Network Security Vulnerability Technician (NSVT) Module 2 Practice Test

These questions are part of the practice quiz. Start practicing

• What is the defining characteristic of restrictive access control?
• What organization is responsible for creating, distributing, and validating digital signatures?
• How do moral implications relate to network vulnerabilities?
• Which term describes the factor of security that is based on information that only the user knows?
• During a vulnerability assessment, what is typically done after identifying vulnerabilities?
• What does an SSL certificate ensure?
• What is the main goal of penetration testing?
• What is the primary function of a security information and event management (SIEM) system?
• What does the acronym IDS stand for in network security?
• What does firewall policy configuration usually determine?
• What is the CIA triad in information security?
• What is the role of the physical layer in a router's defense strategy?
• What is the process of determining if access can be granted based on a credential?
• What is the purpose of encryption?
• What is typically the first step in a penetration testing process?
• Why is real-time log monitoring particularly important?
• What does MFA stand for?
• Which of the following methods denies all services unless explicitly permitted?
• How can effective log management contribute to incident response?
• What are the primary objectives of network security?
• What operational condition corresponds to conducting offline drills every 90 days?
• What does the term "exploit" mean in the context of network security?
• Which of the following best describes a security breach?
• What is the primary goal of penetration testing?
• What are the primary goals of network security?
• What is a firewall?
• Which of the following is a key component of a security policy?
• What is a common challenge associated with log management?
• Which functions are vital for both tactical and non-tactical IP network operations?
• Which of the following best describes a security incident?
• What is a honeypot in the context of network security?
• What is an intrusion detection system (IDS)?
• Which type of logging can provide messages for multiple sessions simultaneously?
• Which access control method restricts access based on the sensitivity of information contained within an object?
• Which class of IP addresses includes the range 128 - 191?
• What is the primary responsibility of a firewall in a network?
• What is the importance of the principle of least privilege?
• Why are security policies important in an organization?
• What is the function of WSAV in network security?
• What is the role of network monitoring in security?
• What does DLP stand for in the context of data security?
• Define "ransomware."
• Which type of logging allows any enabled exec session to receive log messages?
• What is the main goal of network security measures?
• Effective log management often requires the integration of which technology?
• What role does patch management play in network security?
• Which of the following best describes 'vulnerability assessment'?
• What happens in Protect mode of port security?
• How does Restrict mode of port security operate?
• What type of events are typically monitored through log management?
• What is the main purpose of using Access Control Lists?
• Which of the following is categorized as "something you are" in the context of network security?
• What is the purpose of vulnerability scanning?
• Which type of attack focuses on gaining unauthorized access to confidential information?
• Why is continuous monitoring essential in network security?
• What is the primary benefit of using a firewall?
• Which type of protocol is used to exchange routing information between Wide Area Networks (WANs)?
• What is phishing?
• What does CVE stand for in cybersecurity?
• What does the term "attack surface" refer to?
• Which of the following is a common type of malware?
• What type of information can typically be found in a vulnerability report?
• What does the term "vulnerability" refer to in network security?
• What is patching?
• What does "endpoint security" primarily focus on?
• What VPN protocol is known for its robust encryption and policy-based traffic determination?
• What are access controls?
• What is the primary purpose of network segmentation?
• What is the main objective of conducting vulnerability scans?
• Which MAC address authentication method enhances port security on a network?
• Which of the following is a key benefit of analyzing logs?
• Which regulatory aspects can log management help organizations comply with?
• What type of vulnerabilities can lead to potential compromises?
• Which of the following is a common characteristic of VPNs?
• What accurately describes a supply chain attack?
• What is the primary function of a Security Operations Center (SOC)?
• Which of the following tools is commonly used for penetration testing?
• What is a method used to bypass MAC filtering in wireless networks?
• What are firewall rules?
• What is meant by "white-hat hacking"?
• What encryption algorithm is primarily used by the Department of Defense?
• What does stateful packet filtering maintain to track connections?
• What tool can be used for network vulnerability scanning?
• What is a security audit?
• Who are referred to as script kiddies in the context of network security?
