Welcome to CertBlaster.
Here we are going to take a look at one of the performance based questions that test
your knowledge of the function and placement of network security devices.
First, we will look at the CertBlaster interface.
You can see all of the tests available.
We’ll open the Security+ SYO-401 and check the contents.
When we activate the Security+ dropdown you can see the contents.
There are four 90 question exam simulations covering all of the objective material.
Beneath that there are objective based quizzes.
These quizzes are designed to help you focus on specific exam objectives based content
to help solidify your knowledge.
We suggest you utilize all questions to maximize your grasp of the topic.
Always make sure you very carefully read the questions.
At CompTIA exams, subtle changes in wording will change the correct answer.
Read questions in their entirety first, then re-read to eliminate anything irrelevant.
Often statements are inserted that will throw you off the track to the real solution.
Because this type of wording is present on the actual exam, we do it in CertBlaster to
help you prepare, so do take your time.
Here is the question: Question text…..
While narrating text in red can be highlighted in movie
Re-reading the question you can pick out the requirements.
When you are ready, drag the label of your selected device to the correct location on
the network map.
When you have made your selections you can check your answer in study mode using the
Answer button in the toolbar and see if you are correct or read the explanation to see
why the devices were placed in their positions The first statement in the question illustrates
the need for network security devices.
This is a general nonspecific statement that can be disregarded.
Basically, you have two devices that need placement on a LAN with four targets for your
labels.
Watch out here as that statement can require up to four items.
The next item of importance is that the first router in Position 1 is an active firewall.
Keep that in mind as you may think a device belongs in Position 1, but that position is
occupied.
This observation has just reduced your area of concentration to three network segments,
Positions 1 through 4.
The next crucial area is the available devices and where they would be optimized on the network.
You have a Gateway, an antimalware appliance, an NIDS, a Web application firewall and a
Proxy server.
Check the Network layout for obvious hits.
Position 2 is your user segment.
Position 3 is the segment that holds your internal business operation servers and Position
4 contains all inbound and outbound Web applications and services.
Let’s check the question again.
You have one device that is designed to detect suspicious network traffic and issue alerts.
This device is configured to detect web service attacks using deep packet inspection.
This could be a Web Application firewall or an NIDS.
Don’t waste time.
See if the second device is an easier fit and you’ll have a few seconds to think and
fewer choices.
The second device is intended to prevent network initiated malware downloads.
This one is a little easier.
Since you know that network initiated malware downloads come from users accessing infected
sites, downloading malware or responding to fake virus warnings.
You know that you need to protect Position 2.
The appropriate device is the Antimalware appliance.
OK, one down, one to go.
Let’s assume you are still stuck.
Don’t spend a lot of time, you can mark the question for later.
Go through the remaining choices weeding out the bad choices.
First, the Proxy server is out as it provides internet access but not the level of protection
required.
Toss it out.
The Gateway has the ability to monitor and block ports and IP addresses based on its
configuration.
That one is out too.
We have our original two choices left.
The NIDS issues alerts about inbound packets and provides a degree of protection against
some attack types, keep that as a possibility.
Finally the Web Application Firewall device.
The Web Application Firewall device is specifically designed to deeply inspect packets looking
for known threats but in addition, has the capability to look for unusual or unexpected
requests.
That would be the type of request that doesn’t make sense in the context of the communication.
That’s our best choice.
So there you have it!
We’ll check the answer button and see how we did.
Congratulations!