Access Controls CNX-001 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A company wants to allow access only to a set of approved business websites and block all other web content. Which URL filtering method should be implemented?

   • AAllowlist of approved domains
   • BBlocklist of unapproved domains
   • CBlock all HTTP traffic
   • DAllow all traffic except for a few known malicious sites
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   A cloud administrator is configuring a new security group for a set of application servers. Which statement correctly describes the primary purpose of a security group in a cloud environment?

   • AIt is a routing table that determines the path network traffic takes between subnets in a virtual network.
   • BIt is a network appliance that performs deep packet inspection and blocks malicious traffic based on signatures.
   • CIt provides a centralized location for storing user credentials and managing authentication for cloud resources.
   • DIt acts as a virtual firewall that controls inbound and outbound traffic to associated resources based on allow rules.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to block access to a specific website (blocked-site.com) for all users on its network. The company uses a cloud-based URL filtering service. The service allows you to create custom URL categories and rules. Which configuration is the most direct and effective?

   • AConfigure the DNS server to return a non-routable IP address for blocked-site.com.
   • BCreate a firewall rule that blocks all traffic to the IP address of blocked-site.com.
   • CCreate a custom URL category containing blocked-site.com and add a rule that blocks this category for all users.
   • DCreate a rule that blocks the 'General' category, assuming blocked-site.com is in that category.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A firewall rule is being written to block all outbound traffic from a specific subnet except for DNS queries. Which of the following rule configurations would BEST achieve this?

   • ADeny-all rule, then an allow rule for UDP port 53 from the subnet
   • BAllow rule for UDP port 53 from the subnet, followed by a deny-all rule
   • CDeny rule for UDP port 53 from the subnet, followed by an allow-all rule
   • DAllow rule for TCP port 53 from the subnet, followed by a deny-all rule
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A network administrator is defining a firewall rule to allow inbound HTTPS traffic to a web server. Which of the following rule components is MOST essential for the rule to match the intended traffic?

   • ASource port 443
   • BProtocol type ICMP
   • CDestination port 443
   • DDestination IP address of the client
   Reveal Solution Discussion Select an answer first