• What is the most common use of a TCP Utility program like netstat?
• Which of the following is NOT a part of a vulnerability assessment?
• Which aspect of network security does the term 'authorization' refer to?
• What does POP3 do in its default state regarding username and password information?
• What are the three modes of port security in network devices?
• Which packet filtering method does NOT keep track of connections?
• What architecture includes eleven Local Network Service Centers?
• Which protocol provides a generic tunnel transport without encryption?
• Which system lacks the ability to provide Quality of Service for video communications?
• What does the term "malware" encompass?
• What is referred to as a zero-day vulnerability?
• What is social engineering in the context of cybersecurity?
• What is a key aspect of risk management in cybersecurity?
• Which statement describes remediation steps in a vulnerability report?
• What is the common key length used in AES for encryption?
• What does a security breach response entail?
• Which characteristic is essential for a strong password?
• What type of analysis is typically used to assess wireless network vulnerabilities?
• What is the name of the core OS fully dedicated to running virtual machines?
• Which factor of security is associated with biometric verification techniques?
• At which INFOCON level should baseline security drills be conducted every 60 days?
• What is the process of identifying, quantifying, and prioritizing vulnerabilities in a system called?
• What is referred to as "something you have" in network security?
• Which factors are considered in the authentication method?
• What does the term "Cost" refer to in the context of networking paths?
• What is the main difference between a vulnerability assessment and penetration testing?
• What is a key characteristic of a network firewall?
• What does the principle of least privilege advocate for user access levels?
• What does an incident response plan entail?
• What does endpoint security help to protect?
• Which of the following describes a rogue device that mimics a legitimate device?
• What is the purpose of data encryption?
• What is the purpose of network segmentation?
• What is the main purpose of the MAC address in network security?
• How can software vulnerabilities be categorized?
• What type of access level does not allow users to make system configuration changes?
• What is a zero-day vulnerability?
• Which of the following would most likely indicate a need for log management improvements?
• In cybersecurity, what does the term "payload" refer to?
• Which of the following best describes social engineering?
• What does Nmap specialize in?
• What does AES stand for in encryption standards?
• Why is the role of a SOC critical in an organization?
• What distinguishes a threat from a vulnerability?
• How do threats and vulnerabilities differ?
• What does the acronym DDoS stand for?
• What is the primary goal of a packet sniffer in network analysis?
• What does the principle of least privilege entail?
• Why is security awareness training important for employees?
• Which of the following is essential for ensuring data integrity?
• What security protocol uses IKE for key management?
• Which INFOCON level is associated with a 30-day security baseline reset?
• What is a packet sniffer used for in network security?
• What role does analysis play in the log management process?
• Which layer of the OSI model is focused on end-to-end communication?
• What does "privilege escalation" typically involve?
• What type of threats does security awareness training address?
• What is multifactor authentication (MFA)?
• What type of threats does endpoint security protect against?
• How does a VPN enhance network security?
• What benefit does centralized log management provide to an organization?
• Which keys are used to release the keyboard and mouse from a virtual machine?
• What is a patch management process?
• What is the primary purpose of a Web Application Firewall (WAF)?
• What is the primary function of Keepalives in a TCP connection?
• How are extended ACLs typically placed in relation to traffic?
• What should organizations regularly conduct to enhance their security posture?
• What is a common impact of a DDoS attack?
• What is the purpose of the netstat -a command?
• What is the purpose of honeypots in network security?
• Which encryption standard is banned by DISA STIG?
• Log management is crucial for ensuring which of the following?
• Which aspect of information security can an attack vector compromise?
• Which method in firewall rules explicitly permits certain services?
• Which IEEE standard was originally designed for port-based network access control?
• What is the goal of threat assessment?
• Which method is used to ensure timely detection of connection failures in TCP?
• Which of the following best describes the role of a proxy server?
• Burp Suite is a tool used primarily in which area?
• What is a potential risk when using 3DES despite its secure history?
• What characterizes a supply chain attack?
• What happens to log messages sent to the console?
• What is a botnet?
• What is an exploit?
