A hospital is deploying a wireless network for medical devices that must remain isolated from the general corporate network. The devices do not support 802.1X authentication. The network team must ensure that only authorized devices can connect and that the traffic is encrypted. Which approach is most appropriate?

Use WEP with a hidden SSID for security.

Use WPA2-Enterprise with a RADIUS server and require certificates on each device.

Use a dedicated SSID with WPA2-PSK, a strong passphrase, and MAC address filtering, and place the SSID on a separate VLAN with no access to other network segments.

Use an open SSID and rely on the separate VLAN for security.

A company's security team notices that an attacker is sending a continuous stream of TCP SYN packets to a public-facing web server, but the server is not responding with SYN-ACK packets. The server's connection table is filling up, and legitimate users are experiencing timeouts. Which mitigation is most effective for this type of attack?

Enable SYN cookies on the server's operating system and configure the perimeter firewall to rate-limit inbound SYN packets.

Block all inbound TCP traffic to the web server except for established connections.

Disable the server's TCP stack and use a UDP-based protocol for the web service.

Increase the server's TCP connection backlog and raise the timeout for half-open connections.

A network administrator notices that a user's workstation is sending ARP replies claiming to be the default gateway. As a result, the user is able to intercept traffic from other devices on the same subnet. What is this attack, and which mitigation should be implemented?

IP spoofing; implement ingress filtering at the router.

DNS poisoning; configure DNSSEC.

MAC flooding; configure port security on the switch.

ARP spoofing; enable Dynamic ARP Inspection (DAI) on the switch and use DHCP snooping.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 3

Network Security CCISO Practice Questions (Page 6)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 26–30

26foundation · easy
Which security strategy involves layering multiple defensive mechanisms so that if one fails, another will still protect the network?
Select an answer first
27expert · hard
A hospital is deploying a wireless network for medical devices that must remain isolated from the general corporate network. The devices do not support 802.1X authentication. The network team must ensure that only authorized devices can connect and that the traffic is encrypted. Which approach is most appropriate?
Select an answer first
28application · medium
A company's security team notices that an attacker is sending a continuous stream of TCP SYN packets to a public-facing web server, but the server is not responding with SYN-ACK packets. The server's connection table is filling up, and legitimate users are experiencing timeouts. Which mitigation is most effective for this type of attack?
Select an answer first
29foundation · easy
Which wireless encryption protocol is considered the most secure among the following options?
Select an answer first
30application · medium
A network administrator notices that a user's workstation is sending ARP replies claiming to be the default gateway. As a result, the user is able to intercept traffic from other devices on the same subnet. What is this attack, and which mitigation should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Network Security CCISO Practice Questions (Page 6)

Questions 26–30

Which security strategy involves layering multiple defensive mechanisms so that if one fails, another will still protect the network?

Which wireless encryption protocol is considered the most secure among the following options?

A network administrator notices that a user's workstation is sending ARP replies claiming to be the default gateway. As a result, the user is able to intercept traffic from other devices on the same subnet. What is this attack, and which mitigation should be implemented?

Keep studying — Information Security Core Competencies