1. What are the two important components of a public key infrastructure (PKI) used in network security? (Choose two.) digital certificates pre-shared key generation intrusion prevention system certificate authority symmetric encryption algorithms 2. What is the purpose of code signing? integrity of source .EXE files data encryption source …

1. Which security function is provided by encryption algorithms? confidentiality key management authorization integrity 2. Which type of cryptographic key would be used when connecting to a secure website? symmetric keys digital signatures DES key hash keys 3. What do most cryptographic system attacks seek to target? user …

1. Refer to the exhibit. Which type of cipher method is depicted? stream cipher substitution cipher transposition cipher Caesar cipher 2. What are two objectives of ensuring data integrity? (Choose two.) Access to the data is authenticated. Data is unaltered during transit. Data is available all the time. …

1. What is the only type of traffic that is forwarded by a PVLAN protected port to other protected ports? broadcast control user management 2. A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac. What is the purpose of this …

1. A switch has the following command issued as part of an 802.1X deployment. Copyaddress ipv4 10.1.1.50 auth-port 1812 acct-port 1813 What is the purpose of this command? It identifies the address of the default gateway and the ports used for traffic destined for remote networks. It identifies …

1. Which IPS signature trigger category uses the simplest triggering mechanism and searches for a specific and pre-defined atomic or composite pattern? Pattern-Based Detection Honey Pot-Based Detection Policy-Based Detection Anomaly-Based Detection 2. What term describes a set of rules used by an IDS or IPS to detect typical …

1. What is an IPS signature? It is the timestamp that is applied to logged security events and alarms. It is the authorization that is required to implement a security policy. It is a set of rules used to detect typical intrusive activity. It is a security script …

1. Which statement accurately describes Cisco IOS zone-based policy firewall operation? The pass action works in only one direction. A router interface can belong to multiple zones. Router management interfaces must be manually assigned to the self zone. Service policies are applied in interface configuration mode. 2. How …

1. What is one benefit of using a next-generation firewall rather than a stateful firewall? reactive protection against Internet threats support of TCP-based packet filtering support of logging integrated use of an intrusion prevention system (IPS) 2. Which three layers of the OSI model include information that is …

1. In applying an ACL to a router interface, which traffic is designated as outbound? traffic that is coming from the source IP address into the router traffic that is going from the destination IP address into the router traffic that is leaving the router and going toward …