Please keep at least one language enabled. || కనీసం ఒక భాషను ఎంచుకోండి.
Question 1
ప్రశ్న 1
Which statement correctly distinguishes the Internet from an intranet?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The Internet is a worldwide network of interconnected networks using interoperable Internet standards.
• An intranet is an organizational network intended for internal and usually private purposes.
• An intranet may use the same technologies as the Internet while restricting access to authorized users.
• An intranet is an organizational network intended for internal and usually private purposes.
• An intranet may use the same technologies as the Internet while restricting access to authorized users.
వివరణ:
Question 2
ప్రశ్న 2
An organization's intranet is connected to the Internet so that authorized employees can reach approved external services. Which statement is correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An intranet is defined mainly by its private organizational purpose and restricted access.
• Connecting the organization to the Internet does not require internal resources to become publicly accessible.
• Firewalls, authentication and other access controls can separate permitted Internet connectivity from protected intranet resources.
• Connecting the organization to the Internet does not require internal resources to become publicly accessible.
• Firewalls, authentication and other access controls can separate permitted Internet connectivity from protected intranet resources.
వివరణ:
Question 3
ప్రశ్న 3
Which security function is primarily performed by a firewall placed between an organization's intranet and the Internet?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A firewall controls traffic between networks or hosts according to security rules or policy.
• It can permit authorized communication while blocking traffic that violates the organization's policy.
• Encryption and identity authentication are separate security functions, although firewall products may integrate additional capabilities.
• It can permit authorized communication while blocking traffic that violates the organization's policy.
• Encryption and identity authentication are separate security functions, although firewall products may integrate additional capabilities.
వివరణ:
Question 4
ప్రశ్న 4
An employee successfully logs in to an intranet but receives 'Access Denied' when attempting to delete a restricted evidence record. Which concept most directly explains this result?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Authentication verifies the claimed identity of the employee.
• Authorization determines what resources or operations that authenticated identity is permitted to use.
• A user can therefore authenticate successfully while being denied an operation for which the required permission has not been granted.
• Authorization determines what resources or operations that authenticated identity is permitted to use.
• A user can therefore authenticate successfully while being denied an operation for which the required permission has not been granted.
వివరణ:
Question 5
ప్రశ్న 5
Which statement correctly describes the basic purpose and result of encryption?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Encryption cryptographically transforms plaintext into ciphertext.
• The resulting ciphertext conceals the original meaning of the information from parties lacking the required decryption capability.
• Encryption primarily supports confidentiality and does not by itself replace authentication, authorization or firewall controls.
• The resulting ciphertext conceals the original meaning of the information from parties lacking the required decryption capability.
• Encryption primarily supports confidentiality and does not by itself replace authentication, authorization or firewall controls.
వివరణ:
Question 6
ప్రశ్న 6
An authorized employee working from home must securely access an internal intranet application across the public Internet. Which solution most directly provides the required protected remote network connection?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A remote-access VPN can create a protected logical connection from an external user's device to the organization's network.
• The VPN can operate across an existing public network such as the Internet.
• Authentication and authorization should still be applied so that only approved users and resources are accessible.
• The VPN can operate across an existing public network such as the Internet.
• Authentication and authorization should still be applied so that only approved users and resources are accessible.
వివరణ:
Question 7
ప్రశ్న 7
A public HTTPS server must accept inbound TCP connections on destination port 443, while all other unsolicited inbound traffic is unnecessary. Under a default-deny firewall policy, which rule approach is most appropriate?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A default-deny policy blocks traffic unless it has been expressly permitted.
• The required HTTPS service can be authorized with an appropriate rule for TCP destination port 443.
• Unnecessary unsolicited inbound traffic remains blocked, reducing the exposed network attack surface.
• The required HTTPS service can be authorized with an appropriate rule for TCP destination port 443.
• Unnecessary unsolicited inbound traffic remains blocked, reducing the exposed network attack surface.
వివరణ:
Question 8
ప్రశ్న 8
Which statement most accurately compares a firewall and a VPN?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A firewall enforces network-traffic policy by permitting or blocking communications according to rules.
