A company wants to monitor its network for suspicious activity and automatically block malicious traffic. They already have a firewall. What additional control should they implement?

An intrusion detection system (IDS) in passive mode.

A network tap for packet capture.

An intrusion prevention system (IPS) inline with the firewall.

A hospital is deploying a wireless network for patient monitoring devices that require low latency and high reliability. The devices support WPA2 and WPA3. The network must also prevent unauthorized access. What is the best configuration?

Use WPA2-PSK with a long passphrase to minimize overhead.

Use WPA3-Personal with a shared passphrase for simplicity.

Use WPA3-Enterprise with 802.1X and a dedicated SSID for medical devices.

Use an open network with MAC filtering to reduce latency.

A network architect is designing a new data center network. The architect must ensure high availability and security. The design includes redundant firewalls and a DMZ for public-facing servers. Which additional control is MOST important to protect the internal network from a compromised DMZ server?

Implement strict firewall rules between the DMZ and internal network

Use a single firewall for all traffic

Place all servers in the same VLAN

Disable logging on the firewalls

EC-CouncilAssociate C|CISO

Domain 4Objective 3

Network Security ACCISO Practice Questions (Page 6)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 26–30

26application · medium
A company wants to monitor its network for suspicious activity and automatically block malicious traffic. They already have a firewall. What additional control should they implement?
Select an answer first
27foundation · easy
Which secure protocol suite operates at the network layer and provides confidentiality, integrity, and authentication for IP packets?
Select an answer first
28application · medium
A security analyst is reviewing network logs and notices that an attacker is sending spoofed ARP messages to associate the attacker's MAC address with the IP address of the default gateway. This allows the attacker to intercept traffic between the gateway and hosts. What type of attack is this?
Select an answer first
29expert · hard
A hospital is deploying a wireless network for patient monitoring devices that require low latency and high reliability. The devices support WPA2 and WPA3. The network must also prevent unauthorized access. What is the best configuration?
Select an answer first
30expert · hard
A network architect is designing a new data center network. The architect must ensure high availability and security. The design includes redundant firewalls and a DMZ for public-facing servers. Which additional control is MOST important to protect the internal network from a compromised DMZ server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Network Security ACCISO Practice Questions (Page 6)

Questions 26–30

A company wants to monitor its network for suspicious activity and automatically block malicious traffic. They already have a firewall. What additional control should they implement?

Which secure protocol suite operates at the network layer and provides confidentiality, integrity, and authentication for IP packets?

A security analyst is reviewing network logs and notices that an attacker is sending spoofed ARP messages to associate the attacker's MAC address with the IP address of the default gateway. This allows the attacker to intercept traffic between the gateway and hosts. What type of attack is this?

A hospital is deploying a wireless network for patient monitoring devices that require low latency and high reliability. The devices support WPA2 and WPA3. The network must also prevent unauthorized access. What is the best configuration?

Keep studying — Information Security Core Competencies