Which practice is a recommended best practice for securing a wireless network?

Keeping the default admin password

During incident response, a security team discovers that an attacker has established a command-and-control (C2) channel using HTTPS traffic to an external IP. The team wants to contain the threat while preserving evidence. What should be done first?

Immediately shut down the affected host to stop the C2 traffic.

Block the external IP at the firewall and isolate the affected host from the network.

Disable the host's network adapter and then reboot the system.

Change the host's IP address and continue monitoring.

A security analyst is reviewing network traffic and notices a large number of TCP SYN packets sent to a single server from many different source IP addresses, but no ACK packets are returned. What type of attack is most likely occurring?

SYN flood, a type of DoS attack.

A security engineer is configuring a site-to-site VPN between two offices. The VPN must support strong encryption and authentication. The engineer is considering IPsec and SSL/TLS. Which factor is MOST important when choosing between these protocols?

The type of traffic to be transmitted

An attacker floods a web server with a massive volume of traffic from many compromised devices, overwhelming the server and making it unavailable. This is an example of which attack?

Distributed Denial of Service (DDoS)

EC-CouncilAssociate C|CISO

Domain 4Objective 3

Network Security ACCISO Practice Questions (Page 2)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 6–10

6foundation · easy
Which practice is a recommended best practice for securing a wireless network?
Select an answer first
7application · medium
During incident response, a security team discovers that an attacker has established a command-and-control (C2) channel using HTTPS traffic to an external IP. The team wants to contain the threat while preserving evidence. What should be done first?
Select an answer first
8application · medium
A security analyst is reviewing network traffic and notices a large number of TCP SYN packets sent to a single server from many different source IP addresses, but no ACK packets are returned. What type of attack is most likely occurring?
Select an answer first
9expert · hard
A security engineer is configuring a site-to-site VPN between two offices. The VPN must support strong encryption and authentication. The engineer is considering IPsec and SSL/TLS. Which factor is MOST important when choosing between these protocols?
Select an answer first
10foundation · easy
An attacker floods a web server with a massive volume of traffic from many compromised devices, overwhelming the server and making it unavailable. This is an example of which attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.