Guide to Networking Essentials, 8th ed., ISBN 9780357118283
Chapter 9 Solutions-1
Chapter 9 Solutions
Review Questions
1. Which of the following passwords is best to use on a system containing highly sensitive
information?
a. BillySmith
b. 0OxqH}ml2–wO
2. Which of the following is a technique you can use to help secure a wireless network? (Choose
all that apply.)
a. IP subnetting
d. SSID broadcast
3. Which of these protocols is used for VPNs? (Choose all that apply.)
b. WEP
e. ICMP
4. How do virtual private networks ensure privacy?
c. Encapsulating
d. Authenticating
5. Which of the following terms refers to attacking a Web server by forcing it to respond to a
flood of ping packets so that the server can’t respond to normal traffic?
a. DDR
b. ICMP
Guide to Networking Essentials, 8th ed., ISBN 9780357118283
Chapter 9 Solutions-2
6. Which of the following is a guideline for creating a security policy?
a. A security policy should be cryptic so that attackers can’t understand it.
b. A security policy should be general enough so that rules can be added as needed.
7. Which of the following is a component of a security policy? (Choose all that apply.)
c. Network configuration policy
d. Computer specification policy
8. Which of the following questions must be answered before determining what level of security
a network requires? (Choose all that apply.)
a. What tools are used to attack the network?
d. How much data is on the network?
9. Which of the following should be a common element in any level of security policy? (Choose
all that apply.)
a. Complex passwords
d. Virus protection
10. Which phrase from the following list best completes the next sentence? “If there’s access to
the equipment, there’s no ___________________.”
c. data integrity
d. security policy
11. Which of the following is a requirement for rooms housing network servers?
a. Separate heating system
d. Shared electrical circuit
12. Which procedure specifies what resources users can access and the tasks they can perform on
a network?
a. Authentication
b. Auditing
13. If you want to allow a blank password on a Windows computer, which of the following is the
correct setting for the password minimum length?
a. Blank
d. Nothing
14. If you want to prevent password guessing to foil intruders, you should enable which of the
following?
c. Password disabling
d. Account policies
15. Which authentication protocol is used in a Windows domain environment?
a. AES
d. MS-CHAP v2
16. Which of the following is a credential category? (Choose all that apply.)
Guide to Networking Essentials, 8th ed., ISBN 9780357118283
Chapter 9 Solutions-4
c. Encryption
e. Authentication
17. Which of the following is a method IPsec uses to authenticate the identity of communicating
devices? (Choose all that apply.)
a. Multishared key
c. PAM
18. To encrypt data stored on a hard drive on a Windows Server computer, you should use which
of the following?
b. AES
c. NTFS
19. Firewalls can filter packets based on which of the following? (Choose all that apply.)
c. OS
20. If network administrators want to be informed when an attempt has been made to compromise
the network, what should they use?
b. AES
d. EFS
21. Which VPN mode should you use if you want to establish a secure tunnel between a main
office and a branch office?
a. Client-to-gateway
Guide to Networking Essentials, 8th ed., ISBN 9780357118283
Chapter 9 Solutions-5
d. Host to site
22. Where’s a common place to install an NIDS?
c. On a honeypot
d. In the ISP
23. What device should you consider installing if you want countermeasures to take place when
an attack is detected?
a. Content filter
d. HIDS
Hands-On Projects
Hands-On Project 9-5
Step 7: Possible ports on a Windows computer are Port 135 (epmap) and Port 445 (microsoft-ds).
Challenge Labs
Challenge Lab 9-1
Answers will vary, but the following example shows how these policies might be tested.
Password policy settings:
Before you can test the settings, you need to create at least one regular user account (not an administrator
account). The easiest way is to right-click Start, click Computer Management, click to expand Local Users
and Groups, and then right-click the Users folder and click New User. Follow the prompts, making sure the
user must change his or her password at the next logon. Also, make sure you use a password that meets the
password requirements. A password such as “Password01” will work.
Guide to Networking Essentials, 8th ed., ISBN 9780357118283
Chapter 9 Solutions-6
Account lockout policy settings:
Challenge Lab 9-2
• Which rule did you edit to allow Remote Desktop connections to your computer?
• What did you do to limit Remote Desktop access to your network only? Enable the rule; in the Scope
• Which rule did you edit to change the ICMP Echo Request settings?
• What did you do to allow pings from outside your network?
Challenge Lab 9-3
Final drawings will vary, but these elements should be included to satisfy the requirements:
• You don’t want the expense of a dedicated WAN connection between offices, but you want the
• The company is concerned about attacks from the Internet and wants to monitor incoming traffic.
• The company has a Web presence and runs a Windows Server 2016 domain. It has four departments:
Management, Engineering, Accounting, and Operations. Each department has its own server, and it
Guide to Networking Essentials, 8th ed., ISBN 9780357118283
Chapter 9 Solutions-7
• The internal network has four enterprise servers: a database server, file server, mail server, and internal
Case Projects
Case Project 9-1
Case Project 9-2
Case Project 9-3
Case Project 9-4