Security Technologies CNX-001 Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   What is the primary purpose of a key management system (KMS) in an enterprise?

   • ATo monitor network traffic for malicious activity
   • BTo securely store, rotate, and manage encryption keys
   • CTo encrypt all network traffic automatically
   • DTo authenticate users accessing the network
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An e-commerce company recently discovered that its firewall has a rule allowing inbound traffic on port 3389 (RDP) from the entire internet. This rule was added temporarily for remote troubleshooting and is no longer needed. The security team wants to remove the rule and ensure that no similar rules are added in the future. What should they do?

   • ALeave the rule in place but add a logging rule to monitor RDP traffic.
   • BModify the rule to allow RDP only from a specific IP address range.
   • CDisable the rule and review it again in six months.
   • DDelete the rule and implement a change management process for firewall rule modifications.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   A firewall is configured with a rule that allows inbound SSH (port 22) from a specific management subnet. What is the primary purpose of specifying the source address in this rule?

   • ATo restrict SSH access to only authorized administrators from that subnet
   • BTo encrypt the SSH traffic between the management subnet and the firewall
   • CTo ensure the firewall can route traffic to the management subnet
   • DTo log all SSH attempts from any source for auditing purposes
   Reveal Solution Discussion Select an answer first