5.1 Network Security Design and Integration 400-007 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which technology is specifically designed to provide deep visibility into network traffic by analyzing flows and metadata?

   • ASNMP
   • BNTP
   • CNetFlow
   • DSyslog
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary benefit of centralizing policy management in a network security design?

   • AIt reduces the need for network monitoring
   • BIt eliminates the need for firewalls
   • CIt ensures consistent enforcement of security policies across all devices
   • DIt automatically encrypts all network traffic
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When designing a network that will process credit card transactions, which compliance standard must the design support?

   • AISO 27001
   • BCOBIT
   • CPCI DSS
   • DGDPR
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A software company is considering using an external AI code-generation service to help developers write code. The security team is concerned about the risk of proprietary code being exposed to the AI service. The company's current security policy does not address the use of external AI services. What is the most important first step for the security team to take?

   • AImmediately block all access to the external AI service from the corporate network.
   • BIncrease the logging and monitoring of all network traffic to detect any data exfiltration to the AI service.
   • CDevelop and implement a corporate policy that defines what data can be shared with external AI services and under what conditions.
   • DPurchase a more secure, on-premises AI service that does not send data externally.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security operations center (SOC) is struggling to detect attacks that move laterally within the network. The SOC analysts have access to firewall logs, but they are missing the context of what is happening on the endpoints. Which visibility enhancement would most directly improve the SOC's ability to detect lateral movement?

   • AIncreasing the retention period for firewall logs from 30 days to 90 days.
   • BImplementing a network access control (NAC) solution to enforce device posture.
   • CDeploying an endpoint detection and response (EDR) solution that collects and correlates endpoint telemetry with network logs.
   • DAdding more firewall rules to block known malicious IP addresses.
   Reveal Solution Discussion Select an answer first