Why is patch management important for network device hardening?

It automatically configures the device for optimal security

It replaces the need for other security controls

It increases the processing speed of the device

It fixes known vulnerabilities that could be exploited by attackers

A university wants to implement network access control (NAC) for student devices. The NAC must support both wired and wireless connections, and it must allow guests to access the internet without authentication but restrict them from internal resources. Students must authenticate and be checked for compliance. Which NAC architecture is most appropriate?

Deploy a firewall between the network and the internet and rely on it for access control.

Deploy NAC on the network switches and wireless controllers, with a captive portal for guests and 802.1X for students.

Use MAC address filtering for all devices and manually add each student's MAC address.

Deploy NAC only on the wireless network and require all users to authenticate.

In a secure network architecture, what is the primary purpose of a DMZ (demilitarized zone)?

To monitor all inbound and outbound traffic for malicious activity

To store highly confidential data that must not be accessed from the internet

To provide a secure area for internal employees to connect their personal devices

To host services that are accessible from the internet while isolating them from the internal network

What is the primary purpose of network monitoring in a security context?

To replace the need for firewalls

To encrypt all network communications

To detect anomalies and potential security incidents by observing traffic patterns

To block all malicious traffic automatically

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 3

Network Security CCISO Practice Questions (Page 5)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 21–25

21foundation · easy
Why is patch management important for network device hardening?
Select an answer first
22expert · hard
A university wants to implement network access control (NAC) for student devices. The NAC must support both wired and wireless connections, and it must allow guests to access the internet without authentication but restrict them from internal resources. Students must authenticate and be checked for compliance. Which NAC architecture is most appropriate?
Select an answer first
23foundation · easy
In a secure network architecture, what is the primary purpose of a DMZ (demilitarized zone)?
Select an answer first
24foundation · easy
What is the primary purpose of network monitoring in a security context?
Select an answer first
25foundation · easy
Which protocol is connection-oriented and provides reliable, ordered delivery of data with error checking and flow control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Network Security CCISO Practice Questions (Page 5)

Questions 21–25

Why is patch management important for network device hardening?

In a secure network architecture, what is the primary purpose of a DMZ (demilitarized zone)?

What is the primary purpose of network monitoring in a security context?

Which protocol is connection-oriented and provides reliable, ordered delivery of data with error checking and flow control?

Keep studying — Information Security Core Competencies