Network Topology Mapping & Vulnerability Assessment Quiz

1. When mapping a network, what does a VLAN accomplish?

Increases network speed

Segments network traffic for security and organization

Eliminates the need for firewalls

Automatically patches vulnerabilities

2. A vulnerability assessor discovers multiple devices on the network with default credentials still enabled. What is the primary concern?

The devices are too old

Unauthorized access and potential compromise of the entire network

The network is running too fast

The devices need more memory

3. When mapping a network, what information should be collected about each device? Select two.

IP address and hostname

Employee home address

Operating system and open ports

Device color and size

Submit

4. A client's network includes devices using DHCP. How does this affect topology documentation?

It has no effect

IP addresses may change, requiring regular updates to documentation

It automatically secures the network

It eliminates the need for network mapping

5. In vulnerability assessment, what is 'network segmentation' primarily designed to achieve?

Increase network speed

Limit lateral movement and contain potential breaches

Eliminate all vulnerabilities

Reduce hardware costs

6. Which network mapping tool is best for creating visual diagrams of network infrastructure?

Netstat

Visio or Lucidchart

Nessus

Hydra

7. When a vulnerability assessor identifies open ports on a firewall, what should be the next step?

Close all ports immediately

Verify if the ports align with business requirements and document findings

Ignore them if the firewall is new

Replace the firewall

8. What is the main advantage of using a vulnerability scanner versus manual network mapping?

It requires no technical knowledge

It automatically identifies configuration flaws and known vulnerabilities

It eliminates the need for firewalls

It increases network bandwidth

9. A network topology map shows a device with an IP address but no hostname. What does this likely indicate?

The device is secure

DNS resolution failed or the device lacks proper naming

The device uses IPv6 only

The device is a router

10. Which tool would you use to analyze DNS records and identify subdomains during network reconnaissance?

Tracert

Nslookup or Dig

Ipconfig

Netstat

11. Which tool is most commonly used to discover active hosts and map network topology?

Nmap

Wireshark

Metasploit

Burp Suite

12. What does the OSI model layer 2 (Data Link) primarily concern in network topology mapping?

IP routing and subnetting

MAC addresses and switch connections

Application protocols

Physical cable types

13. Which scanning technique sends packets to a range of IP addresses to identify live hosts?

Port scanning

Ping sweep

Packet analysis

Vulnerability scanning

14. A vulnerability assessor identifies a legacy system running an outdated OS. What is the primary risk?

Slow network speed

Lack of security patches and known vulnerabilities

Incompatible network cables

High electricity consumption

15. Which protocol is used by ping to test network connectivity and host availability?

TCP

UDP

ICMP

SNMP

16. In network mapping, what does an 'asset inventory' primarily track?

Hardware, software, and services on the network

Only server costs

Employee names and departments

Internet bandwidth usage

17. What is the primary purpose of documenting network topology during vulnerability assessment?

To impress the client with technical detail

To establish a baseline for identifying unauthorized changes and vulnerabilities

To replace the client's network diagram

To determine the network's speed

18. Which of the following is a passive network discovery technique?

Port scanning with Nmap

ARP requests

Analyzing network traffic with a packet sniffer

ICMP ping sweeps

19. A vulnerability assessor discovers an open port 3389 on a client's network. What service is likely running?

SSH

Remote Desktop Protocol (RDP)

HTTP

DNS

20. What does CIDR notation help you determine when mapping a network?

The encryption protocol used

The IP address range and subnet boundaries

The device manufacturer

The wireless signal strength

Vuln Assessor Mapping a Client Network Topology Quiz