Question 1

Which of the following is the process of running a user desktop inside a virtual machine that resides on a server?
A)PaaS
B)SDN
C)VDI
D)SaaS

Accepted Answer

VDI stands for Virtual Desktop Infrastructure, which is the process of running a user desktop inside a virtual machine that resides on a server. This allows multiple users to access their own desktops from any device with an internet connection, improving flexibility and accessibility.

Option A, PaaS (Platform as a Service) refers to a cloud computing model that provides users with a platform to develop, run, and manage their own applications.

Option B, SDN (Software-Defined Networking) is a network architecture model that separates the control plane and data plane of a network, enabling administrators to centrally manage and configure network devices.

Option D, SaaS (Software as a Service) is a cloud computing model that delivers software applications over the internet to users on a subscription basis.

Question 2

What hardware device can be inserted into a network to allow an administrator to monitor traffic?
A)network tap
B)network mirror
C)shark box
D)shark tap

Accepted Answer

A network tap is a hardware device that can be inserted into a network to allow an administrator to monitor traffic. It is designed to passively listen to network traffic, allowing for real-time monitoring and analysis of data packets. Network taps can be used for a variety of applications, such as troubleshooting network problems, monitoring network performance, and analyzing network security threats.

B, C and D are not common industry terms for a network monitoring device.

Question 3

Select the email protocols that are not secure? (Choose all that apply. )
A)TLS
B)S/MIME
C)POP
D)IMAP

Accepted Answer

POP and IMAP are both insecure email protocols as they do not provide encryption for data in transit. TLS and S/MIME, on the other hand, are secure email protocols that provide encryption for secure communication.

Question 4

What secure protocol is recommended for voice and video?
A)SRTP
B)S/MIME
C)IMAP
D)IPsec

Accepted Answer

SRTP (Secure Real-Time Transport Protocol) is the recommended secure protocol for voice and video communications. It provides end-to-end encryption and authentication to protect against eavesdropping and tampering. S/MIME (Secure/Multipurpose Internet Mail Extensions) is not intended for real-time communication and is mainly used for secure email. IMAP (Internet Message Access Protocol) is a protocol used for email retrieval, not voice and video. IPsec (Internet Protocol Security) is a general-purpose protocol that can provide security for voice and video, but it may add too much overhead to the traffic and affect performance. SRTP is designed specifically for real-time communication and is more efficient in terms of performance.

Question 5

What specific issues are associated with log management? (Choose all that apply. )
A)The multiple devices generating logs.
B)The different log formats.
C)The fast network transfer speeds.
D)The large volume of data that needs to be logged

Accepted Answer

The answer of What specific issues are associated with log...

Question 6

Which of the following protocols is unsecured?
A)HTTPS
B)TLS
C)SSL
D)FTP

Accepted Answer

FTP (File Transfer Protocol) is an unsecured protocol as it transmits data over the network in plaintext, making it vulnerable to interception and eavesdropping. HTTPS, TLS, and SSL are all secured protocols that use encryption to protect data in transit.

Question 7

What secure protocol is recommended for time synchronization?
A)SRTP
B)S/MIME
C)NTP
D)POP

Accepted Answer

The recommended protocol for time synchronization is the Network Time Protocol (NTP). It is commonly used to synchronize system clocks among a set of distributed time servers and clients. NTP employs authentication and encryption mechanisms to secure the communication between the servers and clients, ensuring the accuracy and reliability of the synchronization process. SRTP is a protocol used for secure real-time communication, S/MIME is a protocol for email security and privacy, and POP is a protocol for email retrieval, none of which are suitable for time synchronization.

Question 8

What type of computing environment allows servers,storage,and the supporting networking infrastructure to be shared by multiple enterprises over a remote network connection that had been contracted for a specific period?
A)virtual services
B)hosted services
C)cloud services
D)volume computing

Accepted Answer

The answer of What type of computing environment allows servers,storage,and...

Question 9

On and SDN network,what specific unit gives traffic the permission to flow through the network?
A)SDN router
B)SDN firewall
C)SDN gateway
D)SDN controller

Accepted Answer

The SDN controller manages the flow of traffic on an SDN network by programming and configuring the switches and routers to forward packets according to a defined set of rules. Therefore, the SDN controller is the specific unit that gives traffic the permission to flow through the network.

Question 10

If a network administrator needs to configure a switch to copy traffic that occurs on some or all ports to a designated monitoring port on the switch,what switch technology will need to be supported?
A)interface capture
B)port identity
C)port snooping
D)port mirroring

Accepted Answer

Port mirroring is the technology that allows a switch to copy traffic from one or more ports and send it to a designated monitoring port on the switch for analysis. This feature is useful for troubleshooting, network monitoring, and security analysis. Port mirroring is commonly supported by most managed switches.

Question 11

What are the planes used to allow SDN to virtualize parts of the physical network so that it can be more quickly and easily reconfigured? (Choose all that apply. )
A)data plane
B)management plane
C)control plane
D)Data plane

Accepted Answer

The data plane and control plane are used to allow SDN to virtualize parts of the physical network so that it can be more quickly and easily reconfigured. The data plane is responsible for forwarding traffic, while the control plane is responsible for managing the network and configuring the data plane.

Question 12

What hardware component can be inserted into a web server that contains one or more co-processors to handle SSL/TLS processing?
A)SSL/TLS tap
B)SSL/TLS accelerator
C)SSL/TLS access point
D)SSL/TLS mirror

Accepted Answer

A SSL/TLS accelerator is a hardware component that is inserted into a web server to handle SSL/TLS processing. It contains one or more co-processors that are specifically designed to offload SSL/TLS encryption and decryption tasks from the server's main processor, allowing for faster and more efficient handling of secure communications. The other options (A, C, and D) are not commonly used or recognized terms in this context.

