D415 Software Defined Networking - Set 1 - Part 2

Test your knowledge of technical writing concepts with these practice questions. Each question includes detailed explanations to help you understand the correct answers.

Question 21: Which organization is responsible for publishing security frameworks and standards to help an organization achieve security outcomes?

Open Web Application Security Project (OWASP)

Internet Assigned Numbers Authority (IANA)

National Institute of Standards and Technology (NIST)

International Organization for Standardization (ISO)

Question 22: Which security process can help obtain a deep insight into events in the existing system?

Vulnerability

Logging

Threat agent

Reconnaissance

Question 23: Which in-line security technology proactively examines, detects, and prevents an attacker from exploiting a vulnerability in a system?

Vulnerability scanner

Port scanner

Intrusion detection system (IDS)

Intrusion prevention system (IPS)

Question 24: Which plane can have security problems such as cross-site scripting and cross-site request forgery?

Application

Data

Management

Control

Question 25: Which communication protocol makes it possible for the SDN controller to interact with devices such as the switch or the router?

Transport Layer Security (TLS)

Secure Shell Protocol (SSH)

Secure File Transfer Protocol (SFTP)

OpenFlow

Question 26: Which device prohibits virtual networks from communicating with other networks during the implementation of virtual extensible local networks (VXLANs)?

Hub

Virtual switch

Gateway

Virtual router

Question 27: Which term describes a network security solution that inspects packets and provides filtering as well as monitoring for virtual machines within a virtualized environment?

Proxy server

Virtual firewall

Physical firewall

Network address translation

Question 28: Which SDN microsegmentation consideration significantly reduces the available attack surface that a network presents?

Zero trust zones

Tools for supporting legacy networks

Fine-grained data flow and policy management

Leveraging cloud-based resource management and support

Question 29: Which benefit of distributed firewalls ensures that telecommuters are protected whether the tunnel is set up or not?

Topology independence

Protection from internal attacks

Elimination of single point of failure

Improved host decision-making

Question 30: Which firewall term refers to a program that deals with external devices on behalf of internal clients?

Network address translation

Dual-homed host

Proxy

Perimeter network

Question 31: Which networking task would benefit from the use of network automation tools?

Configuring multiple wireless access points

Changing user privileges due to job changes

Creating a physical connection between devices

Identifying and fixing a faulty switch protocol

Question 32: Which task can be performed by an administrator using a network's automation software?

Add a firewall to the network

Create a network attack graph

Perform a penetration test

Design the topology of the network

Question 33: Which automation tool uses logic referred to as a playbook?

Ansible

Chef

Puppet

Apstra

Question 34: Which network configuration automation tool is written using C++, Clojure, and Ruby?

Ansible

Chef

Puppet

Apstra

Question 35: How does software-defined networking (SDN) affect information security?

A single device can be configured for switching, routing, load balancing, or security monitoring.

Each network function is handled by a separate, isolated device.

With the complexity of software, carriers have little visibility into security issues.

Network information is now centralized on one physical device.

Question 36: Which model involves moving services like load balancing, firewalls, and intrusion prevention systems away from dedicated hardware into a non-physical environment?

Network functions virtualization (NFV)

Software as a service (SaaS)

Open systems interconnection (OSI)

Internet Engineering Task Force (IETF)

Question 37: A network utilizes virtualized environments with virtual machines running delay-sensitive applications. Which recommendation should be used to protect the virtual workload in accordance with NIST 800-125B?

Virtual firewalls should be deployed for traffic flow control instead of physical firewalls.

Two identical bastion hosts should be used instead of one primary host.

The logical network topology should be either a star topology or a bus topology.

The firewall should be reconfigured and optimized daily.

Question 38: A virtualized network uses a subnet-level virtual firewall. Which recommendation should be used to protect the virtual workload in accordance with NIST 800-125B?

The firewall should be integrated with a virtualization management platform.

The firewall should be accessible only through a standalone console.

The firewall should be located at the center of the network topology.

The firewall should be reconfigured and optimized on a daily basis.

Question 39: A network uses event logging for auditing purposes. How should the audit records be managed according to the recommendations in NIST 800-53?

Generate time stamps for audit records.

Store audit records for a period of 36 months.

Use a designated local device for audit record storage.

Manually inspect audit records at specified intervals.

Question 40: How has network functions virtualization (NFV) changed network functions?

It has moved network functions from stand-alone appliances to software running on any server.

It has moved network functions from software running on any server to stand-alone appliances.

It has moved network functions from the network presentation layer to the transport layer.

It has moved network functions from the network transport layer to the presentation layer.

Don't Want to Study?

Save Time on Studies, Spend More with Family & Friends! Pay-After-you-Pass!

Get Exam Support