Security Technologies CNX-001 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A multinational corporation needs to secure data in transit between its branch offices and the corporate headquarters. The network spans multiple countries, and the company must comply with data protection regulations that require strong encryption. They also want to minimize the overhead of key management. Which encryption protocol should they select?

   • APPTP with MPPE encryption.
   • BSSH with password authentication.
   • CSSL/TLS with pre-shared keys.
   • DIPsec with IKEv2 and certificate-based authentication.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security analyst is monitoring firewall logs and notices a large number of failed connection attempts from a single IP address to various ports on a server. The attempts are coming from an external IP and are occurring at a high rate. The analyst suspects a port scan. What should the analyst do?

   • AIgnore the traffic because port scans are common and not a serious threat.
   • BCreate a temporary firewall rule to block the specific IP address and continue monitoring for further activity.
   • CDisable the firewall and investigate the issue directly on the server.
   • DBlock all traffic from the entire subnet of the IP address.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is implementing a NAC solution to control access to its network. The NAC will be used to enforce a policy that requires all devices to have the latest security patches. The company has a mix of Windows and macOS devices. The NAC must be able to check the patch level of each device and quarantine non-compliant devices. What should they configure?

   • AUse a firewall rule to block all traffic from devices that are not on the patch list.
   • BUse a VPN that requires a valid username and password.
   • CRequire users to manually confirm that their devices are patched before connecting.
   • DConfigure the NAC to use a posture assessment that checks for patch levels and use a quarantine VLAN for non-compliant devices.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A small business uses a firewall to protect its network. The owner wants to allow employees to access the internet, but wants to block access to social media sites during work hours. The firewall supports URL filtering. What should the owner configure?

   • ABlock all outbound traffic on port 80 and 443.
   • BConfigure the firewall to block all traffic from the employees' IP addresses.
   • CSet up a rule to allow all traffic and rely on employee self-discipline.
   • DCreate a firewall rule that blocks outbound traffic to social media domains during business hours.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has a firewall that is configured to allow all outbound traffic. The security team wants to restrict outbound traffic to only necessary services, such as DNS, HTTPS, and email. They also want to log all blocked outbound traffic. What should they configure?

   • ACreate a default-deny outbound rule and add allow rules for DNS, HTTPS, and email, with logging enabled on the deny rule.
   • BEnable logging on the allow rules and keep the default allow rule.
   • CBlock all outbound traffic and allow only HTTPS.
   • DAdd allow rules for DNS, HTTPS, and email, and leave the default allow rule in place.
   Reveal Solution Discussion Select an answer first