3.Question 3What can be configured to allow secure remote connections to web applications without requiring a VPN?1 pointReverse proxyDHCP snoopingRC4Firewall

1.Question 1Which tenant of security are flood guards designed to help ensure?1 pointAuthorizationAuthenticationAccountingAvailability2.Question 2Which enterprise switch features protect against layer 2 man-in-the-middle attacks? Select all that apply.1 pointDynamic ARP inspection (DAI)DHCP Snooping Flood GuardIP Source Guard 3.Question 3What can be configured to allow secure remote connections to web applications without requiring a VPN?1 pointReverse proxyDHCP snoopingRC4Firewall4.Question 4Multiple vulnerabilities in the WEP protocol make it possible for the encryption key to be recovered by hackers. Which parts of the WEP protocol create this vulnerability? Select all that apply.1 pointIn open-system WEP authentication mode, the client can be authenticated by the Access Point (AP) without passing the decryption challenge. WEP encryption is limited to a 64-bit protocol. In shared-key WEP authentication mode, the Access Point (AP) shares both the plaintext and the ciphertext with the client. The initialization vectors, and therefore the encryption keys, were weak and reused too often. 5.Question 5Which of the following are critical flaws of PIN entry WPS authentication with a hard-coded PIN?1 pointIt uses an 8 digit pin, which is made of 7 digits and one checksum value, and sends it in two parts. This means it takes a maximum of 11,000 tries to guess the PIN. There is a one-minute lockout period after three incorrect PIN attempts. It allows for the secure exchange of the SSID and the pre-shared key.The hard-coded PIN can never be reset, so if it is recovered by a hacker it can be reused to recover the new password.6.Question 6Which of the following options is currently the most secure way to protect a wireless network?1 pointWPA802.1x with EAP-TLSWPA2 with AES/CCMP modeWEP7.Question 7You’re an IT support specialist and you’ve been tasked with making sure the company is monitoring its network traffic adequately. What technique should you use if you want to access all packets from a specified port, port range, or entire VLAN?1 pointtcpdumpNetwork hub DHCP snoopingPort mirroring 8.Question 8You’re an IT support specialist tasked with setting up a NIPS to help protect your company’s network traffic from malicious behavior. Which constraint must you consider when you set up the NIPS?1 pointYou must be able to monitor and access all traffic, not just the traffic flowing directly through the NIPS device. The NIPS must have access to all outgoing traffic.The NIPS must have access to all incoming traffic.The monitored traffic must pass through the NIPS so that the NIPS can drop suspicious traffic.9.Question 9Complete the Qwiklab Introduction to tcpdump before answering this question. You want to use tcpdump to retrieve packets with 100.1.4.3 as the source or destination IP address and any port as the source or destination port. Which command should you use?1 pointtcpdump -i eth0 -vn host 100.1.4.3 and port 53 &sudo tcpdump -i eth0 -vn host 100.1.4.3sudo tcpdump -i eth0 -vn host 100.1.4.3 and port 53 &tcpdump -i eth0 -vn host 100.1.4.3 10.Question 10Complete the Qwiklab Introduction to tcpdump before answering this question. You want to determine the layer 3 protocol, source, and destination addresses and ports for all incoming packets, as well as their TCP details. However, you don’t want more detailed output. What additional flags should you use with the command sudo tcpdump -i eth0? 1 point-nnoneB : -v-vn

You're managing a virtual private network (VPN) for remote employees. To ensure secure communication, you need to configure the VPN client and server with appropriate ports. Which port(s) should you use for the VPN tunnel?1.0 MarksVPN uses specific protocol ports depending on the chosen protocol (PPTP, L2TP/IPSec, etc.)Any unused port above 1024 can be used for the VPN tunnelThe VPN automatically configures the necessary ports upon setupStandard web ports (80, 443) are sufficient for secure VPN communicationPort forwarding rules specific to the VPN software are needed

Remote users can connect to an organization's network through this type of secure private connection.Multiple ChoiceVPNDSLWWANP2P

A virtualized Secure Sockets Layer (SSL) virtual private network (VPN) provides the ability to create custom authentication methods.Group of answer choicesTrueFalse

Which type of VPN is often used for remote work and allows employees to securely connect to their company's network?PPTP VPNSite-to-Site VPNSSL VPNRemote Access VPN