• A VPN provides protected communication across another network, often through tunneling and cryptographic security mechanisms.
• The two controls are complementary and are frequently deployed together.
• A VPN provides protected communication across another network, often through tunneling and cryptographic security mechanisms.
• The two controls are complementary and are frequently deployed together.
వివరణ:
Question 9
ప్రశ్న 9
A firewall permits an internal client to establish a TCP connection to an Internet server and later recognizes incoming packets as legitimate return traffic belonging to that established connection. Which capability is primarily responsible?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A stateful firewall maintains information about active network connections.
• Incoming traffic can be compared with that state to determine whether it belongs to an expected established communication flow.
• Basic stateless packet filtering does not maintain equivalent per-connection state information.
• Incoming traffic can be compared with that state to determine whether it belongs to an expected established communication flow.
• Basic stateless packet filtering does not maintain equivalent per-connection state information.
వివరణ:
Question 10
ప్రశ్న 10
Alice must encrypt confidential data so that Bob can decrypt it using the corresponding private key in a public-key encryption system. Which key should Alice use for the encryption operation?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Public-key encryption for confidentiality uses the intended recipient's public encryption key.
• Alice therefore encrypts the information using Bob's public key.
• Bob's corresponding private key is then required for the complementary decryption operation.
• Alice therefore encrypts the information using Bob's public key.
• Bob's corresponding private key is then required for the complementary decryption operation.
వివరణ:
Question 11
ప్రశ్న 11
Which statement about Internet and intranet technologies is FALSE?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• The false statement is that Internet technologies cannot be used on an intranet.
• Intranets commonly use TCP/IP, HTTP, HTTPS, browsers and web servers just as Internet applications do.
• Their distinguishing characteristic is restricted organizational use rather than a completely different protocol set.
• Intranets commonly use TCP/IP, HTTP, HTTPS, browsers and web servers just as Internet applications do.
• Their distinguishing characteristic is restricted organizational use rather than a completely different protocol set.
వివరణ:
Question 12
ప్రశ్న 12
A remote laptop uses a host-to-gateway VPN whose protected tunnel terminates at the organization's VPN gateway. Which statement is technically correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• In a host-to-gateway VPN, the cryptographically protected VPN path terminates at the VPN gateway.
• Traffic beyond that gateway is outside that particular VPN tunnel unless another protection mechanism is used.
• End-to-end protection therefore requires security extending to the actual application or destination when that level of protection is required.
• Traffic beyond that gateway is outside that particular VPN tunnel unless another protection mechanism is used.
• End-to-end protection therefore requires security extending to the actual application or destination when that level of protection is required.
వివరణ:
Question 13
ప్రశ్న 13
An organization must block an HTTP request based on a prohibited application command contained in the request, even though the source IP address and TCP destination port are otherwise permitted. Which firewall approach is most suitable?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• An application-proxy gateway can understand application-specific protocols and inspect application-level information.
• This enables policy decisions based on commands, headers or content rather than only addresses and ports.
• Basic packet filtering does not normally provide the same application-protocol awareness.
• This enables policy decisions based on commands, headers or content rather than only addresses and ports.
• Basic packet filtering does not normally provide the same application-protocol awareness.
వివరణ:
Question 14
ప్రశ్న 14
A system requires a password and a fingerprint before granting remote intranet access. Why can this constitute multi-factor authentication?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• A password is a knowledge factor: something the user knows.
• A fingerprint is a biometric or inherence factor: something the user is.
• Because the authentication uses two distinct factor categories, it can constitute multi-factor authentication.
• A fingerprint is a biometric or inherence factor: something the user is.
• Because the authentication uses two distinct factor categories, it can constitute multi-factor authentication.
వివరణ:
Question 15
ప్రశ్న 15
Which information can a basic IP packet-filtering firewall commonly use when deciding whether to permit or deny TCP traffic?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Packet-filtering rules commonly use source and destination network addresses.
• They can also use protocol information and TCP or UDP port numbers where appropriate.
• These values come from network and transport headers rather than unrelated application-interface or hardware-display settings.
