Which security device is designed to inspect network traffic at the application layer and actively block malicious packets that match known attack signatures?

Virtual private network (VPN) concentrator

Network access control (NAC) server

Intrusion Prevention System (IPS)

Why is it important to keep security software such as anti-malware up to date?

To reduce the amount of disk space used by the software

To ensure it can detect the latest malware threats

To comply with user interface preferences

To make the software easier to use

Which technique is commonly used to enforce network segmentation between different security zones?

Installing antivirus software on all endpoints

Using VLANs and firewall rules to control traffic between segments

Disabling DHCP on all network switches

Enabling encryption on all wireless access points

Which step is a key component of a change management process?

Immediate implementation without documentation

Ignoring security impact assessments

A financial firm needs to replace legacy FTP for transferring sensitive client files between two internal servers. The security team requires encryption in transit, but the receiving server is a legacy system that only supports standard FTP commands and cannot run an SSH daemon. Which solution should they choose to meet the encryption requirement?

Keep FTP but restrict it to the internal network, since internal traffic is not exposed to the internet.

Use HTTPS with a web-based upload portal on the receiving server.

Switch to SFTP (SSH File Transfer Protocol) by installing an SSH server on the receiving server.

Implement FTPS (FTP over TLS/SSL) on the receiving server, which wraps the existing FTP protocol with TLS encryption.

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 4

Objective 3.4 Protect Networks and Systems. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 7)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

38questions here

8free pages

12concepts

28%of the exam

Questions 31–35

31foundation · easy
Which security device is designed to inspect network traffic at the application layer and actively block malicious packets that match known attack signatures?
Select an answer first
32foundation · easy
Why is it important to keep security software such as anti-malware up to date?
Select an answer first
33foundation · easy
Which technique is commonly used to enforce network segmentation between different security zones?
Select an answer first
34foundation · easy
Which step is a key component of a change management process?
Select an answer first
35application · medium
A financial firm needs to replace legacy FTP for transferring sensitive client files between two internal servers. The security team requires encryption in transit, but the receiving server is a legacy system that only supports standard FTP commands and cannot run an SSH daemon. Which solution should they choose to meet the encryption requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.