CCNA Discovery 1 Module 8
1. Identify three techniques used in social engineering. (Choose three.)
• fishing
• vishing
• phishing
• spamming
• pretexting
• junk mailing
2. During a pretexting event, how is a target typically contacted?
• by e-mail
• by phone
• in person
• through another person
3. While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?
• worm
• virus
• Trojan horse
• denial of service
4. What is a major characteristic of a Worm?
• malicious software that copies itself into other executable programs
• tricks users into running the infected software
• a set of computer instructions that lies dormant until triggered by a specific event
• exploits vulnerabilities with the intent of propagating itself across a network
5. A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?
• Trojan horse
• brute force
• ping of death
• SYN flooding
6. What type of advertising is typically annoying and associated with a specific website that is being visited?
• adware
• popups
• spyware
• tracking cookies
7. What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?
• brute force
• spam
• spyware
• tracking cookies
8. What part of the security policy states what applications and usages are permitted or denied?
• identification and authentication
• remote access
• acceptable use
• incident handling
9. Which statement is true regarding anti-virus software?
• Only e-mail programs need to be protected.
• Only hard drives can be protected.
• Only after a virus is known can an anti-virus update be created for it.
• Only computers with a direct Internet connection need it.
10. Which two statements are true concerning anti-spam software? (Choose two.)
• Anti-spam software can be loaded on either the end-user PC or the ISP server, but not both.
• When anti-spam software is loaded, legitimate e-mail may be classified as spam by mistake.
• Installing anti-spam software should be a low priority on the network.
• Even with anti-spam software installed, users should be careful when opening e-mail attachments.
• Virus warning e-mails that are not identified as spam via anti-spam software should be forwarded to other users immediately.
11. What term is used to describe a dedicated hardware device that provides firewall services?
• server-based
• integrated
• personal
• appliance-based
12. Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?
• SPI
• DMZ
• ISR
• ISP
13. Which statement is true about port forwarding within a Linksys integrated router?
• Only external traffic that is destined for specific internal ports is permitted. All other traffic is denied.
• Only external traffic that is destined for specific internal ports is denied. All other traffic is permitted.
• Only internal traffic that is destined for specific external ports is permitted. All other traffic is denied.
• Only internal traffic that is destined for specific external ports is denied. All other traffic is permitted.
14. To which part of the network does the wireless access point part of a Linksys integrated router connect?
• DMZ
• external
• internal
• a network other than the wired network
15. Refer to the graphic. What is the purpose of the Internet Filter option of Filter IDENT (Port 113. on the Linksys integrated router?
• to require a user ID and password to access the router
• to prevent outside intruders from attacking the router through the Internet
• to require a pre-programmed MAC address or IP address to access the router
• to disable tracking of internal IP addresses so they cannot be spoofed by outside devices
16. What statement is true about security configuration on a Linksys integrated router?
• A DMZ is not supported.
• The router is an example of a server-based firewall.
• The router is an example of an application-based firewall.
• Internet access can be denied for specific days and times.
17. What environment would be best suited for a two-firewall network design?
• a large corporate environment
• a home environment with 10 or fewer hosts
• a home environment that needs VPN access
• a smaller, less congested business environment
18. What is one function that is provided by a vulnerability analysis tool?
• It provides various views of possible attack paths.
• It identifies missing security updates on a computer.
• It identifies wireless weak points such as rogue access points.
• It identifies all network devices on the network that do not have a firewall installed.
• It identifies MAC and IP addresses that have not been authenticated on the network.
19. Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.
• Periodically update anti-virus software.
• Be aware of normal network traffic patterns.
• Periodically update the host operating system.
• Activate the firewall on a Linksys integrated router.
• Configure login permissions on the integrated router.
• Disable the wireless network when a vulnerability analysis is being performed.
20. What best practice relates to wireless access point security?
• activation of a popup stopper
• a change of the default IP address
• an update in the antivirus software definitions
• physically securing the cable between the access point and client
21. Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?
• It prevents packets based on the application that makes the request.
• It allows packets based on approved internal MAC or IP addresses.
• It requires that packets coming into the router be responses to internal host requests.
• It translates an internal address or group of addresses into an outside, public address
CCNA Discovery 1 Module 9 Exam Answers Version 4.0
1. What should a network administrator do first after receiving a call from a user who cannot access the company web server?
• Reboot the web server.
• Replace the NIC of the computer.
• Ask the user to log off and log on again.
• Ask the user what URL has been typed and what error message displays.
2. A customer called the cable company to report that the Internet connection is unstable. After trying several configuration changes, the technician decided to send the customer a new cable modem to try. What troubleshooting technique does this represent?
