Security Challenges CNX-001 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which security measure is essential for protecting data in a hybrid cloud environment?

   • AUsing only on-premises security controls
   • BStoring all data in a single location
   • CEncrypting data both at rest and in transit
   • DDisabling all encryption to improve performance
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which strategy is most effective for preventing unauthorized access to a network's internal resources?

   • ADisabling all firewall rules
   • BAllowing all traffic from the internet
   • CUsing strong passwords and multi-factor authentication (MFA)
   • DRemoving all access control lists (ACLs)
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which tool is commonly used to test firewall rule effectiveness by sending crafted packets?

   • Aping
   • Bnmap
   • Ctraceroute
   • Dnetstat
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which firewall rule action should be used to explicitly block traffic from a known malicious IP address while still allowing other traffic?

   • AAllow
   • BDeny
   • CLog
   • DNAT
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization wants to implement an access control mechanism for its cloud-based file storage. The requirement is that users must authenticate with their corporate credentials and only access files they are explicitly granted. Which access control mechanism should be used?

   • AUse role-based access control (RBAC) with Azure Active Directory integration.
   • BUse shared access keys for all users.
   • CUse a single storage account key shared among authorized users.
   • DUse a public container with anonymous read access.
   Reveal Solution Discussion Select an answer first