Wireless Security - Course-era (Google IT Professional Course)

 

Wireless Security

TOTAL POINTS 4

1.

Question 1

Defense against digital dark arts

Video link: https://youtu.be/Ug5DZcF2NvY

What are some of the weaknesses of the WEP scheme? Check all that apply.

1 / 1 point

Its use of ASCII characters for passphrases

Its use of the RC4 stream cipher

Correct

You nailed it! The RC4 stream cipher had a number of design flaws and weaknesses. WEP also used a small IV value, causing frequent IV reuse. Lastly, the way that the encryption keys were generated was insecure.

Its poor key generation methods

Correct

You nailed it! The RC4 stream cipher had a number of design flaws and weaknesses. WEP also used a small IV value, causing frequent IV reuse. Lastly, the way that the encryption keys were generated was insecure.

Its small IV pool size

Correct

You nailed it! The RC4 stream cipher had a number of design flaws and weaknesses. WEP also used a small IV value, causing frequent IV reuse. Lastly, the way that the encryption keys were generated was insecure.

2.

Question 2

What symmetric encryption algorithm does WPA2 use?

1 / 1 point

DES

AES

DSA

RSA

Correct

Great work! WPA2 uses CCMP. This utilizes AES in counter mode, which turns a block cipher into a stream cipher.

3.

Question 3

How can you reduce the likelihood of WPS brute-force attacks? Check all that apply.

1 / 1 point

Implement lockout periods for incorrect attempts.

Correct

Exactly! Ideally, you should disable WPS entirely if you can. If you need to use it, then you should use a lockout period to block connection attempts after a number of incorrect ones.

Disable WPS.

Correct

Exactly! Ideally, you should disable WPS entirely if you can. If you need to use it, then you should use a lockout period to block connection attempts after a number of incorrect ones.

Use a very long and complex passphrase.

Update firewall rules.

4.

Question 4

Select the most secure WiFi security configuration from below:

1 / 1 point

None

WEP 128 bit

WPA2 personal

WPA enterprise

WPA2 enterprise

WPA personal

Correct

Exactly right! WPA2 Enterprise would offer the highest level of security for a WiFi network. It offers the best encryption options for protecting data from eavesdropping third parties, and does not suffer from the manageability or authentication issues that WPA2 Personal has with a shared key mechanism. WPA2 Enterprise used with TLS certificates for authentication is one of the best solutions available.

Secure Network Architecture (Course-era Google IT Professional Certificate) Quiz

 

Secure Network Architecture

TOTAL POINTS 7

Video link: https://www.youtube.com/watch?v=raoM2SrPsrU

1.

Question 1

VIDEO LINK: HTTPS://WWW.YOUTUBE.COM/WATCH?V=RAOM2SRPSRU

Why is normalizing log data important in a centralized logging setup?

1 / 1 point

Log normalizing detects potential attacks.

Uniformly formatted logs are easier to store and analyze.

It's difficult to analyze abnormal logs.

The data must be decrypted before sending it to the log server.

Correct

Nice work! Logs from various systems may be formatted differently. Normalizing logs is the practice of reformatting the logs into a common format, allowing for easier storage and lookups in a centralized logging system.

2.

Question 2

What type of attacks does a flood guard protect against? Check all that apply.

1 / 1 point

DDoS attacks

Correct

You got it! A flood guard protects against attacks that overwhelm networking resources, like DoS attacks and SYN floods.

Man-in-the-middle attacks

Malware infections

SYN floods

Correct

You got it! A flood guard protects against attacks that overwhelm networking resources, like DoS attacks and SYN floods.

3.

Question 3

What does DHCP Snooping protect against?

1 / 1 point

Brute-force attacks

Data theft

Rogue DHCP server attacks

DDoS attacks

Correct

Good job! DHCP snooping is designed to guard against rogue DHCP attacks. The switch can be configured to transmit DHCP responses only when they come from the DHCP server's port.

4.

Question 4

What does Dynamic ARP Inspection protect against?

1 / 1 point

Rogue DHCP server attacks

DDoS attacks

Malware infections

ARP poisoning attacks

Correct

That's exactly right! Dynamic ARP inspection protects against ARP poisoning attacks by watching for ARP packets. If an ARP packet doesn't match the table of MAC address and IP address mappings generated by DHCP snooping, the packet will be dropped as invalid or malicious.

5.

Question 5

What does IP Source Guard protect against?

1 / 1 point

DDoS attacks

Rogue DHCP server attacks

IP spoofing attacks

Brute-force attacks

Correct

Right on! IP Source Guard prevents an attacker from spoofing an IP address on the network. It does this by matching assigned IP addresses to switch ports, and dropping unauthorized traffic.

6.

Question 6

What does EAP-TLS use for mutual authentication of both the server and the client?

1 / 1 point

Biometrics

Digital certificates

One-time passwords

Usernames and passwords

Correct

Yep! The client and server both present digital certificates, which allows both sides to authenticate the other, providing mutual authentication.

7.

Question 7

Why is it recommended to use both network-based and host-based firewalls? Check all that apply.

1 / 1 point

For protection against man-in-the-middle attacks

For protection for mobile devices, like laptops

Correct

Nice job! Using both network- and host-based firewalls provides protection from external and internal threats. This also protects hosts that move between trusted and untrusted networks, like mobile devices and laptops.

For protection against compromised hosts on the same network

Correct

Nice job! Using both network- and host-based firewalls provides protection from external and internal threats. This also protects hosts that move between trusted and untrusted networks, like mobile devices and laptops.

For protection against DDoS attacks