2.1 Describe Network Security Solutions and Deployment Models That Provide Intrusion Prevention and Firewall Capabilities 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a key scalability consideration when deploying IPS or firewall solutions in a growing network?

   • AEnsuring the device can be managed via a web interface.
   • BEnsuring the device is placed in a passive deployment to avoid latency.
   • CEnsuring the device's throughput capacity can handle increased traffic volume without becoming a bottleneck.
   • DEnsuring the device has enough USB ports for external storage.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company wants to allow employees to use a specific cloud-based CRM application, but block all other unknown applications. The firewall must also be able to detect and block malicious traffic within the allowed application. Which combination of firewall features should they use?

   • AURL filtering to allow the CRM's domain and antivirus scanning
   • BApplication control to allow the CRM and IPS to inspect allowed traffic
   • CPort-based ACL to allow the CRM's known port and stateful inspection
   • DIdentity-based policy to allow the CRM for specific users and logging
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does a firewall or IPS typically integrate with a SIEM system?

   • ABy acting as a proxy for the SIEM to access the internet.
   • BBy receiving threat intelligence feeds from the SIEM to update its signature database.
   • CBy sending logs and alerts to the SIEM for centralized monitoring and correlation.
   • DBy providing the SIEM with a backup of its configuration files.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of an Intrusion Prevention System (IPS) in a network security architecture?

   • ATo filter traffic based on source and destination IP addresses and port numbers.
   • BTo encrypt all traffic between two sites to protect data confidentiality.
   • CTo passively monitor network traffic and generate alerts for security analysts to review later.
   • DTo detect and block malicious traffic in real time by actively dropping or rejecting packets that match known attack signatures.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a typical network architecture, where is an IPS most commonly placed to inspect traffic?

   • AOn a SPAN port of a switch, receiving a copy of traffic for analysis without affecting the traffic flow.
   • BInside each individual host's operating system to monitor application behavior.
   • COn a dedicated management network, separate from the data traffic path.
   • DAt the network edge, between the internet router and the internal network, to inspect all inbound and outbound traffic.
   Reveal Solution Discussion Select an answer first