A security analyst is using a network monitoring tool and notices a sudden spike in outbound DNS queries from an internal host to a domain that is known to be malicious. What should the analyst do first?

Reboot the host to clear the DNS cache.

Ignore the spike because DNS traffic is normal.

Block the malicious domain at the DNS server.

Isolate the host from the network and investigate the DNS queries.

A security analyst notices that an internal user's credentials were used to log in from a foreign country at the same time the user was in the office. What type of attack is most likely?

Credential theft and unauthorized use.

EC-CouncilAssociate C|CISO

Domain 4Objective 3

Network Security ACCISO Practice Questions (Page 7)

Part of the Information Security Core Competencies domain, which makes up ~31% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~16–25 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

7concepts

Questions 31–35

31application · medium
A security analyst is using a network monitoring tool and notices a sudden spike in outbound DNS queries from an internal host to a domain that is known to be malicious. What should the analyst do first?
Select an answer first
32application · medium
A remote employee needs to access internal web applications securely from a public Wi-Fi network. The company provides a VPN service. Which protocol should the VPN use to ensure strong encryption and authentication?
Select an answer first
33application · medium
A security analyst notices that an internal user's credentials were used to log in from a foreign country at the same time the user was in the office. What type of attack is most likely?
Select an answer first
34foundation · easy
Which tool is commonly used to capture and analyze network packets for troubleshooting and security monitoring?
Select an answer first
35application · medium
A company wants to allow remote employees to securely access internal resources over the internet. The solution must encrypt all traffic and authenticate users. Which technology should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.

Network Security ACCISO Practice Questions (Page 7)

Questions 31–35

A security analyst is using a network monitoring tool and notices a sudden spike in outbound DNS queries from an internal host to a domain that is known to be malicious. What should the analyst do first?

A remote employee needs to access internal web applications securely from a public Wi-Fi network. The company provides a VPN service. Which protocol should the VPN use to ensure strong encryption and authentication?

A security analyst notices that an internal user's credentials were used to log in from a foreign country at the same time the user was in the office. What type of attack is most likely?

Which tool is commonly used to capture and analyze network packets for troubleshooting and security monitoring?

A company wants to allow remote employees to securely access internal resources over the internet. The solution must encrypt all traffic and authenticate users. Which technology should be implemented?

Keep studying — Information Security Core Competencies