Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Chapter 13 Solutions 13-1
Chapter 13 Solutions
Review Questions
1. Which type of routing protocol broadcasts the entire routing table when a new path is
discovered?
2. A router using a distance-vector routing protocol sends only new information to other
routers on the network. True or False?
3. Which of the following Cisco components stores a router’s running configuration, routing
tables, and buffers?
4. If a Cisco router’s flash memory becomes corrupted, the router can boot from which of
the following components?
5. Which prompt is displayed if a user logs on to a Cisco router in privileged mode?
6. A standard IP access list can’t filter IP packets based on a destination address. True or
False?
7. Which of the following describes a tool that collects logs and alerts from multiple devices
for security analysis?
8. What’s the main purpose of a firewall? (Choose all that apply.)
9. Firewalls are installed on a network to protect a company’s internal network from
dangers on the Internet. True or False?
10. Firewalls use which of the following to hide the internal network topology from outside
users?
11. A stateful packet inspection firewall keeps track of network connections by using which
of the following?
12. A firewall that blocks a Telnet session from leaving the network over TCP port 443 uses
which of the following?
Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Chapter 13 Solutions 13-2
13. Web filters can prevent which type of malicious activity?
14. A DMZ is also referred to as which of the following?
15. A Cisco security appliance can include all the following functions except:
16. Which of the following terms describes a team of professionals whose job is to detewct
and respond to security incidents?
17. Which type of IDS can send an access list to a router or firewall when an intrusion is
detected on a network?
18. A honeypot might be used in a network for which of the following reasons? (Choose all
that apply.)
19. A benchmark is an industry consensus of best practices for writing access lists. True or
False?
20. Anomaly detectors use a database of known attack signatures to function. True or False?
Activities
Activity 13-1
Activity 13-2
Case Projects
Case Project 13-1: Defending the Alexander Rocco Network Against Hacker
Threats
Answers can vary. The best strategy is strengthening each aspect of the network that allowed the
compromise to happen. First, the firewall allowed a Telnet application to traverse the network over
a port reserved for other activity; an application-level firewall would be able to block this access.
Second, workstations were affected by drive-by downloads, and a Web-filtering system might
prevent this attack from happening. Students shouldn’t focus only on what has already happened;
Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Chapter 13 Solutions 13-3
Case Project 13-2: Attracting Hackers to the Alexander Rocco Network
Answers will vary greatly. For the first item: “Based on the tools described in this chapter and
some of the techniques you’ve learned in this book, write a one-page report about the things you