Exam (elaborations)
A.2.4 Network Pro Domain 4: Security (30 questions) fully solved rated A+
- Course
- Institution
A.2.4 Network Pro Domain 4: Security (30 questions) fully solved rated A+
[Show more]
Content preview
A.2.4 Network Pro Domain 4: Security(30 questions)
You are helping Halle, a friend in college, with her network connection. To allow her to play Superb last
with other classmates, Halle would like both of her computers (Dorm-PC and Dorm-PC2) to have a high-
speed connection to the internet. Currently only one of Halle's computers (Dorm-PC) is connected to the
internet, and there is only one Ethernet wall plate connection port available in her room.
In this lab, your task is to complete the following on each of Halle's dorm computers:
On Dorm-PC:
Add the fastest router to the workspace and provide power.
Connect the Dorm-PC to the router and internet.
Establish an internet connection and turn on firewall protection for: Private network Public network
Allow the Superb last program through Dorm-PC's firewall. Do not allow access to the Public network.
On Dorm-PC2:
After completing the tasks above, connect Dorm-PC2 to the router.
Establish an internet connection and turn on f - correct answer ✔✔Complete this lab as follows:
On Dorm-PC:
Add the fastest router to the workspace and provide power.Under Shelf, expand Routers.Drag Router,
100/1000BaseTX Ethernet to the Workspace.For convenience, place the router to the left of the wall
plate.Above the router, select Back to switch to the back view of the router.Under Shelf, expand Cables
and then select Power Adapter, AC to DC.From the Selected Component pane:Drag the DC Power
Connector to the power port on the back of the router.Drag the AC Power Adapter to the surge
protector.
Connect the Dorm-PC to the router and internet.Drag the Ethernet cable currently connected to the wall
plate (the other end is connected to Dorm-PC) to a LAN port on the router.Under Shelf, select Cat5e
Cable, RJ45.From the Selected Component pane:Drag an RJ45 Connector to the WAN port on the
router.Drag the unconnected RJ45 Connector to the Ethernet port on the wall plate.(Optional) Above the
router, select Front to verify power and network activity lights.
Establish a connection to the internet.On the Dorm-PC monitor, select Click to view Windows 10.Right-
click Start and select Windows PowerShell (Admin).At the PowerShell prompt, type IPconfig /renew and
press Enter to request new TCP/IP information from the router.In the notification area of the taskbar,
right-click the Network icon and select Open Network and Internet settings. The network information
map should indicate an active connection to the Firewall Network and the internet.
,From Dorm-PC, turn on the applicable Windows Firewalls.In Network and Internet, in the right pane,
scroll down and select Windows Firewall.From the right pane, under Private network, select Turn
on.From the right pane, under Public network, select Turn on.
Allow a program through the firewall on Dorm-PC.From the Windows Security window, select Allow an
app t
You are the security analyst for a small corporate network. You recently placed a web server in a
screened subnet, or demilitarized zone (DMZ). You need to configure the perimeter firewall on the
network security appliance (pfSense) to allow access to the web server from the LAN and from the WAN.
You also want to allow all traffic from the LAN network to the DMZ network.
In this lab, your task is to perform the following:
Access the pfSense management console:Username: adminPassword: P@ssw0rd (zero)
Add an HTTP firewall rule that allows traffic from the WAN to the web server in the DMZ.
Add an HTTPS firewall rule that allows traffic from the WAN to the web server in the DMZ.Use the
following table for the HTTP and HTTPS rules:ParameterSettingSourceWANSource and destination
port/serviceHTTP (80), HTTPS (443)DestinationA single hostIP address for host172.16.1.5DescriptionsFor
HTTP: HTTP to DMZ from WANFor HTTPS: HTTPS - correct answer ✔✔Complete this lab as follows:
Sign in to the pfSense management console.In the Username field, enter admin.In the Password field,
enter P@ssw0rd (zero).Select SIGN IN or press Enter.
