Networks (D325)

Correct Answer

B. WPA3 provides enhanced security features but has not yet seen widespread implementation.

Explanation

WPA3 is the latest security protocol for Wi-Fi networks, providing enhanced encryption and protection against common attacks like brute-force password guessing. While it is more secure than WPA2, its adoption has been slower due to compatibility issues and the need for hardware upgrades. WPA3 is not yet as widely implemented as WPA2, particularly in older devices.

Why other options are wrong

A. WPA3 is the most widely adopted encryption standard for all wireless networks.

While WPA3 offers superior security, WPA2 is still more widely used due to its broader compatibility and longer availability in devices. WPA3 adoption is increasing, but it has not yet reached widespread usage.

C. WPA3 is an outdated encryption method that is being replaced by WPA2.

This statement is incorrect because WPA3 is the newer and more secure encryption standard, designed to replace WPA2 over time. WPA2 is not replacing WPA3; rather, it is the other way around.

D. WPA3 is primarily used in wired networks due to its high security.

WPA3 is designed specifically for wireless networks, not wired ones. Wired networks typically use different security protocols such as 802.1X for access control. WPA3 is meant for securing Wi-Fi connections, not wired communication.

Correct Answer

A. LAN

Explanation

A Local Area Network (LAN) is a network setup typically used in homes and small offices to connect multiple devices like PCs, printers, and smartphones. LANs offer high-speed connectivity and are confined to a limited area, such as a single building. In a typical home setup, multiple PCs are wired to a router using Ethernet cables, forming a LAN that allows file sharing, internet access, and communication among devices.

Why other options are wrong

B. PAN

A Personal Area Network (PAN) is designed for short-range communication between personal devices, such as connecting a phone to a headset or smartwatch. It typically uses Bluetooth or USB and is not suitable for connecting multiple PCs to a router. PANs are limited in range and device count, making them inappropriate for networking a home with several PCs.

C. MAN

A Metropolitan Area Network (MAN) spans a larger area than a LAN, often covering a city or a large campus. It is used to connect multiple LANs together across longer distances, typically managed by Internet service providers or large organizations. A home network does not require this level of coverage or infrastructure, so MAN is too large-scale for the scenario in the question.

D. WAN

A Wide Area Network (WAN) connects networks over large geographical areas, such as cities, countries, or even continents. The internet itself is a WAN. While your home router connects to a WAN to access the internet, the internal wiring between PCs and the router is part of a LAN, not a WAN. WANs are too broad to describe a typical home setup.

Correct Answer

A. Input Validation

Explanation

The best defense against SQL injection, integer overflow, and buffer overflow attacks is input validation. By validating and sanitizing user inputs before processing them, you can ensure that only legitimate data is accepted. This reduces the chances of malicious input leading to vulnerabilities such as SQL injection or buffer overflows. For example, filtering out special characters that could be used in SQL injection and ensuring numerical inputs fall within expected ranges helps prevent these types of attacks.

Why other options are wrong

B. A host-based firewall with advanced security

While a host-based firewall can provide valuable protection against unauthorized traffic, it does not specifically address application-level vulnerabilities such as SQL injection or buffer overflows. It focuses more on controlling incoming and outgoing network traffic, not validating the data that enters the application.

C. Strcpy

The function strcpy is used in programming to copy strings. However, it is prone to causing buffer overflow vulnerabilities if proper bounds checking is not performed. This is not a solution but a potential vulnerability itself, so it should be avoided. Instead, safer alternatives such as strncpy should be used to prevent buffer overflows.

D. Hashing

Hashing is primarily used for securely storing passwords and ensuring data integrity, not specifically for preventing SQL injection, integer overflow, or buffer overflow attacks. While hashing is important for password management and data security, it does not mitigate the risks associated with input validation vulnerabilities in the application.

Correct Answer

A. Malicious software that locks your computer until you pay money

Explanation

Ransomware is a type of malicious software that restricts access to a system or personal files by encrypting them and demanding a ransom payment in exchange for decryption. It is designed to extort money from the victim by making the system unusable unless the ransom is paid.

Why other options are wrong

B. Security software

Security software refers to programs like firewalls, antivirus, and encryption tools designed to protect systems from threats, but ransomware is a malicious type of software, not protective software.

C. Anti-virus software

Anti-virus software is used to detect and prevent malware from infecting a computer system. Ransomware, however, is itself a form of malware, not a defense mechanism.

D. Firewall

A firewall is a network security device or software that monitors and controls incoming and outgoing network traffic based on predetermined security rules. While it can help prevent certain types of attacks, it is not a ransomware program.

Correct Answer

B. To manage data traffic and route information between devices

Explanation

In a star topology, the central node (usually a switch or hub) serves as the focal point for communication between all devices in the network. It manages data traffic by routing information to the correct destination device. Unlike other topologies where devices are connected directly, the central node acts as the intermediary in a star configuration, ensuring efficient data flow and network management.

Why other options are wrong

A. To directly connect all devices without any intermediary

This is more characteristic of a bus or mesh topology, where devices are connected directly without a central intermediary. In a star topology, the central node is the intermediary, not a direct connection.

