Security Technologies CNX-001 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A network administrator is reviewing firewall rules and finds that there are several rules that are redundant or conflicting. The firewall is a stateful firewall that processes rules in order. The administrator wants to improve performance and reduce the risk of misconfiguration. What should they do?

   • AMove all rules to the end of the rule base to reduce processing time.
   • BDelete all rules and start from scratch with a default-deny policy.
   • CConsolidate overlapping rules and place the most specific rules before more general rules.
   • DDisable logging on all firewall rules to improve performance.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is integrating a NAC solution with its existing network infrastructure, which includes switches, routers, and a RADIUS server. The NAC will be used to enforce access policies for both wired and wireless devices. The company wants to ensure that the NAC can dynamically assign VLANs based on device type and compliance. What should they configure?

   • AUse a VPN to assign VLANs to remote users.
   • BConfigure the switches and wireless access points to use 802.1X and the RADIUS server to return VLAN assignments based on NAC policy.
   • CUse static VLAN assignments on the switches and rely on the NAC to enforce policies.
   • DConfigure the firewall to assign VLANs based on IP addresses.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A financial services company must encrypt data transmitted between its on-premises data center and a cloud-based application. The data includes sensitive customer records and must meet regulatory requirements for strong encryption. The company also needs to manage the encryption keys centrally. Which solution should they choose?

   • AUse SSH tunneling with RC4 encryption and manage keys manually via spreadsheets.
   • BUse TLS 1.2 with AES-128 and rely on the cloud provider's default key management.
   • CUse SSL/TLS with 3DES encryption and store keys on each endpoint device.
   • DUse IPsec VPN with AES-256 encryption and manage keys through a centralized key management service.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is deploying a NAC solution to control access to its wired network. The NAC will integrate with the existing Active Directory for authentication. The network team wants to ensure that only domain-joined computers can access the network, while guests are redirected to a separate guest VLAN. What should they configure?

   • AImplement a VPN that requires domain credentials for all network access.
   • BConfigure the NAC to authenticate against Active Directory and use VLAN assignment to place non-domain devices on the guest VLAN.
   • CUse MAC address filtering to allow only domain-joined computers.
   • DSet up a firewall rule to block all traffic from non-domain devices.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a NAC solution that uses 802.1X for wired and wireless access. The security team wants to ensure that only devices with a valid certificate are allowed on the network, while also allowing guests to access the internet through a separate VLAN. The NAC must integrate with the existing RADIUS infrastructure. What should they configure?

   • ASet up a firewall rule to block non-domain devices from accessing internal resources.
   • BConfigure the NAC to use username/password authentication and assign all devices to the corporate VLAN.
   • CConfigure the RADIUS server to issue certificates to domain-joined devices and set up a guest VLAN for devices without certificates.
   • DUse MAC address authentication on the RADIUS server and assign all devices to the same VLAN.
   Reveal Solution Discussion Select an answer first