• They can also use protocol information and TCP or UDP port numbers where appropriate.
• These values come from network and transport headers rather than unrelated application-interface or hardware-display settings.
వివరణ:
Question 16
ప్రశ్న 16
A department wants remote employees to access a sensitive intranet application securely. Which layered design best integrates the security concepts covered in Unit 4?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• VPN protection provides a secure remote communication path across an untrusted network.
• Authentication, authorization and firewall controls address identity, permissions and network-traffic policy respectively.
• Endpoint protection and other security controls remain necessary because no single mechanism eliminates all risks.
• Authentication, authorization and firewall controls address identity, permissions and network-traffic policy respectively.
• Endpoint protection and other security controls remain necessary because no single mechanism eliminates all risks.
వివరణ:
Question 17
ప్రశ్న 17
Assertion (A): A private organizational intranet can use standard Internet technologies and still remain restricted to authorized users.
Reason (R): Whether internal resources are private depends on organizational scope and access controls, not on the requirement to use completely different networking protocols.
Choose the correct answer.
Reason (R): Whether internal resources are private depends on organizational scope and access controls, not on the requirement to use completely different networking protocols.
Choose the correct answer.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Intranets commonly use technologies such as TCP/IP, HTTP, HTTPS and web browsers.
• Their resources can nevertheless remain restricted through authentication, authorization, firewalls and related controls.
• Both statements are true, and the Reason correctly explains why using Internet technologies does not make an intranet publicly accessible.
• Their resources can nevertheless remain restricted through authentication, authorization, firewalls and related controls.
• Both statements are true, and the Reason correctly explains why using Internet technologies does not make an intranet publicly accessible.
వివరణ:
Question 18
ప్రశ్న 18
Consider the following statements about integrated network security:
1. Encryption primarily helps protect the confidentiality of data.
2. A firewall can enforce traffic-control policy between networks.
3. A VPN makes antivirus, patching and endpoint security unnecessary on a remote computer.
4. Authentication verifies identity, while authorization governs permitted access.
Which statements are correct?
1. Encryption primarily helps protect the confidentiality of data.
2. A firewall can enforce traffic-control policy between networks.
3. A VPN makes antivirus, patching and endpoint security unnecessary on a remote computer.
4. Authentication verifies identity, while authorization governs permitted access.
Which statements are correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Statements 1 and 2 correctly describe the primary roles of encryption and firewalls.
• Statement 3 is false because a VPN protects communication but does not automatically secure a compromised or unpatched endpoint.
• Statement 4 is correct because authentication verifies identity and authorization determines permitted access.
• Statement 3 is false because a VPN protects communication but does not automatically secure a compromised or unpatched endpoint.
• Statement 4 is correct because authentication verifies identity and authorization determines permitted access.
వివరణ:
Question 19
ప్రశ్న 19
Match List I with List II:
List I
(a) Internet
(b) Intranet
(c) Firewall
(d) VPN
List II
1. Private organizational network primarily for authorized internal use
2. Global network of interconnected networks
3. Controls network traffic according to security policy
4. Provides a protected virtual communication path over existing network infrastructure
Choose the correct matching code.
List I
(a) Internet
(b) Intranet
(c) Firewall
(d) VPN
List II
1. Private organizational network primarily for authorized internal use
2. Global network of interconnected networks
3. Controls network traffic according to security policy
4. Provides a protected virtual communication path over existing network infrastructure
Choose the correct matching code.
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Internet corresponds to the global network of interconnected networks, giving (a)-2.
• Intranet corresponds to the restricted organizational network, giving (b)-1, while Firewall corresponds to policy-based traffic control, giving (c)-3.
• VPN provides the protected virtual communication path, giving (d)-4.
• Intranet corresponds to the restricted organizational network, giving (b)-1, while Firewall corresponds to policy-based traffic control, giving (c)-3.
• VPN provides the protected virtual communication path, giving (d)-4.
వివరణ:
Question 20
ప్రశ్న 20
A remote forensic officer uses hotel Wi-Fi to access a restricted departmental intranet. The organization requires the officer to prove identity with multiple factors, permits access only to assigned applications, filters network traffic at its gateway and protects the remote communication cryptographically. Which mapping of controls to purposes is correct?