Create and configure a firewall rule to pass HTTP traffic from the internet to the web server.From the
pfSense menu bar, select Firewall > Rules.Under the Firewall breadcrumb, select DMZ.Select Add (either
one).Make sure Action is set to Pass.Under Source, use the drop-down menu to select WAN net.Select
Display Advanced.For Source Port Range, use the From drop-down menu to select HTTP (80).Under
Destination, use the Destination drop-down menu to select Single host or alias.In the Destination
Address field, enter 172.16.1.5Using the Destination Port Range drop-down menu, select HTTP
(80).Under Extra Options, in the Description field, enter HTTP to DMZ from WAN.Select Save.Select Apply
Changes.
Create and configure a firewall rule to pass HTTPS traffic from the internet to the web server.For the rule
just created, select the Copy icon (two files).Under Source, select Display Advanced.Change the Source
Port Range to HTTPS (443).Under Destination, change the Destination Port Range to HTTPS (443).Under
Extra Options, change the Description field to HTTPS to DMZ from WANSelect Save.Select Apply
Changes.
Create and configure a firewall rule to pass all traffic from the LAN network to the DMZ network.Select
Add (either one).Make sure Action is set to Pass.For Interface, use the drop-down menu to select
LAN.For Protocol, use the drop-down menu to select Any.Under Source, use the drop-down menu to
select LAN net.Under Destination, use the drop-down menu to select DMZ net.Under Extra Options, in
the Description field, enter LAN to DMZ Any.Select Save.Select Apply Changes.
, You are the IT administrator for a small corporate network. You want to make a web server that runs
services accessible from the internet. To help protect your company, you want to place this server and
other devices in a screened subnet, or demilitarized zone (DMZ). This DMZ and server need to be
protected by the pfSense Security Gateway Appliance (pfSense). Since a few of the other devices in the
DMZ require an IP address, you have also decided to enable DHCP on the DMZ network.
In this lab, your task is to perform the following:
Access the pfSense management console:Username: adminPassword: P@ssw0rd (zero)
Add a new pfSense interface that can be used for the DMZ.Use DMZ as the interface name.Use a static
IPv4 address of 172.16.1.1/16.
Add a firewall rule for the DMZ interface that allows all traffic from the DMZ.Use Allow DMZ to any rule
as the description.
Configure and enable the DHCP server for the DMZ interfac - correct answer ✔✔Complete this lab as
follows:
Sign into the pfSense management console.Enter admin in the Username field.In the Password field,
enter P@ssw0rd (0 = zero).Select SIGN IN or press Enter.
Configure an interface for the DMZ.From the pfSense menu bar, select Interfaces > Assignments.Select
Add.Select OPT1.Select Enable interface.Change the Description field to DMZUnder General
Configuration, use the IPv4 Configuration Type drop-down menu to select Static IPv4.Under Static IPv4
Configuration, change the IPv4 Address field. to 172.16.1.1Use the Subnet mask drop-down menu to
select 16.Select Save.Select Apply Changes.(Optional) Verify the change as follows:From the menu bar,
select pfsense COMMUNITY EDITION.Under Interfaces, verify that the DMZ is shown with the correct IP
address.
Add a firewall rule to the DMZ interface that allows all traffic from the DMZ.From the pfSense menu bar,
select Firewall > Rules.Under the Firewall breadcrumb, select DMZ. (Notice that no rules have been
created.)Select Add (either one).For the Action field, make sure Pass is selected.For the Interface field,
make sure DMZ is selected.For the Protocol, use the drop-down menu to select Any.Under Source, use
the drop-down menu to select DMZ net.Under Destination, make sure it is configured for any.Under
Extra Options, enter Allow DMZ to any rule as the description.Scroll to the bottom and select Save.Select
Apply Changes.
Configure pfSense's DHCP server for the DMZ interface.From the menu bar, select Services > DHCP
Server.Under the Services breadcrumb, select DMZ.Select Enable to enable DHCP server on the DMZ
interface.Configure the Range field as follows:From: 172.16.1.100To: 172.16.1.200Scroll to the bottom
and select Save.
You have been hired by a small hotel to configure how their guests access the internet. You have chosen
to use pfSense's Captive Portal feature. Guests must pass through this portal to access the internet.
In this lab, your task is to:
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller BravelRadon. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $19.99. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
84669 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now