Question 13

Which of the following protocols is used to manage network equipment and is supported by most network equipment manufacturers?
A)TCP/IP
B)FTP
C)SNMP
D)SRTP

Accepted Answer

SNMP (Simple Network Management Protocol) is specifically designed to manage network equipment and is supported by most network equipment manufacturers. TCP/IP (Transmission Control Protocol/Internet Protocol) is the foundation protocol of the internet, but it is not used specifically to manage network equipment. FTP (File Transfer Protocol) is used for transferring files over the internet, but it is not used for managing network equipment. SRTP (Secure Real-time Transport Protocol) is used for secure communications in VoIP (Voice over Internet Protocol) but it is not used to manage network equipment.

Question 14

What secure protocol is recommended for Network address translation?
A)SRTP
B)S/MIME
C)IMAP
D)IPsec

Accepted Answer

IPsec (Internet Protocol Security) is the most recommended secure protocol for Network Address Translation. It provides secure communication through authentication, encryption, and integrity verification of network packets, thus securing the communication between devices in a network. SRTP is used for securing real-time multimedia communication, S/MIME is used for securing email communication, and IMAP is a protocol for email retrieval, none of which are directly related to Network Address Translation.

Question 15

Which technology is a means of managing and presenting computer resources by function without regard to their physical layout or location?
A)IaaS
B)cloud computing
C)virtualization
D)PaaS

Accepted Answer

Virtualization is the technology that allows multiple operating systems, applications or resources to run on a single physical machine by creating a virtual environment. It allows resources to be managed and presented according to their function and not their physical location. IaaS and PaaS are both cloud computing services that use virtualization to provide computing resources, but they do not necessarily focus on managing resources solely based on their function.

Question 16

Select the security tool that is an inventory of applications and associated components that have been pre-approved and authorized to be active and present on the device?
A)malware management
B)inventory permissions
C)application whitelist
D)application control

Accepted Answer

The security tool described is an application whitelist, which is a list of approved applications and associated components that are authorized to be active and present on a device. Malware management involves detecting and removing malicious software, inventory permissions refers to the permissions granted to users for accessing specific resources, and application control refers to the ability to restrict or allow specific actions within an application.

Question 17

What type of switch is used to combine multiple network connections into a single link?
A)core switch
B)gateway switch
C)aggregation switch
D)access switch

Accepted Answer

Aggregation switches are designed to combine multiple network connections, usually from access switches, into a single link. This allows for greater bandwidth and improved network performance. Core switches are used for forwarding data between different networks, gateway switches are used to connect different types of networks, and access switches are used to connect end-user devices to the network.

Question 18

In what type of cloud computing does the customer have some control over the operating systems,storage,and their installed applications?
A)Application as a Service
B)Infrastructure as a Service
C)Software as a Service
D)System as a Service

Accepted Answer

In infrastructure as a service (IaaS), the customer has control over the operating systems, storage, and installed applications, as the provider only offers virtualized computing resources such as servers and storage. This allows for more flexibility and customization compared to other types of cloud computing such as software as a service (SaaS) or platform as a service (PaaS).

Question 19

What type of system is designed to collect and consolidate logs from multiple sources for easy analysis?
A)centralized device log analyzer
B)core device log analyzer
C)network log device
D)system log manager

Accepted Answer

A centralized device log analyzer is specifically designed to collect and consolidate logs from multiple sources in a centralized location for easily analyzing the data. This type of system is commonly used in larger networks or organizations where multiple devices are generating logs that need to be monitored and analyzed. The other options are not specific to log analysis or consolidation.

Question 20

Which Cloud computing service model uses the cloud computing vendor to provide access to the vendor's software applications running on a cloud infrastructure?
A)Application as a Service
B)Infrastructure as a Service
C)Software as a Service
D)System as a Service

Accepted Answer

Software as a Service (SaaS) provides access to software applications that run on a cloud infrastructure managed by the vendor. The user only accesses the software application through a web browser or a thin client installed on their device, without having to manage the underlying infrastructure. Examples of SaaS applications include Microsoft Office 365, Salesforce, or Google Workspace.

Quiz 7: Administering a Secure Network

Which of the following is the process of running a user desktop inside a virtual machine that resides on a server?

What hardware device can be inserted into a network to allow an administrator to monitor traffic?

Select the email protocols that are not secure? (Choose all that apply. )

What secure protocol is recommended for voice and video?

What specific issues are associated with log management? (Choose all that apply. )

Which of the following protocols is unsecured?

What secure protocol is recommended for time synchronization?

What type of computing environment allows servers,storage,and the supporting networking infrastructure to be shared by multiple enterprises over a remote network connection that had been contracted for a specific period?

On and SDN network,what specific unit gives traffic the permission to flow through the network?

If a network administrator needs to configure a switch to copy traffic that occurs on some or all ports to a designated monitoring port on the switch,what switch technology will need to be supported?

What are the planes used to allow SDN to virtualize parts of the physical network so that it can be more quickly and easily reconfigured? (Choose all that apply. )

What hardware component can be inserted into a web server that contains one or more co-processors to handle SSL/TLS processing?

Which of the following protocols is used to manage network equipment and is supported by most network equipment manufacturers?

What secure protocol is recommended for Network address translation?

Which technology is a means of managing and presenting computer resources by function without regard to their physical layout or location?

Select the security tool that is an inventory of applications and associated components that have been pre-approved and authorized to be active and present on the device?

What type of switch is used to combine multiple network connections into a single link?

In what type of cloud computing does the customer have some control over the operating systems,storage,and their installed applications?

What type of system is designed to collect and consolidate logs from multiple sources for easy analysis?

Which Cloud computing service model uses the cloud computing vendor to provide access to the vendor's software applications running on a cloud infrastructure?