A network administrator is hardening a firewall that manages traffic between the corporate network and the internet. The administrator wants to ensure that management access to the firewall is secure and that the firewall itself is not a target. Which set of actions is most effective?

Restrict management access to a dedicated management VLAN, use SSH or HTTPS for administration, disable unused management protocols, and apply the latest firmware patches.

Allow management access from any IP address to ensure availability.

Disable all logging to improve performance.

Use Telnet for management because it is simpler to configure.

A network team is hardening a new router before deployment. The router will be used to connect a branch office to the corporate headquarters over the internet. Which set of actions should be taken?

Use SNMPv1 for monitoring because it is simpler to configure.

Enable all services for maximum functionality and rely on the corporate firewall for protection.

Disable unused services, change default credentials, apply the latest firmware patches, and configure access control lists (ACLs) to limit management access.

Leave default credentials in place to avoid lockouts and simplify maintenance.

What is a key best practice for securing a wireless access point?

Enable WPS for easy device connection

Disable SSID broadcasting to hide the network

Place the access point outside the firewall

Use WPA2 or WPA3 encryption and a strong passphrase

A small office wants to provide wireless internet access to guests while keeping the internal corporate network separate. The wireless access point supports multiple SSIDs and VLAN tagging. Which configuration should be used?

Create a single SSID with WPA2-PSK and give all users the same password for simplicity.

Disable SSID broadcast and rely on MAC address filtering to keep the network secure.

Create two SSIDs: one for guests with WPA2-PSK and internet-only access, and one for employees with WPA2-Enterprise and access to the internal VLAN.

Create two SSIDs but put both on the same VLAN so that guests can access internal resources if needed.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 3

Network Security CCISO Practice Questions (Page 3)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 11–15

11foundation · easy
Which component of AAA is responsible for tracking user activity and resource usage for auditing and billing purposes?
Select an answer first
12expert · hard
A network administrator is hardening a firewall that manages traffic between the corporate network and the internet. The administrator wants to ensure that management access to the firewall is secure and that the firewall itself is not a target. Which set of actions is most effective?
Select an answer first
13application · medium
A network team is hardening a new router before deployment. The router will be used to connect a branch office to the corporate headquarters over the internet. Which set of actions should be taken?
Select an answer first
14foundation · easy
What is a key best practice for securing a wireless access point?
Select an answer first
15application · medium
A small office wants to provide wireless internet access to guests while keeping the internal corporate network separate. The wireless access point supports multiple SSIDs and VLAN tagging. Which configuration should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.