• Which logging practice can enhance security incident investigations?
• What type of attack seeks to overwhelm a system with traffic?
• In a network, what can potentially lead to vulnerabilities?
• Which of the following tools is commonly used for vulnerability scanning?
• Which statement is true regarding multifactor authentication?
• What defines a security policy?
• What is a Common Vulnerability and Exposure (CVE)?
• Which security practice focuses on blocking unauthorized services and allowing only necessary ones?
• What does an IAS server leverage for user validation?
• What constitutes a security incident?
• What defines a logical security control?
• What defines an attack vector in the context of network security?
• What is the primary function of log management in cybersecurity?
• What is a brute force attack?
• What is the purpose of an access control list (ACL)?
• What is social engineering in network security?
• What occurs in Shutdown mode of port security?
• What is an electronic document that binds a public key with an identity using a digital signature called?
• In which mode does a network device increment the SecurityViolation counter when a violation occurs?
• What is the difference between qualitative and quantitative risk analysis?
• How does encryption enhance data security?
• What does the acronym VPN stand for?
• What is the purpose of console logging in network devices?
• In networking, what term is used to describe the feasibility of a specific path?
• What does INFOCON stand for in the context of security?
• What does the term "social engineering" refer to?
• What is phishing?
• What are the components of a risk assessment?
• What is a vulnerability database?
• How does data encryption protect sensitive information?
• What can result from an unfiltered network firewall?
• Which ethical considerations arise from network vulnerabilities?
• Which of the following best describes firewalls?
• What is the primary function of Anti-Virus software?
• Which of the following best describes the role of compliance in log management?
• What are the main types of network vulnerabilities?
• What should occur if audit logs fill up and the system cannot record monitoring information?
• What is a security breach?
• What protocol is known to send complete username and password information in clear text?
• What is one way log management can impact threat detection?
• Which practice is essential for maintaining data confidentiality?
• What type of access control can block traffic based on the source address?
• What is the primary role of a Network Security Vulnerability Technician (NSVT)?
• In network security context, what does impersonation allow an attacker to achieve?
• What does an Access Control List (ACL) provide for routers and firewalls?
• What does FLTNOC provide for the ships' communications systems?
• What constitutes a data breach?
• How is a Distributed Denial of Service (DDoS) attack characterized?
• What is a common method of securing data at rest?
• Which of the following describes proactive security?
• Describe the role of threat intelligence.
• Which term refers to a connection method that integrates both authentication and encryption of IP packets?
• Which of the following is a key benefit of data encryption?
• How does security awareness training contribute to network security?
• Which of the following is a sign of a potential malware infection?
• Which technique is commonly used to secure sensitive information during transmission?
• What does the term “authentication” refer to?
• What is the difference between symmetric and asymmetric encryption?
• What is the function of an IPS?
• What is the primary objective of a cybersecurity framework?
• What is the primary purpose of encryption in VPN protocols?
• During which phase does IKE establish a secure tunnel for communications?
• What is a characteristic of a transparent firewall?
• How often should the security baseline be re-established?
• What does security auditing involve?
• Which of the following best describes a vulnerability in network security?
• What is the primary function of a VPN?
• What is a digital certificate used for?
• What would be considered a key element in enhancing network security?
• What is the primary function of a firewall?
• Which tool is an approved Navy scanning utility for external port scans?
• What is a common function of both standard and extended ACLs?
• Which network class includes the IP address range of 192 - 223?
• What does a packet sniffer analyze within a network?
• What is the primary function of stateful packet filtering in network security?
• What type of networking device is primarily responsible for forwarding, filtering, and flooding packets between networks?
• What technique involves changing the MAC address of an unauthorized device to that of a legitimate one?
• Which method is commonly used to protect against unauthorized access?
• What is the main objective of incident response planning in organizations?
• What is the purpose of threat modeling?
• What does the term "risk analysis" refer to?
• What is a remote access tool (RAT) commonly used for?
• What is the primary function of a firewall in a network?
• What command can be used to display active open Telnet or rlogin connections?
• What is social engineering in the context of cybersecurity?