Select an option first. || ముందుగా ఒక సమాధానాన్ని ఎంచుకోండి.
Explanation:
• Authentication establishes whether the remote officer is the claimed identity, while authorization determines which resources that officer may access.
• The firewall enforces network-traffic policy at the relevant network boundary.
• VPN and cryptographic mechanisms protect communication across the untrusted external network, demonstrating how the controls work together rather than replacing one another.
• The firewall enforces network-traffic policy at the relevant network boundary.
• VPN and cryptographic mechanisms protect communication across the untrusted external network, demonstrating how the controls work together rather than replacing one another.
వివరణ:
Answer Key సమాధానాల పట్టిక
-
Question 1 ప్రశ్న 1Answer: B. The Internet is a global network of interconnected networks, whereas an intranet is a private organizational network intended mainly for authorized internal users. సమాధానం: B.
-
Question 2 ప్రశ్న 2Answer: D. It can remain an intranet because its organizational resources can still be private and access-controlled even though the network has controlled Internet connectivity. సమాధానం: D.
-
Question 3 ప్రశ్న 3Answer: A. Controlling network traffic between the networks according to configured security policy సమాధానం: A.
-
Question 4 ప్రశ్న 4Answer: C. Authentication succeeded, but authorization does not permit the requested delete operation. సమాధానం: C.
-
Question 5 ప్రశ్న 5Answer: C. It transforms plaintext into ciphertext to help protect the confidentiality of the information. సమాధానం: C.
-
Question 6 ప్రశ్న 6Answer: A. An authenticated remote-access VPN సమాధానం: A.
-
Question 7 ప్రశ్న 7Answer: D. Explicitly permit the required HTTPS traffic and deny other unsolicited inbound traffic that is not separately authorized. సమాధానం: D.
-
Question 8 ప్రశ్న 8Answer: B. A firewall mainly controls permitted network traffic, while a VPN creates a protected logical communication path over an existing network. సమాధానం: B.
-
Question 9 ప్రశ్న 9Answer: D. Stateful inspection using maintained connection-state information సమాధానం: D.
-
Question 10 ప్రశ్న 10Answer: C. Bob's public key సమాధానం: C.
-
Question 11 ప్రశ్న 11Answer: B. An intranet cannot use TCP/IP, HTTP or HTTPS because those technologies belong exclusively to the public Internet. సమాధానం: B.
-
Question 12 ప్రశ్న 12Answer: A. The VPN protects communication through the tunnel to the gateway, but that same tunnel does not automatically provide end-to-end cryptographic protection for traffic beyond the gateway to every internal destination. సమాధానం: A.
-
Question 13 ప్రశ్న 13Answer: C. An application-proxy gateway capable of understanding and inspecting the relevant application protocol సమాధానం: C.
-
Question 14 ప్రశ్న 14Answer: D. The password is a 'something you know' factor and the fingerprint is a 'something you are' factor. సమాధానం: D.
-
Question 15 ప్రశ్న 15Answer: A. Source and destination IP addresses, IP protocol information, and source or destination TCP ports సమాధానం: A.
-
Question 16 ప్రశ్న 16Answer: B. Use a protected VPN for remote connectivity, authenticate users, authorize only required resources, enforce firewall policy and maintain appropriate endpoint protection. సమాధానం: B.
-
Question 17 ప్రశ్న 17Answer: A. Both Assertion and Reason are true, and Reason is the correct explanation of Assertion. సమాధానం: A.
-
Question 18 ప్రశ్న 18Answer: C. 1, 2 and 4 only సమాధానం: C.
-
Question 19 ప్రశ్న 19Answer: B. (a)-2, (b)-1, (c)-3, (d)-4 సమాధానం: B.
-
Question 20 ప్రశ్న 20Answer: D. Authentication verifies the officer's identity; authorization limits permitted resources; the firewall controls network traffic; VPN/cryptographic protection secures the remote communication path. సమాధానం: D.