A university is deploying a new wireless network for students and staff. The network must support a wide range of devices, including legacy devices that do not support WPA2-Enterprise. The security team wants to maintain strong security for staff devices while allowing guest access for visitors. Which approach best balances security and compatibility?

Use a single SSID with WPA2-PSK for all users and rely on a captive portal for authentication.

Deploy a single SSID with open access and use MAC address filtering to control access.

Use a single SSID with WPA2-Enterprise and require all devices to support it, disabling access for legacy devices.

Deploy multiple SSIDs: one for staff using WPA2-Enterprise with RADIUS, one for students using WPA2-PSK with a shared password, and one for guests with open access and a captive portal.

A security analyst is investigating a possible man-in-the-middle attack on the company's network. The analyst notices that ARP requests from a critical server are being answered by two different MAC addresses for the same IP address. Which tool or technique would best confirm the attack and identify the malicious host?

Use a network analyzer to capture ARP traffic and examine the MAC-to-IP mappings to identify the duplicate responses.

Use a port scanner to identify all open ports on the server and look for unusual services.

Use a log analyzer to review the server's authentication logs for failed login attempts.

Use a vulnerability scanner to check the server for known vulnerabilities.

A multinational company is designing a new network for a research division that handles highly sensitive intellectual property. The division must be able to share data with external partners via a controlled file transfer service, but the research network must be isolated from the rest of the corporate network. The company also needs to comply with data residency regulations that require the data to remain in a specific country. Which architecture best meets these requirements?

Create a separate network segment for the research division with a firewall controlling all traffic to the corporate network, and place a file transfer server in a DMZ that is accessible to both the research network and external partners.

Connect the research division directly to the internet and use a VPN for external partners to access the file transfer server.

Use a cloud-based file transfer service that stores data in a different country to reduce infrastructure costs.

Place the research division on the same network as the corporate network but use VLANs to logically separate traffic.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 3

Network Security CCISO Practice Questions (Page 7)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

Questions 31–35

31expert · hard
A university is deploying a new wireless network for students and staff. The network must support a wide range of devices, including legacy devices that do not support WPA2-Enterprise. The security team wants to maintain strong security for staff devices while allowing guest access for visitors. Which approach best balances security and compatibility?
Select an answer first
32foundation · easy
Which type of network attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?
Select an answer first
33expert · hard
A security analyst is investigating a possible man-in-the-middle attack on the company's network. The analyst notices that ARP requests from a critical server are being answered by two different MAC addresses for the same IP address. Which tool or technique would best confirm the attack and identify the malicious host?
Select an answer first
34expert · hard
A multinational company is designing a new network for a research division that handles highly sensitive intellectual property. The division must be able to share data with external partners via a controlled file transfer service, but the research network must be isolated from the rest of the corporate network. The company also needs to comply with data residency regulations that require the data to remain in a specific country. Which architecture best meets these requirements?
Select an answer first
35foundation · easy
Which network device operates primarily at Layer 2 of the OSI model and uses MAC addresses to forward frames within a local area network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Network Security CCISO Practice Questions (Page 7)

Questions 31–35

Which type of network attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?

Which network device operates primarily at Layer 2 of the OSI model and uses MAC addresses to forward frames within a local area network?

Keep studying — Information Security Core Competencies