysis? SPAN syslog SNMP NAC 2. What is the purpose of the Cisco NetFlow IOS technology? to collect operational data from IP networks to periodically …
