Correct Answer:

Escalate the issue - If the technician is out of theories and hasn't found the problem, it's time to get some help from others.

Incorrect Answers:

The tech can't implement the solution, because he doesn't have a solution.  

Establishing a plan comes after the theory of problem cause has been tested and confirmed.  

You only document finding when the problem is solved.

Correct Answer:

Controlling who has access to hardware involves locks on doors, key management, code access, etc.

Incorrect Answers:

The Principle of Least Privilege comes close, but this has more to do with ACLs, rights, and permissions.

Separation of Duties is assigning different roles to different people in the organization regarding specific tasks.

Protecting against social engineering is done through training employees.

Correct Answer:

A firewall can either be stateless or stateful. A stateless firewall examines just the IP address and port number and is used on a more consumer level such as Windows Firewall or Zone Alarm. A stateful firewall will identify incoming packets as a stream, looking for inconsistencies in data as well as examining the IP address and port number. It is used normally in corporate and business LANs.

Incorrect Answers:

A proxy server acts as a middle man between devices on your local network and devices on the Internet. All requests for Internet resources must go through the proxy.

A Domain Name Service (DNS) server operating on port 53 will translate domain names into IP addresses.

An intrusion detection system (IDS) will inspect or detect incoming packets and log information based on its configuration.

Correct Answer:

Count' em! That was three different forms of authentication there. Passes as multifactor authentication to me.

Incorrect Answers:

Single sign-on and two-factor authentication are exactly what they sound like.

Kerberos is a network authentication protocol. Not so much a method of authenticating. For instance, any of the above methods could be using Kerberos as a way of authenticating to the network.

Correct Answer:

Routers do not forward broadcast traffic. Instead, they discard it.

Incorrect Answers:

Routers only discard broadcast traffic, nothing else.

Correct Answer:

Asset management is the documentation we use to keep track of all the network equipment and assets.

Incorrect Answers:

Change management is the documentation we update and refer to when something on the network has changed and it effects policy or adversely effects performance.

Baselines are used as a guideline or benchmark to assess network performance.

Wire schemes tell use what kind of cabling and connectors we'll be using.

Correct Answer:

A man-in-the-middle attack could happen because these are IP-based cameras. An attacker could eaves-drop on a connection and start seeing what you are seeing!

Incorrect Answers:

Phishing and social engineering are ways of exploiting user's trust.

An FTP bounce is a legacy man-in-the-middle style attack used on FTP servers where an attacker uses the port command to request access to ports indirectly, gaining access to a victim's FTP server.

Correct Answers:

dig and nslookup - nslookup is a simple utility for checking DNS names against IP addresses. Dig is a feature-rich DNS-to-IP testing and troubleshooting utility.

Incorrect Answers:

Arp - checks IP address against MAC address.

Route shows or changes the route table within the node.

Netstat shows incoming and outgoing network connections.

Correct Answer:

A Honeynet is a network of honeypots used to simulate a network where all the activity is monitored and recorded.

Incorrect Answers:

A Honeypot is a device on a network that creates vulnerabilities so that an attacker will attempt to take it down. The honeypot will record the activity of the attacker.

A Network Intrusion Detection System (NIDS) is basically an alarm system for your network. It will monitor and log any activity that is going on.

NMAP is security scanner used to map your network and check for vulnerabilities.

Correct Answer:

Man-in-the-middle - A man-in-the-middle attack only works if both parties are on the same network, and the attacker puts himself between the users and their destinations (i.e. the Web).

Incorrect Answers:  

DoS, Smurf, and Xmas attacks are denial of service attacks designed to disrupt services.