About this exam
CNSP is the The SecOps Group exam The SecOps Group Certified Network Security Practitioner.
Paid practice material for this exam is not available yet, but you can try its free sample questions.
- Exam code
- CNSP
- Vendor
- The SecOps Group
- Practice questions
- Not available yet
- Free sample questions
- 5
- Question bank last updated
- Not available yet
Try 2 sample questions
Taken from the free sample set for CNSP.
Question 1
What ports does an MSSQL server typically use?
- AOption A:
1433/TCP, 2433/UDP, and 3433/TCP
- BOption B:
1433/TCP, 1434/UDP, and 1434/TCP
- COption C:
1433/TCP, 2433/UDP, and 1434/TCP
- DOption D:
1533/TCP, 1434/UDP, and 2434/TCP
Show answer and explanation
Correct answer: B
Microsoft SQL Server (MSSQL) relies on specific ports for its core services, as defined by Microsoft
and registered with IANA:
1433/TCP: The default port for the SQL Server Database Engine. Clients connect here for querying
databases (e.g., via ODBC or JDBC). It’s a well-known port, making it a frequent target for attacks if
exposed.
1434/UDP: Used by the SQL Server Browser Service, which listens for incoming requests and
redirects clients to the correct port/instance (especially for named instances). It’s critical for
discovering dynamic ports when 1433 isn’t used.
1434/TCP: Less commonly highlighted but used in some configurations, such as dedicated admin
connections (DAC) or when the Browser Service responds over TCP for specific instances. While
1433/TCP is the primary engine port, 1434/TCP can be involved in multi-instance setups.
Technical Details:
Ports can be customized (e.g., via SQL Server Configuration Manager), but these are defaults.
Named instances often use dynamic ports (allocated from the ephemeral range), with the Browser
Service (1434/UDP) guiding clients to them.
Firewalls must allow these ports for MSSQL to function externally, posing risks if not secured (e.g.,
brute-force attacks on 1433/TCP).
Security Implications: CNSP likely covers MSSQL port security, as vulnerabilities like SQL Slammer
(2003) exploited 1434/UDP misconfigurations. Hardening includes restricting access, changing
defaults, and monitoring traffic.
Why other options are incorrect:
A . 1433/TCP, 2433/UDP, 3433/TCP: 2433/UDP and 3433/TCP are not MSSQL standards; they’re likely
typos or unrelated ports.
C . 1433/TCP, 2433/UDP, 1434/TCP: 2433/UDP is incorrect; 1434/UDP is the Browser Service port.
D . 1533/TCP, 1434/UDP, 2434/TCP: 1533/TCP and 2434/TCP aren’t associated with MSSQL; they
deviate from documented defaults.
Real-World Context: Tools like netstat -an | find "1433" on Windows confirm MSSQL’s port usage
during audits.
Reference: CNSP Official Documentation (Database Security and Ports); Microsoft SQL Server
Documentation, IANA Port Registry.
Question 2
Which of the following statements regarding Authorization and Authentication is true?
- AOption A:
Authorization is the process where requests to access a particular resource are granted or denied.
Authentication is providing and validating the identity.
- BOption B:
Authentication is the process where requests to access a particular resource are granted or
denied. Authorization is providing and validating identity.
- COption C:
Authentication includes the execution rules that determine what functionality and data the user
can access. Authentication and Authorization are both the same thing.
- DOption D:
Authentication controls which processes a person can use and which files they can access, read, or
modify. Authentication and authorization typically do not operate together, thus making it
impossible to determine who is accessing the information.
Show answer and explanation
Correct answer: A
Authentication and Authorization (often abbreviated as AuthN and AuthZ) are foundational pillars of
access control in network security:
Authentication (AuthN): Verifies "who you are" by validating credentials against a trusted source.
Examples include passwords, MFA (multi-factor authentication), certificates, or biometrics. It ensures
the entity (user, device) is legitimate, typically via protocols like Kerberos or LDAP.
Authorization (AuthZ): Determines "what you can do" after authentication, enforcing policies on
resource access (e.g., read/write permissions, API calls). It relies on mechanisms like Access Control
Lists (ACLs), Role-Based Access Control (RBAC), or Attribute-Based Access Control (ABAC).
Option A correctly separates these roles:
Authorization governs access decisions (e.g., "Can user X read file Y?").
Authentication establishes identity (e.g., "Is this user X?").
In practice, these processes are sequential: AuthN precedes AuthZ. For example, logging into a VPN
authenticates your identity (e.g., via username/password), then authorizes your access to specific
subnets based on your role. CNSP likely stresses this distinction for designing secure systems, as
conflating them risks privilege escalation or identity spoofing vulnerabilities.
Why other options are incorrect:
B: Reverses the definitions—Authentication doesn’t grant/deny access (that’s AuthZ), and
Authorization doesn’t validate identity (that’s AuthN). This mix-up could lead to flawed security
models.
C: Falsely equates AuthN and AuthZ and attributes access rules to AuthN. They’re distinct processes;
treating them as identical undermines granular control (e.g., NIST SP 800-53 separates IA-2 for
AuthN and AC-3 for AuthZ).
D: Misassigns access control to AuthN and claims they don’t interoperate, which is false—they work
together in every modern system (e.g., SSO with RBAC). This would render auditing impossible,
contradicting security best practices.
Real-World Context: A web server (e.g., Apache) authenticates via HTTP Basic Auth, then authorizes
via .htaccess rules—two separate steps.
Reference: CNSP Official Study Guide (Access Control Fundamentals); NIST SP 800-53 (Security and
Privacy Controls).
See all 5 free sample questions