• top-down
• bottom-up
• substitution
• trial-and-error
• divide-and-conquer
3. Only one workstation on a particular network cannot reach the Internet. What is the first troubleshooting step if the divide-and-conquer method is being used?
• Check the NIC, and then check the cabling.
• Check the workstation TCP/IP configuration.
• Test all cables, and then test layer by layer up the OSI model.
• Attempt to Telnet, and then test layer by layer down the OSI model.
4. Which two troubleshooting techniques are suitable for both home networks and large corporate networks? (Choose two.)
• having a backup ISR
• running network monitoring applications
• documenting the troubleshooting process
• keeping a record of system upgrades and software versions
• keeping spare switches, routers, and other equipment available
5. Identify two physical-layer network problems. (Choose two.)
• hardware failure
• software configuration
• devices not able to ping
• loose cable connections
• device driver configuration
6. Which ipconfig command requests IP configuration from a DHCP server?
• ipconfig
• ipconfig /all
• ipconfig /renew
• ipconfig /release
7. What command is used to determine the location of delay for a packet traversing the Internet?
• ipconfig
• netstat
• nslookup
• ping
• tracert
8. What command is used to determine if a DNS server is providing name resolution?
• ipconfig
• netstat
• nslookup
• tracert
9. Which troubleshooting method begins by examining cable connections and wiring issues?
• top-down
• bottom-up
• substitution
• divide-and-conquer
10. A technician suspects that a Linksys integrated router is the source of a network problem. While troubleshooting, the technician notices a blinking green activity LED on some of the ports. What does this indicate?
• Self-diagnostics have not completed.
• The power supply is the source of the problem.
• The ports are operational and are receiving traffic.
• The ports are operational, but no traffic is flowing.
• There are no cables plugged into those ISR ports.
• The ports have cables plugged in, but they are not functional.
11. A PC is plugged into a switch and is unable to connect to the network. The UTP cable is suspected. What could be the problem?
• A straight-through cable is being used
• The connectors at both ends of the cable are RJ-45.
• The RJ-45 connectors are crimped onto the cable jacket.
• A crossover cable is being used.
12. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The wired connection is the wrong type of cable.
• The Linksys integrated router does not support wireless.
13. Which three settings must match on the client and access point for a wireless connection to occur? (Choose three.)
• SSID
• authentication
• MD5 checksum
•
antennae type
• encryption key
• MAC address filters
14. A technician is troubleshooting a security breach on a new wireless access point. Which three configuration settings make it easy for hackers to gain access? (Choose three.)
• configuring NAT
• broadcasting the SSID
• using open authentication
•
enabling MAC address filters
• using the default internal IP address
• using DHCP to provide IP addresses
15. Refer to the graphic. The wireless host cannot access the Internet, but the wired host can. What is the problem?
• The host WEP key is incorrect.
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The integrated router internal IP address is incorrect.
• The integrated router Internet IP address is incorrect.
16. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The wired connection is the wrong type of cable.
• The Linksys integrated router does not support wireless.
17. When acting as a DHCP server, what three types of information can an ISR provide to a client? (Choose three.)
• physical address
• MAC address
• default gateway
• static IP address
• dynamic IP address
• DNS server address
18. What two items could be checked to verify connectivity between the router and the ISP? (Choose two.)
• router status page
• wireless card settings
• router operating system version
• local host operating system version
• connectivity status as indicated by LEDs
19. A technician is unsuccessful in establishing a console session between a PC and a Linksys integrated router. Both devices have power, and a cable is connected between them. Which two troubleshooting steps could help to diagnose this problem? (Choose two.)
• Ensure the correct cable is used.
• Ensure the SSID is the same on both devices.
• Ensure both devices have the same IP address.
• Ensure both devices have different subnet masks.
• Ensure the encryption type on both devices match.
• Ensure the link status LED on the integrated router is lit.
20. Network baselines should be performed in which two situations? (Choose two.)
• after the network is installed and running optimally
• after a virus outbreak is discovered on the network
• after major changes are implemented on the network
• after several computers are added to the network
• at the end of the work week
21. Typically, help desk personnel assist end users in which two tasks? (Choose two.)
• identifying when the problem occurred
• determining if other users are currently logged into the computer
• updating network diagrams and documentation
• implementing the solution to the problem
• running a network baseline test
• determining the cost of fixing the problem
22. How does remote-access software help in the troubleshooting process?
• Remote access uses a live chat feature.
• Users have to be present so that they can view LEDs and change cables if necessary.
• Diagnostics can be run without a technician being present at the site.
• FAQs can be consulted more easily.
23. Which two items should be added to the documentation following a troubleshooting event? (Choose two.)
• final resolution
• repetitive measures
• number of people involved in the problem
• accurate current network infrastructure diagrams
• results of successful and unsuccessful troubleshooting steps
