Practice–Cisco Configure Network and Device Security

The following activities provide practice with the topics introduced in this chapter.

Labs

Lab—Configure Windows Firewall Settings (16.3.8)

Packet Tracer Activities

Packet Tracer—Configure Basic Wireless Security (16.2.4)

Check Your Understanding Questions

Complete all the review questions listed here to test your understanding of the topics and concepts in this chapter. Appendix A, “Answers to the ‘Check Your Understanding‛ Questions,” lists the answers.

1. What type of authentication do most access points use by default?

1. WEP
2. EAP
3. PSK
4. Open

2. What is the purpose of a DMZ?

1. It creates an encrypted and authenticated tunnel for remote hosts to access the internal network.
2. It provides secure connectivity for clients that connect to the internal network through a wireless LAN.
3. It analyzes traffic for intrusion attempts and sends reports to management stations.
4. It enables external hosts to access specific company servers while maintaining the security restrictions for the internal network.

3. Which actions improve security on a wireless network? (Choose two.)

1. Broadcast the default SSID.
2. Keep the default administrator password for the access point.
3. Enable WPA2-PSK.
4. Enable MAC filtering.

4. What is the term used to describe the area of a network which stores servers that are accessible to any users from the Internet?

1. DMZ
2. Demarcation point
3. Extranet
4. Intranet

5. What is a feature that an administrator can use to prevent unauthorized users from connecting to a wireless access point?

1. MAC filtering
2. Proxy server
3. WPA encryption
4. Software firewall

6. What is the purpose of a wireless SSID?

1. To securely transmit data between wireless clients
2. To uniquely identify a wireless network
3. To securely connect a wireless client to an access point
4. To reliably receive and transmit data from wireless clients

7. Port triggering has been configured on a wireless router. Port 25 has been defined as the trigger port and port 113 as an open port. What effect does this have on network traffic?

1. All traffic that is sent into port 25 to the internal network is also allowed to use port 113.
2. All traffic that is sent out port 25 opens port 113 to allow inbound traffic into the internal network through port 113.
3. Any traffic that comes into port 25 allows outgoing port 113 to be used.
4. Any traffic that is using port 25 going out of the internal network is also allowed to transmit out port 113.

8. A network administrator has decided to use WPA2 for security in a WLAN. Which statement describes WPA2?

1. WPA2 specifies the use of a dynamic encryption key.
2. WPA2 uses preconfigured keys to encrypt and decrypt data.
3. WPA2 specifies the use of a static encryption key that must be changed frequently to enhance security.
4. WPA2 requires use of an open authentication method.

9. Which component is designed to protect against unauthorized communications to and from a computer?

1. Antivirus
2. Security center
3. Port scanner
4. Firewall
5. Antimalware

10. Which wireless access point association parameter does the wireless client use to distinguish between multiple wireless networks in the same vicinity?

1. Password
2. Channel setting
3. SSID
4. Network mode