CompTIA Securtiy+ Set10 A_3_1_Secure_Network_Design

0637
A company is planning to build an internal website that allows for access to outside contractors and partners. A
majority of the content will only be to internal employees with the option to share.

Which of the following concepts is MOST appropriate?

0648
Which of the following differentiates ARP poisoning from a MAC spoofing attack?

0651
A company has just completed a vulnerability scan of its servers. A legacy application that monitors the HVAC
system in the datacenter presents several challenges, as the application vendor is no longer in business.

Which of the following secure network architecture concepts would BEST protect the other company servers if the
legacy server were to be exploited?

0690
Which of the following enables sniffing attacks against a switched network?

0721
A network technician is designing a network for a small company. The network technician needs to implement an
email server and web server that will be accessed by both internal employees and external customers. Which of
the following would BEST secure the internal network and allow access to the needed servers?

0727
An organization has air gapped a critical system.

Which of the following BEST describes the type of attacks that are prevented by this security measure?

0877
A network administrator at a large organization is reviewing methods to improve the security of the wired LAN.
Any security improvement must be centrally managed and allow corporate-owned devices to have access to the
intranet but limit others to Internet access only. Which of the following should the administrator recommend?

0893
While reviewing the wireless router, the systems administrator of a small business determines someone is
spoofing the MAC address of an authorized device. Given the table below:

Host      IP                       Mac 

pc1       192.168.1.20       00 1e 1b 43 21 b2

pc2       192.168.1.20       31 1c 3c 13 25 c4

pc3       192.168.1.20       20 a2 22 45 11 d2

unknown  192.168.1.20   12 44 b2 ff a1 22

Which of the following should be the administrator’s NEXT step to detect if there is a rogue system without
impacting availability?

0914
After segmenting the network, the network manager wants to control the traffic between the segments. Which of
the following should the manager use to control the network traffic?

0945
Which of the following types of attack is being used when an attacker responds by sending the MAC address of the
attacking machine to resolve the MAC to IP address of a valid server?

0948

A security analyst has received several reports of an issue on an internal web application. Users state they are
having to provide their credentials twice to log in. The analyst checks with the application team and notes this is
not an expected behavior. After looking at several logs, the analyst decides to run some commands on the
gateway and obtains the following output:

internet adr           physical address  type

192.168.1.1          ff ec ab 00 aa 78  dynamic

192.168.1.5          ff 00 5e 48 00 fb  dynamic

192.168.1.8          00 0c 29 1a e7 fa  dynamic

192.168.1.10        fc 41 5e 48 00 ff  dynamic

224.215.54.47      ff 00 5e 48 00 fb  dynamic

Which of the following BEST describes the attack the company is experiencing?

0949
A system in the network is used to store proprietary secrets and needs the highest level of security possible. Which
of the following should a security administrator implement to ensure the system cannot be reached from the
Internet?

0993
A security administrator is adding a NAC requirement for all VPN users to ensure the connecting devices are
compliant with company policy. Which of the following items provides the HIGHEST assurance to meet this
requirement?

1014
A technician is auditing network security by connecting a laptop to open hardwired jacks within the facility to
verify they cannot connect. Which of the following is being tested?