Secure Network Architecture

• How many trunks are present in this configuration?

4

• What is the VLAN tag ID for interface eth12?

30

• From the above table, what zone would a user connecting to a public web server be in?

External

• From the above table, what zone would a public web server be in?

DMZ

• From the above table, what zone would a core domain controller be placed in?

Restricted

• According to the corresponding ACL policy, will the first packet result in a drop or accept? 

accept

• According to the corresponding ACL policy, will the second packet result in a drop or accept?

drop

• What is the flag found after filling in all blanks on the static site?

THM{M05tly_53cure}

• Does SSL inspection require a man-in-the-middle proxy? (Y/N)

Y

• What platform processes data sent from an SSL proxy?

Unified Threat Management 

• Where does DHCP snooping store leased IP addresses from untrusted hosts?

DHCP Binding Database

• Will a switch drop or accept a DHCPRELEASE packet?

Drop

• Does dynamic ARP inspection use the DHCP binding database? (Y/N)

Y

• Dynamic ARP inspection will match an IP address and what other packet detail?

MAC Address