Page: 1
/ 119
Total 1780 questions
Which of the following uses port 22 by default? (Select THREE).
Answer : A,D,E
Explanation:
SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP,
SExec, and slogin, also use TCP port 22.
A firewall technician has been instructed to disable all non-secure ports on a corporate firewall. The technician has blocked traffic on port 21, 69, 80, and 137-139. The technician has allowed traffic on ports 22 and 443. Which of the following correctly lists the protocols blocked and allowed?
Answer : B
Explanation:
The question states that traffic on port 21, 69, 80, and 137-139 is blocked, while ports 22 and 443 are allowed.
Port 21 is used for FTP by default.
Port 69 is used for TFTP.
Port 80 is used for HTTP.
Ports 137-139 are used for NetBIOS.
VMM uses SFTP over default port 22.
Port 22 is used for SSH by default.
SCP runs over TCP port 22 by default.
Port 443 is used for HTTPS.
Pete needs to open ports on the firewall to allow for secure transmission of files. Which of the following ports should be opened on the firewall?
Answer : C
Explanation:
SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP,
SExec, and slogin, also use TCP port 22. Secure Copy Protocol (SCP) is a secure file- transfer facility based on SSH and Remote Copy Protocol (RCP). Secure FTP (SFTP) is a secured alternative to standard File Transfer Protocol (FTP).
Which of the following devices is MOST likely being used when processing the following?
1 PERMIT IP ANY ANY EQ 80
2 DENY IP ANY ANY
Answer : A
Explanation:
Firewalls, routers, and even switches can use ACLs as a method of security management.
An access control list has a deny ip any any implicitly at the end of any access control list.
ACLs deny by default and allow by exception.
Which of the following offers the LEAST amount of protection against data theft by USB drives?
Answer : D
Explanation:
Cloud computing refers to performing data processing and storage elsewhere, over a network connection, rather than locally. Because users have access to the data, it can easily be copied to a USB device.
The server administrator has noted that most servers have a lot of free disk space and low memory utilization. Which of the following statements will be correct if the server administrator migrates to a virtual server environment?
Answer : B
Explanation:
Migrating to a virtual server environment reduces cost by eliminating the need to purchase, manage, maintain and power physical machines. The fewer physical machines you have, the less money it costs.
Which of the following is a programming interface that allows a remote computer to run programs on a local machine?
Answer : A
Explanation:
Remote Procedure Call (RPC) is a programming interface that allows a remote computer to run programs on a local machine.
Which of the following ports and protocol types must be opened on a host with a host- based firewall to allow incoming SFTP connections?
Answer : D
Explanation:
SSH uses TCP port 22. All protocols encrypted by SSH, including SFTP, SHTTP, SCP,
SExec, and slogin, also use TCP port 22.
A system administrator wants to enable WPA2 CCMP. Which of the following is the only encryption used?
Answer : D
Explanation:
Cipher Block Chaining Message Authentication Code Protocol (CCMP) makes use of 128- bit AES encryption with a 48-bit initialization vector.
Which of the following is a directional antenna that can be used in point-to-point or point-to- multi-point WiFi communication systems? (Select TWO).
Answer : A,E
Explanation:
Both the Backfire and the Dish antennae are high gain antenna types that transmit a narrow beam of signal. It can therefore be used as a point-to-point antenna over short distances, but as point-to-multi-point antenna over longer distances.
A security technician needs to open ports on a firewall to allow for domain name resolution.
Which of the following ports should be opened? (Select TWO).
Answer : C,E
Explanation:
DNS uses TCP and UDP port 53. TCP port 53 is used for zone transfers, whereas UDP port 53 is used for queries.
Pete, a security engineer, is trying to inventory all servers in a rack. The engineer launches
RDP sessions to five different PCs and notices that the hardware properties are similar.
Additionally, the MAC addresses of all five servers appear on the same switch port. Which of the following is MOST likely the cause?
Answer : D
Explanation:
Virtualization allows a single set of hardware to host multiple virtual machines.
Due to limited resources, a company must reduce their hardware budget while still maintaining availability. Which of the following would MOST likely help them achieve their objectives?
Answer : A
Explanation:
Because Virtualization allows a single set of hardware to host multiple virtual machines, it requires less hardware to maintain the current scenario.
A security engineer, Joe, has been asked to create a secure connection between his mail server and the mail server of a business partner. Which of the following protocol would be
MOST appropriate?
Answer : D
Explanation: Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. It uses X.509 certificates and hence asymmetric cryptography to authenticate the counterparty with whom it is communicating, and to exchange a symmetric key. The TLS protocol allows client-server applications to communicate across a network in a way designed to prevent eavesdropping and tampering.
A technician is deploying virtual machines for multiple customers on a single physical host to reduce power consumption in a data center. Which of the following should be recommended to isolate the VMs from one another?
Answer : C
Explanation:
A virtual local area network (VLAN) is a hardware-imposed network segmentation created by switches. VLANs are used for traffic management. VLANs can be used to isolate traffic between network segments.