C. To serve as a backup for data storage

The central node does not typically function as a backup for data storage in a star topology. Its primary role is to manage communication, not store data.

D. To encrypt data before transmission

Encryption of data is usually handled by security protocols, not the central node in a star topology. While security measures can be applied, encryption is not the primary role of the central node in this topology.

Correct Answer

B. A WAP connects wireless devices to a wired network and functions similarly to an ethernet switch.

Explanation

A Wireless Access Point (WAP) serves as a bridge between wireless clients and a wired local area network (LAN). It enables wireless devices to communicate with the wired portion of the network by transmitting and receiving data. Like an ethernet switch for wired connections, a WAP allows multiple devices to connect and communicate over a shared network. This functionality is essential in wireless networking environments.

Why other options are wrong

A. A WAP is solely responsible for routing traffic between different networks.

Routing is typically the responsibility of a router, not a WAP. A WAP does not determine the path data takes across multiple networks; it simply facilitates local wireless connectivity. Therefore, attributing routing duties solely to a WAP is incorrect and misrepresents its role.

C. A WAP is used exclusively for security purposes and does not facilitate internet connectivity.

While security features can be part of a WAP's configuration, its primary role is to provide wireless access. This statement wrongly implies that WAPs don't support internet connectivity, which is a fundamental function they enable for wireless devices through network bridging.

D. A WAP requires no physical connection to the network infrastructure.

This is incorrect because most WAPs require a physical Ethernet connection to a switch, router, or hub to access the broader network. Although some mesh or repeater WAPs can extend connectivity wirelessly, the standard design involves at least one wired connection to the network.

Correct Answer

C. Stateful

Explanation

A stateful firewall keeps track of the state of active connections and can make decisions based on the context of the traffic. It operates up to Layer 4 (Transport layer) and is capable of monitoring entire sessions, allowing or denying packets based on both current and previous packets. This provides a more secure and intelligent filtering process than stateless methods.

Why other options are wrong

A. Group policy

Group policies are administrative tools in Windows environments used to manage settings across user accounts and systems. They are not firewalls and do not handle packet filtering or session management at any network layer.

B. Stateless

Stateless firewalls filter traffic solely based on predefined rules without tracking the state of connections. They do not maintain information about active sessions and therefore do not offer the same level of intelligence or security as stateful firewalls.

D. Static packet-filter

Static packet-filter firewalls inspect packets individually without context or knowledge of session state. They make decisions based on static rules involving IP addresses, ports, and protocols but lack the ability to track ongoing connections, making them less adaptable than stateful firewalls.

Correct Answer

A. Vulnerability Testers

Explanation

Vulnerability Testers are individuals or tools specifically designed to scan networks, servers, and devices for known vulnerabilities. These tools assess the security of the system and help identify potential weaknesses, allowing organizations to address them before they are exploited. Vulnerability testing is an essential part of proactive cybersecurity measures.

Why other options are wrong

B. White hat hackers

White hat hackers are ethical hackers who use their skills to improve security by identifying and fixing vulnerabilities. While they may conduct vulnerability scans, the term "vulnerability tester" specifically refers to tools and processes used to scan for vulnerabilities, not individuals, making this a less accurate option.

C. Black hat hackers

Black hat hackers are individuals who exploit vulnerabilities for malicious purposes. They do not conduct vulnerability scanning for protection but rather to find ways to compromise systems.

D. Script Kiddies

Script kiddies are individuals who use pre-written scripts or tools to conduct cyberattacks, often without understanding how they work. They are not typically involved in formal vulnerability testing or using sophisticated tools like Nessus to scan systems for known vulnerabilities.

Correct Answer

B. Zombies

Explanation

In a DDoS attack, attackers compromise numerous systems and convert them into what are known as "zombies." These zombies are then controlled remotely to simultaneously flood a target system with traffic, overwhelming its resources. The coordinated nature of this attack increases its effectiveness and makes it harder to mitigate. These infected systems operate without the knowledge of the users, allowing attackers to maintain a large attack network.

Why other options are wrong

A. Trojans

Trojans are malicious programs that disguise themselves as legitimate software to trick users into installing them. While Trojans can be used to initiate the infection process, they are not the systems used to carry out the attack. In the context of a DDoS attack, the compromised systems themselves are referred to as zombies, not Trojans. Hence, Trojans are more related to the delivery of malware rather than being part of the attack network.

C. Spyware

Spyware is a type of malicious software designed to gather information from a computer without the user's knowledge. While harmful, spyware’s primary purpose is surveillance, not participating in coordinated network attacks. Spyware typically does not engage in network flooding or coordinated attacks against a single target, so it does not fit the description of infected systems in a DDoS attack.

D. Worms

Worms are self-replicating malware that spread across systems without user intervention. While worms can be used to spread DDoS attack tools, they themselves are not the systems used in the attack. In a DDoS context, the infected machines carrying out the attack are called zombies, regardless of how they were infected. Worms may contribute to the infection process but are not the infected systems used in the actual attack.