Network Security Controls - Technical Controls CCT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary function of a host-based firewall?

   • ATo scan files for malware
   • BTo encrypt data stored on the hard drive
   • CTo filter network traffic to and from the specific endpoint
   • DTo monitor user behavior for insider threats
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital's network team is deploying a security device that must block malicious traffic in real time without creating a single point of failure for the entire network. They also want to consolidate multiple security functions into one appliance to reduce management overhead. Which approach best meets these requirements?

   • ADeploy a stateful firewall only, and use a separate logging server for monitoring.
   • BDeploy an intrusion prevention system (IPS) in inline mode with a bypass mechanism, and use a UTM appliance for additional security functions.
   • CDeploy a network tap and a SIEM system to analyze traffic and block malicious packets.
   • DDeploy an intrusion detection system (IDS) in passive mode and rely on a separate firewall to block traffic.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary function of a Security Information and Event Management (SIEM) system?

   • ATo encrypt data stored on servers
   • BTo collect and analyze logs from multiple sources for security monitoring
   • CTo manage user identities and access rights
   • DTo block malicious traffic in real-time
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial firm must prevent customer credit card numbers from being sent in emails or uploaded to external websites. Which control should be deployed to inspect outbound content?

   • AEmail encryption gateway
   • BForward proxy
   • CHost-based DLP
   • DNetwork-based DLP
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company allows employees to work from home using company-issued laptops. The security team wants to ensure that all remote traffic is encrypted and that only authenticated users can access internal resources. They also want to filter web traffic for malware before it reaches the internal network. Which solution should they implement?

   • ADeploy an IPsec VPN tunnel with pre-shared keys and configure the firewall to allow all outbound traffic.
   • BDeploy an SSL/TLS VPN portal that requires multi-factor authentication and route all remote traffic through a forward proxy with content filtering.
   • CDeploy a network access control (NAC) solution that checks device compliance but does not encrypt traffic.
   • DDeploy a remote desktop gateway without encryption and rely on the host-based firewall on each laptop.
   Reveal Solution Discussion Select an answer first