Network Security Controls - Technical Controls CCT Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A company wants to protect its internal web servers from external attacks while also hiding their IP addresses. Additionally, they want to cache static content to reduce server load. Which solution should be deployed?

   • AForward proxy with content filtering
   • BReverse proxy with caching and IP masking
   • CWeb application firewall (WAF) only
   • DNetwork-based IPS in inline mode
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which of the following is a common advantage of using a UTM appliance over separate security devices?

   • AComplete immunity to all types of attacks
   • BSimplified management and reduced complexity
   • CEliminates the need for network segmentation
   • DHigher performance than any dedicated security device
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A small company wants to replace its aging router-based ACLs with a device that can inspect the full TCP handshake, track connection state, and block traffic that matches known attack signatures. The company also wants to isolate its guest Wi-Fi from the internal network using VLANs. Which solution should the administrator choose?

   • ADeploy a packet-filtering firewall and rely on the router's existing ACLs to block guest traffic.
   • BDeploy an intrusion prevention system (IPS) inline and use MAC address filtering on the access points to isolate guest traffic.
   • CDeploy a stateful firewall at the perimeter and create a separate guest VLAN with an ACL blocking inter-VLAN traffic to the internal network.
   • DDeploy a proxy server at the perimeter and configure the guest Wi-Fi to use a different subnet without VLANs.
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which benefit does a caching proxy provide to a network?

   • AIt encrypts all traffic between clients and servers
   • BIt provides a backup of all network data
   • CIt blocks all malicious traffic before it reaches the network
   • DIt reduces bandwidth usage by serving repeated requests from local storage
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   What is the primary role of technical controls in a network security architecture?

   • ATo establish physical security perimeters around data centers
   • BTo define acceptable use policies for employees
   • CTo automatically enforce security policies and protect information systems
   • DTo provide a framework for risk assessment and management
   Reveal Solution Discussion Select an answer first