StudyXY
RegisterLog in
Back to AI Flashcard MakerCisco Certified Network Associate /Cyber-Security: Chapter 13

Cyber-Security: Chapter 13

Cisco Certified Network Associate30 CardsCreated 2 months ago

This deck covers key concepts from Chapter 13 of a Cyber-Security course, focusing on network security components, protocols, and practices.

PrintEmbedImportReport

What type of function is being performed when a router screens packets based on information in the packet header?

router screening
Tap or swipe ↕ to flip
Swipe ←→Navigate
1/30

Key Terms

Term
Definition
What type of function is being performed when a router screens packets based on information in the packet header?
router screening
Which of the following describes a team of professionals whose job is to detect and respond to security incidents?
Security Operations Center (SOC)
What device is designed specifically to reduce broadcast traffic that passes over a network and to choose the best path for moving those packets?
router
To see what information is stored in RAM, a Cisco administrator would enter which command?
show running-config
A firewall that blocks a Telnet session from leaving the network over TCP port 443 uses which of the following?
Application layer inspection
Application layer inspection
False
Log in to view all terms

Related Flashcard Decks

Cisco Certified Network Associate

Security+ (SY0-701): Cert Master Practice: 3.0 Security Architecture

This deck covers key concepts in security architecture, focusing on cloud connectivity, IDS/IPS deployment, and data protection methods.

5 cards
View Deck
Cisco Certified Network Associate

CCNA 3 v7 Modules 6 – 8: WAN Concepts

This flashcard set covers key concepts of NAT for IPv4, including its benefits in conserving public IP addresses, limitations like lack of end-to-end connectivity, configuration steps for static NAT, and commands used for monitoring translations. It also includes example scenarios to understand NAT address roles and translation limits.

67 cards
View Deck
Cisco Certified Network Associate

CCNA 3 v7 Modules 3 – 5: Network Security

This flashcard set highlights common cybersecurity threats, such as DDoS attacks, buffer overflows, and malware types. It also explores motivations behind different types of hackers, including cybercriminals and hacktivists, and covers fundamental security principles like confidentiality through encryption.

74 cards
View Deck
Cisco Certified Network Associate

CCNA 3 v7 Modules 1 – 2: OSPF Concepts and Configuration

This flashcard set focuses on key OSPF concepts, including the purpose of hello packets, OSPF packet types, and characteristics of the OSPF link-state database. It helps learners understand how OSPF builds neighbor relationships, maintains topology information, and ensures routing accuracy through database synchronization.

56 cards
View Deck
Cisco Certified Network Associate

CCNA 1 v7.0 Final Exam Part 2

This flashcard set reinforces knowledge of static and floating static routes, including configuration of IPv4/IPv6 default routes, route prioritization using administrative distance, and resolving common routing issues. It's ideal for learners aiming to master static route behavior and syntax in Cisco environments.

86 cards
View Deck
Cisco Certified Network Associate

CCNA 2 v7 Modules 10 – 13: L2 Security and WLANs

This flashcard set focuses on identifying Layer 2 security threats, mitigation techniques like port security, and Cisco endpoint security solutions. It also includes foundational concepts of AAA authentication and 802.1X standards, helping learners strengthen network access control knowledge.

81 cards
View Deck

Study Tips

  • Press F to enter focus mode for distraction-free studying
  • Review cards regularly to improve retention
  • Try to recall the answer before flipping the card
  • Share this deck with friends to study together
Cyber-Security: Chapter 13
TermDefinition
What type of function is being performed when a router screens packets based on information in the packet header?
router screening
Which of the following describes a team of professionals whose job is to detect and respond to security incidents?
Security Operations Center (SOC)
What device is designed specifically to reduce broadcast traffic that passes over a network and to choose the best path for moving those packets?
router
To see what information is stored in RAM, a Cisco administrator would enter which command?
show running-config
A firewall that blocks a Telnet session from leaving the network over TCP port 443 uses which of the following?
Application layer inspection
Application layer inspection
False
Which of the following describes a tool that collects logs and alerts from multiple devices for security analysis?
Security Information and Event Management (SIEM)
Which of the following Cisco router components holds the router’s configuration file, and retains the configuration file’s information from being lost if the router is turned off?
NVRAM
Firewalls are installed on a network to protect a company’s internal network from dangers on the Internet. True or False?
True
Which type of Cisco access lists can restrict IP traffic entering or leaving a router’s interface based only on the source IP address?
Standard IP
Web filters can prevent which type of malicious activity?
Drive-by download
A large organization that is responsible for sensitive or critical data may elect to create which of the following to do damage assessment, risk remediation, and legal consultation?
Security Operations Center

A honeypot might be used in a network for which of the following reasons? (Choose all that apply.)

Lure or entrap hackers so that law enforcement can be informed.

Gather information on new attacks and threats.

Distract hackers from attacking legitimate network resources.

A router using a distance-vector routing protocol sends only new information to other routers on the network. True or False?
False
A stateful packet inspection firewall keeps track of network connections by using which of the following?
A state table
A standard IP access list can’t filter IP packets based on a destination address. True or False?
True
Which of the following sits between the Internet and the internal network and is sometimes referred to as a perimeter network?
DMZ
A benchmark is an industry consensus of best practices for writing access lists. True or False?
False
What type of packet filtering records session-specific information about a network connection, including the ports a client uses?
Stateful
Which of the following Cisco router components holds the router’s running configuration, routing tables, and buffers; this information is lost if the router is turned off?
RAM
Which type of memory contains a minimum version of Cisco’s IOS that is used to boot the router if the Cisco IOS becomes corrupted?
Read-only memory
A standard IP access list is restricted to source IP addresses.
True
What type of an IDS is being used when it does not take any action to stop or prevent an activity occurring?
passive system
Which type of routing protocol advertises only new paths to other routers on the network?
Link-state routing protocol
What type of firewall inspects network traffic at a higher level in the OSI model than a traditional stateful packet inspection firewall does?
application-aware firewall
What type of IDSs/IPSs monitors activity on network segments by sniffing traffic as it flows over the network and alerting a security administrator when something suspicious occurs?
Network-based
Which component holds the IOS a Cisco router can use?
Flash memory
Firewalls use which of the following to hide the internal network topology from outside users?
NAT
What specific type of tools can assist teams by identifying attacks and indicators of compromise by collecting, aggregating, and correlating log and alert data from routers, firewalls, IDS/IPS, endpoint logs, Web filtering devices, and other security tools?
SIEM
Which of the following Cisco components stores a router's running configuration, routing tables, and buffers?
RAM