Start Here
Five review stations, each a different way to practice Chapter 11. Work through them in any order. Nothing here is graded or stored, so use it as many times as you like before the quiz or the exam.
What this chapter asked you to be able to do
- Tell apart secure and insecure protocols, know their ports, and explain why deprecated protocols like Telnet, FTP, and HTTP put a network at risk.
- Explain how a VPN builds an encrypted tunnel over an untrusted network, and compare site-to-site and remote access designs along with the risk of split tunneling.
- Describe wireless security with WPA2, WPA3, enterprise and personal modes, EAP types, and attacks such as rogue access points and evil twins.
- Explain network access control with 802.1X, and compare agent-based and agentless approaches.
- Evaluate DNS security controls and apply segmentation and micro-segmentation to limit lateral movement.
Your progress this session
These counters update as you check answers on each station. They reset when you reload the page.
Key Terms Flashcards
Select a card to reveal its definition, then select again to flip it back. Try to state the definition before you flip. The counter tracks how many distinct cards you have opened.
Identifying Secure and Insecure Protocols
Each description names a port, a behavior, or a use case. Choose the protocol it points to, then check your answer.
Reference: protocol, port, and secure alternative
| Protocol | Port | Secure? | Use case | Secure alternative |
|---|---|---|---|---|
| Telnet | 23 | No | Remote access (legacy) | SSH |
| SSH | 22 | Yes | Remote access, tunneling | Already secure |
| HTTP | 80 | No | Web (legacy) | HTTPS |
| HTTPS | 443 | Yes | Web, APIs | Already secure |
| FTP | 21 | No | File transfer (legacy) | SFTP, SCP |
| SFTP | 22 | Yes | File transfer | Already secure |
| LDAP | 389 | No | Directory queries (legacy) | LDAPS |
| LDAPS | 636 | Yes | Directory queries | Already secure |
| SNMP v1/v2c | 161 | No | Network management (legacy) | SNMPv3 |
| SNMPv3 | 161 | Yes | Network management | Already secure |
SSH and SFTP share port 22 because SFTP runs over an SSH session. LDAP and LDAPS use different ports (389 and 636) because LDAPS wraps the directory connection in TLS.
Matching Network Design and Segmentation Concepts
Secure network design combines VPN tunnels, segments, and access boundaries. Read each description and choose the concept it defines, then check your answer.
Matching Wireless Security and Network Access Control
Wireless networks are reachable from anywhere in radio range, so they depend on strong encryption, individual authentication, and control over which devices join. Choose the concept each description defines.
Knowledge Check
Ten multiple-choice questions across the whole chapter. Answer them all, then select Score my answers for feedback and a final total.