Logical Security N10-009 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is implementing MFA for VPN access. They want to use a method that does not require users to carry a separate hardware token, but still provides a possession factor. They are considering push notifications to a mobile app. However, some users have company-issued phones that are not allowed to have personal apps, and some users have personal phones that are not managed by the company. Which approach best balances security and usability?

   • AUse SMS-based one-time passcodes sent to the user's phone
   • BRequire users to use a biometric factor on their laptop, such as a fingerprint reader
   • CUse a mobile app that supports both push notifications and time-based one-time passcodes (TOTP), and allow users to install it on either their company or personal phone
   • DRequire all users to use a hardware token, regardless of phone policy
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to implement a single sign-on (SSO) solution so that users authenticate once and then access multiple internal applications without re-entering credentials. Which authentication method should be used?

   • AA local username and password database on each application server
   • BA TACACS+ server for device administration
   • CA RADIUS server for network device authentication
   • DSecurity Assertion Markup Language (SAML) with an identity provider (IdP)
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary function of a SIEM system?

   • ATo collect and analyze security events from multiple sources
   • BTo encrypt data transmitted over the network
   • CTo enforce device compliance before network access
   • DTo block malicious network traffic
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A user authenticates to the network by presenting a smart card and entering a PIN. Which authentication method is being used?

   • ASomething you are
   • BSomething you know
   • CTwo-factor authentication
   • DSomething you have
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the main difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

   • AAn IDS is passive, while an IPS is active
   • BAn IDS works on the network, while an IPS works on the host
   • CAn IDS only detects and alerts, while an IPS can block traffic
   • DAn IDS is hardware, while an IPS is software
   Reveal Solution Discussion Select an answer first