Key Security Concepts, Threats, Vulnerabilities, and Mitigations

An infrastructure analyst is performing a security review of an enterprise management network. The organization requires per-command authorization for administrative CLI access on routers and switches, along with full packet payload encryption between network devices and the central AAA server. Which security protocol satisfies these requirements?

A network security architect is reviewing the organization's defense-in-depth posture following a risk assessment. Match each enterprise security threat scenario on the left with its most appropriate primary mitigation control on the right.

An enterprise security audit reveals two critical vulnerabilities in a campus network infrastructure: administrative command entries sent to network switches during remote management sessions are logged in cleartext without granular per-command authorization, and unauthorized rogue devices plugged into active wall jacks in common areas gain immediate access to internal network segments. Which two security mitigations directly resolve these specific vulnerabilities? (Select two.)

An administrator configures port security on an enterprise access switch interface using the switchport port-security mac-address sticky command to restrict network access to authorized devices. Endpoints connect successfully and their hardware addresses are added to the active configuration as sticky entries. Following an unexpected power maintenance event, the switch reboots. When the authorized endpoints attempt to reconnect, port security violation alerts are triggered and traffic is blocked. Which administrative oversight caused this issue after the switch rebooted?

An enterprise network security team is establishing formal terminology for a security awareness program. Match each fundamental security concept on the left to its corresponding description on the right.

A network engineering team is updating management access policies to reduce vulnerabilities associated with credential sniffing, brute-force access attempts, and unauthenticated administrative sessions across enterprise devices. Which two security controls directly mitigate these specific vulnerabilities and threats? (Select two.)

An enterprise security analyst is categorizing security audit findings and incident events into core cybersecurity governance definitions. Match each operational scenario on the left with its corresponding fundamental security concept on the right.

Match each core network security term on the left with its corresponding enterprise security description on the right.

A network engineer configures port security on a Cisco Catalyst switch interface using the command `switchport port-security mac-address sticky`. The switch successfully learns the MAC address of the connected host and dynamically adds it to the running configuration. However, after the switch is rebooted, the port security configuration no longer retains the previously learned host MAC address. Which administrative oversight caused this issue?

An enterprise network administrator discovers that an unauthorized host on an internal VLAN is performing a Man-in-the-Middle (MitM) attack by broadcasting spoofed ARP messages, associating its own MAC address with the IP address of the default gateway. Which Layer 2 security mechanism should be implemented on the access switches to mitigate this specific threat?

An attacker on a local Ethernet network sends spoofed ARP messages to associate their MAC address with the IP address of the default gateway, allowing them to secretly intercept and relay network traffic between a victim host and the router. Which type of security threat is being executed?

Match each enterprise network security threat on the left with its corresponding operational description or attack vector characteristic on the right.

Match each enterprise security threat scenario on the left with its most effective primary mitigation strategy on the right.

A security analyst is reviewing measures to enforce the Confidentiality, Integrity, and Availability (CIA) triad across an enterprise network. Which of the following security controls directly address the Integrity leg of the CIA triad? (Select two.)

An enterprise organization suffers a security incident where an unauthorized actor intercepts and alters router configuration files in transit across an unencrypted network link, causing network routing tables to become corrupted. The security team must implement controls to ensure that data cannot be modified in transit without detection. Which core principle of the CIA triad was violated during this attack, and which security mechanism directly mitigates this specific vulnerability?

An enterprise network administrator discovers a weakness in a router's firmware that has not yet been patched by the vendor. This weakness could potentially allow unauthorized access if targeted by malicious traffic. Which security term specifically describes this software weakness?

During an enterprise security audit following a system compromise, an incident response team discovers that a database server was accessed without authorization. The investigation shows that an outdated operating system service contained a coding flaw, which permitted an attacker to run a publicly available script to gain administrative access. Which security term specifically describes the flaw in the outdated operating system service?

A network engineer configures IPsec encryption on a site-to-site VPN tunnel connecting two corporate offices to ensure that intercepted data packets cannot be read by unauthorized individuals. Which core security principle of the CIA triad is directly achieved by this control?

An enterprise network experiences an internal security incident where an unauthorized host on access VLAN 10 poisons the ARP caches of adjacent endpoints by advertising its own MAC address as the default gateway. A network engineer must implement a Layer 2 mitigation strategy that intercepts, inspects, and validates ARP requests and responses against a trusted IP-to-MAC binding table built by DHCP snooping. Which security mechanism directly mitigates this threat?

A network administrator is conducting a security baseline review for an enterprise network to distinguish key security concepts and apply suitable mitigation strategies. Which two statements accurately describe key security principles or valid mitigation practices? (Select two.)