Implement Secure Access Technologies 100-160 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company has a mix of corporate-managed laptops and employee-owned personal devices that need to access the corporate network. The security policy requires that all devices have antivirus software and the latest patches before accessing internal systems. However, the company does not want to install any software on personal devices. Which approach best enforces the policy while respecting the constraint?

   • AUse NAC that performs a web-based posture assessment for personal devices and installs an agent on corporate laptops.
   • BUse a firewall to allow only corporate laptops to access internal systems.
   • CInstall a NAC agent on all personal devices, regardless of ownership.
   • DBlock all personal devices from the network and require them to use a guest Wi-Fi network.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A company wants to ensure that only devices with the latest antivirus definitions can access the corporate network. Which technology is best suited for this requirement?

   • AVirtual Private Network (VPN)
   • BStateful firewall
   • CAccess Control List (ACL)
   • DNetwork Access Control (NAC)
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company has a remote employee who needs to access a file server on the internal network. The employee's ISP blocks IPsec traffic, but allows HTTPS. The company wants to ensure that the connection is encrypted and that the employee can access the file server using standard file-sharing protocols. Which VPN solution should the company use?

   • AAn SSL/TLS VPN that provides a tunnel for file-sharing protocols.
   • BA site-to-site VPN between the employee's home router and the office.
   • CA remote desktop gateway that exposes the file server over HTTPS.
   • DAn IPsec VPN that uses UDP encapsulation.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A network administrator is troubleshooting why a new ACL on a router is not blocking traffic as expected. The ACL is applied to the outbound interface of the router, and the rule is 'deny tcp any host 192.168.1.10 eq 22'. Users report that they can still SSH to the server at 192.168.1.10. What is the most likely reason the ACL is not working?

   • AThe ACL does not have an implicit deny at the end.
   • BThe ACL is missing a permit statement for return traffic.
   • CThe ACL is using the wrong protocol keyword.
   • DThe ACL is applied to the wrong interface or direction.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary role of a firewall in a network security architecture?

   • ATo encrypt all data stored on network servers
   • BTo detect and alert on known malware signatures
   • CTo enforce security policies by controlling traffic between network segments
   • DTo provide secure remote access through VPN tunnels
   Reveal Solution Discussion Select an answer first