You are implementing network access for several internal business units that work with sensitive information on a small organizational network. Which of the following would best mitigate risk associated with users improperly accessing other segments of the network without adding additional switches?

You are implementing network access for several internal business units that work with sensitive information on a small organizational network. Which of the following would best mitigate risk associated with users improperly accessing other segments of the network without adding additional switches?

a. Log analysis
b. Access control lists
c. Network segmentation
d. Proper VLAN management



Answer: D

VLANs provide a way to limit broadcast traffic in a switched network. This creates a boundary and, in essence, creates multiple, isolated LANs on one switch. Answer A is incorrect because logging is the process of collecting data to be used for monitoring and auditing purposes. Answer B is incorrect because access control generally refers to the process of making resources available to accounts that should have access while limiting that access to only what is required. Answer C is incorrect because network segmentation is used for interconnected networks where a compromised system on one network can easily threaten machines on other network segments.

You have recently had security breaches in the network. You suspect they might be coming from a telecommuter's home network. Which of the following devices would you use to require a secure method for employees to access corporate resources while working from home?

You have recently had security breaches in the network. You suspect they might be coming from a telecommuter's home network. Which of the following devices would you use to require a secure method for employees to access corporate resources while working from home?

a. A router
b. A VPN concentrator
c. A firewall
d. A network-based IDS



Answer: B

A VPN concentrator is used to allow multiple users to access network resources using secure features that are built in to the device and are deployed where the requirement is for a single device to handle a very large number of VPN tunnels. Answer A is incorrect because a router forwards information to its destination on the network or the Internet. A firewall protects computers and networks from undesired access by the outside world; therefore, answer C is incorrect. Answer D is incorrect because network-based intrusion-detection systems monitor the packet flow and try to locate packets that are not allowed for one reason or another and might have gotten through the firewall.

Which concept does the Bell-LaPadula model deal most accurately with?

Which concept does the Bell-LaPadula model deal most accurately with?

a. Integrity
b. Trustworthiness
c. Confidentiality
d. Accuracy




Answer: C

The Bell-LaPadula model deals most accurately with confidentiality.

Which of the following is the best description of shoulder surfing?

Which of the following is the best description of shoulder surfing?

a. Following someone through a door they just unlocked
b. Figuring out how to unlock a secured area
c. Watching someone enter important information
d. Stealing information from someone's desk



Answer: C

Shoulder surfing is best defined as watching someone enter important information.