Logical Security N10-009 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A financial company is concerned about employees emailing sensitive customer data outside the organization. They want to prevent unauthorized data transfers and also maintain a log of any attempted violations for compliance purposes. Which solution should be deployed?

   • AAn intrusion prevention system (IPS) that detects and blocks malware in email attachments
   • BA firewall that blocks all outbound SMTP traffic
   • CA data loss prevention (DLP) system that inspects outbound email content and blocks or quarantines messages containing sensitive data, while logging the attempts
   • DA SIEM that collects email logs and alerts on large outbound messages
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is designing a network for a new office. They want to segment the network to protect the finance department's systems from the rest of the company. However, the finance team often works from the general office area and needs to access the finance systems from their laptops. The company also wants to allow guests to use the internet but not access internal resources. Which design best meets these requirements?

   • ACreate three VLANs: one for finance systems, one for general office devices, and one for guests. Use a firewall to allow finance laptops to access the finance VLAN, but block guest VLAN from accessing internal VLANs
   • BUse a NAC solution that only allows finance laptops to access the network
   • CCreate two VLANs: one for finance and one for everyone else, and allow all traffic between them
   • DPlace all devices on a single VLAN and use a host-based firewall on the finance systems
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary function of a firewall in a network?

   • ATo assign IP addresses to devices
   • BTo route traffic between networks
   • CTo detect and prevent malware
   • DTo control traffic based on security rules
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A company requires users to enter a password and then approve a push notification on their smartphone. Which security concept is being implemented?

   • ABiometric authentication
   • BRole-based access control
   • CMultifactor authentication (MFA)
   • DSingle sign-on (SSO)
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has remote employees who need to access internal applications securely over the internet. The security team wants to ensure that all traffic between the remote user and the internal network is encrypted and that the user's identity is verified before the tunnel is established. Which solution should be deployed?

   • AA network access control (NAC) solution that checks the remote device's antivirus status
   • BA SIEM system that monitors VPN logs for anomalies
   • CA VPN concentrator that requires certificate-based authentication and uses IPsec
   • DA firewall with a rule that allows remote desktop protocol (RDP) from any public IP
   Reveal Solution Discussion Select an answer first