Cybersecurity Perimeter Defense and Network Security
This test covers firewall techniques and various methods for defending network perimeters from cyber attacks, including firewalls, IDS/IPS, VPNs, WAFs, and defense against common attacks like DoS, SQL injection, and XSS. Suitable for CS and GATE aspirants.
Questions
Which of the following is/are true about DMZ (Demilitarized Zone) Architecture in cyber security?
- It provide an interface to separate the networks.
- DMZ is used to denied the traffic form the external network.
- By using DMZ, the traffic from the internal network to the external network is authorized.
- DMZ is used to protect internal servers.
- All of the above
Which of the following is correct about Vulnerability factor in cyber attacks?
- It exploits how easy an organization or government establishment is vulnerable to cyber-attacks.
- Due to this factor, a computer network attack disrupts the integrity or authenticity of data.
- It creates fear amongst individuals, groups, or societies.
- This attacks created direct losses and gained negative publicity.
- Both (1) and (2)
What are the defending perimeters from the firewalls?
- Firewall provides application data validity.
- These are used to check the connectivity of the data packets.
- Firewalls provide application data security running in remote environment.
- All of the above
- Both (2) and (3)
Which of the following is/are false about Application-layer firewall?
- This firewalls work on the application level of the TCP/IP stack.
- It is used to intercept all packets traveling to or from an application.
- This firewall does not run on dedicated hardware or as software on a general-purpose machine.
- This firewall prevents bowsers from cyber attack or worms.
- Both (3) and (4)
Which of the following is/are false about Intrusion Prevention System (IPS)?
- IPS is used to review the network traffic.
- IPS does not check the web application traffic.
- IPS protects from web server attacks to the web applications.
- IPS provides more functionality than IDS (Intrusion Detection System).
- Both (2) and (3)
What are the ways to defend from the Denial of Service (DOS) attack?
- To maintain the checklist of information about the networking environment.
- Disable the unnecessary services and applications.
- Implement the bogon block list.
- All of the above
- Both (1) and (3)
Which of the following is/are true about IDS (Intrusion detection system)?
- IDS is a device that monitors network or system activities for malicious activities.
- An IDS is used to monitor the traffic and spots patterns of activity, alerting you if it concludes that your network is under attack.
- A network-based IDS is used immediate at the external Internet facing network segments then DMZ segments.
- All of the above
- Both (1) and (3)
What are the defending techniques against the SQL injection attack?
- Blacklisting and Whitelisting
- Fortifying SQL statements
- Intrusion prevention and system signatures
- All of the above
- Both (1) and (2)
Which of the following securities does VPN (Virtual Private Network) provide?
- VPN is used to secure user's identity.
- It provides the user's authentication outside the organisation.
- VPN provides encryption of the data.
- VPN also provide message integrity.
- All of the above
Which of the following is/are false about Web Application Firewall (WAF) in cyber security?
- WAF provides security for the web applications.
- WAF can be network or host based.
- WAF does not watch the all network traffic on networking system.
- WAF can not analyse the application layer thoroughly.
- Both (3) and (4)
Which of the following attacks are possible due to SQL injection attack?
- Information disclosure.
- Remote command execution.
- Loss of data availability.
- All of the above
- Both (1) and (2)
Which of the following is/are true about the tools to detect the malware or malicious softwares?
- Configure the workstations and the servers to avoid them from auto-run.
- Automated tools to monitor the workstations and servers.
- Content filter should be use for web servers.
- Minimum use of external devices.
- All of the above
Which of the following is/are known as Cross-site scripting (XSS) attacks?
- These attacks bypass the application's input or output filters to execute malicious scripts in the browser of the application's user.
- The attackers use automated tools to guess passwords that use known dictionary words or that are otherwise predictable.
- This attack bypass the application's input filters to gain unrestrained access to the underlying database.
- Both (1) and (3)
- None of the above
Which of the following controls is/are belong to protect the network services form the cyber attacks?
- Disable the unauthorised installed softwares.
- Use of host based firewalls or filter ports to secure network services.
- The services those are no longer needed should be turned off.
- All of the above
- Both (2) and (3)