SECURE NETWORK ARCHITECTURE

QUESTION 1 OF 7

Why is normalizing log data important in a centralized logging setup? Nice work! Logs from various systems may be formatted differently. Normalizing logs is the practice of reformatting the logs into a common format, allowing for easier storage and lookups in a centralized logging system.

It's difficult to analyze abnormal logs.

Log normalizing detects potential attacks.

Uniformly formatted logs are easier to store and analyze.Correct Answer

The data must be decrypted before sending it to the log server.

QUESTION 2 OF 7

What type of attacks does a flood guard protect against? Check all that apply. You got it! A flood guard protects against attacks that overwhelm networking resources, like DoS attacks and SYN floods.

Malware infections

SYN floodsCorrect Answer

DDoS attacksCorrect Answer

Man-in-the-middle attacks

QUESTION 3 OF 7

What does DHCP Snooping protect against? Good job! DHCP snooping is designed to guard against rogue DHCP attacks. The switch can be configured to transmit DHCP responses only when they come from the DHCP server's port.

DDoS attacks

Brute-force attacks

Data theft

Rogue DHCP server attacksCorrect Answer

QUESTION 4 OF 7

What does Dynamic ARP Inspection protect against? That's exactly right! Dynamic ARP inspection protects against ARP poisoning attacks by watching for ARP packets. If an ARP packet doesn't match the table of MAC address and IP address mappings generated by DHCP snooping, the packet will be dropped as invalid or malicious.

ARP poisoning attacksCorrect Answer

DDoS attacks

Malware infections

Rogue DHCP server attacks

QUESTION 5 OF 7

What does IP Source Guard protect against? Right on! IP Source Guard prevents an attacker from spoofing an IP address on the network. It does this by matching assigned IP addresses to switch ports, and dropping unauthorized traffic.

IP spoofing attacksCorrect Answer

Brute-force attacks

DDoS attacks

Rogue DHCP server attacks

QUESTION 6 OF 7

What does EAP-TLS use for mutual authentication of both the server and the client? Yep! The client and server both present digital certificates, which allows both sides to authenticate the other, providing mutual authentication.

One-time passwords

Digital certificatesCorrect Answer

Usernames and passwords

Biometrics

QUESTION 7 OF 7

Why is it recommended to use both network-based and host-based firewalls? Check all that apply. Nice job! Using both network- and host-based firewalls provides protection from external and internal threats. This also protects hosts that move between trusted and untrusted networks, like mobile devices and laptops.

For protection against DDoS attacks

For protection against man-in-the-middle attacks

For protection for mobile devices, like laptopsCorrect Answer

For protection against compromised hosts on the same networkCorrect Answer

Ready to test your recall?

Why is normalizing log data important in a centralized logging setup? Nice work! Logs from various systems may be formatted differently. Normalizing logs is the practice of reformatting the logs into a common format, allowing for easier storage and lookups in a centralized logging system.

It's difficult to analyze abnormal logs.

Log normalizing detects potential attacks.

Uniformly formatted logs are easier to store and analyze.

The data must be decrypted before sending it to the log server.

How confident are you in this answer?