network security fundamentals Questions please help

1- When using a honeypot, what should be done to protect the organizations operational network?

A- Install on honeypot in DMZ

B- Patch the OS for the honeypot

C- Isolate honeypot

D- Use an old OS

2- As an enhancement to security, management has dictated that firewalls should be on all systems. Which of the following should a software firewall be installed on? Select all the apply

A-Workstations

B- Servers

C- Cell phones

D- Printers

3- What protocol is required on hosts for a tracert to work? Select all the apply

A- TLS

B-

ftp

C-

ICMP

D-

ping

4- When scanning a host with a network scanner, what are the possible outcomes for a specific port? Select all the apply.

A-Open

B-Closed

C-Null

D-Filtered

5- What does a SPAN port do on a switch?

A-Copies all traffic on all ports to a monitor port

B-Exposes all port traffic to all ports

C-Exposes no traffic to no ports

D-Copies all traffic on a port to a monitor port

6- You have been asked to set up a VPN to permit access by employees using their personal computers. Since the security posture of these computers is unknown, what technology could be used to check the computer's security state prior to connecting?

A- NTP

B- NAC

C- MIME

D- NAT

7- Why is Internet Key Exchange preferred in enterprise VPN deployments?

A- IKE prevents the use of flawed hash algorithms such as MD5.

B- IKE automates key management by authenticating each peer to exchange session keys.

C- IKE forces the use of Diffie-Hellman, ensuring higher security than consumer VPNs.

D- IKE mandates the use of the IPSec ESP header.

8- If an employer wishes to limit the types of websites an employee views, what type of system is required?

A- Honeypot

B- Outbound proxy

C- Router

D- Layer 2 firewall

9- What should be the last rule in an ACL list?

A- Deny All

B- Load ACL

C- Permit All

D- Permit some

10- Which form of VPN mode encapsulates and encrypts the original packet?

A- Tunnel mode with ESP

B- Transport mode with ESP

C- Transport mode with AH

D- Tunnel mode with AH

11- NAT enhances security by preventing ________.

A- Exposure of internal IP addresses

B- DoS Attacks

C- Encryption

D- Web site defacement