Networking Appliances N10-009 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has a firewall that filters traffic based on IP and port. The security team wants to add a layer of protection that can detect and block application-layer attacks, such as SQL injection and cross-site scripting, without significantly increasing latency. The team is concerned about false positives that could block legitimate traffic. Which solution should be implemented?

   • AUse a proxy server with content filtering.
   • BDeploy an IDS in passive mode and review alerts manually.
   • CDeploy an IPS in inline mode with a conservative rule set and regular tuning.
   • DReplace the firewall with a next-generation firewall that includes IPS.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A university has deployed 100 access points across campus. The network team wants to implement a guest Wi-Fi network that is isolated from the internal network and also wants to centrally manage the access points. The team is concerned about the security of the guest network. Which solution should be implemented?

   • AConfigure each access point individually with a guest SSID and no VLAN.
   • BDeploy a VPN concentrator to isolate guest traffic.
   • CUse a wireless controller to configure a separate guest SSID with VLAN tagging and firewall rules to isolate guest traffic.
   • DUse a content filter to block guest access to internal resources.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which benefit does a wireless controller provide in a large office with many access points?

   • AIt provides internet connectivity to the office
   • BCentralized configuration and policy enforcement across all APs
   • CIt increases the maximum wireless speed of each client
   • DIt eliminates the need for a wired network
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the main function of a load balancer in a network?

   • ATo convert private IP addresses to public IP addresses
   • BTo cache web content to reduce server load
   • CTo filter malicious traffic based on security rules
   • DTo distribute incoming traffic across multiple servers
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company's web application is hosted on three servers in a cluster. The servers are behind a firewall. The company wants to distribute incoming HTTPS traffic evenly across the servers and also ensure that if one server fails, traffic is redirected to the remaining healthy servers. Which appliance should be placed between the firewall and the server cluster?

   • ALoad balancer
   • BProxy server
   • CVPN concentrator
   • DWireless controller
   Reveal Solution Discussion Select an answer first