Networking Security

Question 1

What is AAA stand for?

Hint: AAA is a misnomer

Answer 1

• I = Identification (Hidden)
• A = Authentication
• A = Authorization
• A = Accounting
• A = Auditing (Hidden)

Question 2

What is an example of:

• Identification
• Authentication
• Authorization
• Accounting
• Auditing

Answer 2

• Providing Username
• Proving you say who you are
• Getting Access
• Collecting Logs
• Review of Logs

Question 3

What is RADIUS?

Answer 3

A AAA Implementation used for Network access

Question 4

What are 3 characteristics of RADIUS?

Answer 4

• Primarily used for network access
• Combines Authentication and Authorization
• Encrypts only the password in the access-request packet

Question 5

What is TACACS+?

Answer 5

A AAA implementation used for Network Device Management

Question 6

What are 3 characteristics of TACACS+?

Answer 6

• Encrypts the entire access-request packet
• Primarily used for network device administration
• Separates authentication and authorization

Question 7

What wireless encryption scheme offers the highest level of protection?

• What encryption schemes can be used for it and which is best?

Answer 7

WPA3

• AES-CCMP
• AES-GCMP (Best)

Question 8

What security protocol is designed to strengthen WEP implementations?

Answer 8

TKIP

Question 9

What cryptographic algorithm is the least vulnerable to attacks?

Answer 9

AES (Advanced Encryption Standard)

Question 10

What encryption scheme is used in WiFi Protected Access 2 (WPA2)?

Answer 10

AES-CCMP

Question 11

What refers to a client authentication method used for the following:

• WPA2 Personal mode
• WPA3 Personal mode

Answer 11

• PSK (Pre-Shared Key)
• SAE (Simultaneous Authentication of Equals)

Question 12

What would be the best solution for securing a small network that lacks an authentication server?

Answer 12

WPA3-SAE

Question 13

What are 3 characteristic features of WPA2/WPA3 Enterprise mode?

Answer 13

• Used for Large Corporate Networks
• IEEE 802.1X
• Requires RADIUS Authentication Server

Question 14

What authentication protocol can be used to enable SSO in Windows-based network environments?

Answer 14

Kerberos

Question 15

In the Kerberos-based authentication process, the purpose of the client’s timestamp is to provide a countermeasure against:

Answer 15

Replay Attacks

Question 16

What are the 4 basic fundamental Wi-Fi Security practices?

Answer 16

1. Disable SSID Broadcast
2. Use WPA2/WPA3
3. Disable WPS
4. Enable Content Filter