What is the primary difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

An IDS is deployed inline, while an IPS is deployed out-of-band

An IDS is a host-based system, while an IPS is a network-based system

An IDS is passive and only alerts, while an IPS is active and can block traffic

An IDS uses signature-based detection, while an IPS uses anomaly-based detection

What is a primary function of a proxy server in a network?

To act as an intermediary that filters requests and can provide caching

To encrypt all traffic between the client and the destination server

To monitor network traffic for intrusion attempts

To assign IP addresses to devices on the network

What is a Unified Threat Management (UTM) appliance?

A software tool that only manages security patches

A system that only monitors logs for security incidents

A network device that only provides VPN connectivity

A single device that combines multiple security functions such as firewall, IDS/IPS, and antivirus

A small business with limited IT staff wants a single security appliance that provides firewall, intrusion prevention, and web filtering for its internet connection. Which solution should be selected?

Separate firewall, IPS, and proxy server

A company has a mix of managed laptops and personal devices used by contractors. They need to provide secure remote access to internal applications. Managed laptops can have a VPN client installed, but personal devices cannot. The company also wants to enforce data loss prevention (DLP) on remote sessions. Which solution should be implemented?

Remote desktop gateway with DLP on the gateway

IPsec VPN for managed laptops and SSL VPN for personal devices, with DLP on the VPN gateway

SSL VPN for all devices with DLP on the endpoint

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 4

Network Security Controls - Technical Controls CCT Practice Questions (Page 3)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

52questions here

11free pages

14concepts

14 Concepts in This Objective

Technical Controls Overview
Access Control Mechanisms
Firewalls
Intrusion Detection and Prevention Systems
Virtual Private Networks
Network Segmentation
Network Access Control
Proxy Servers
Honeypots and Honeynets
Security Information and Event Management
Endpoint Security Controls
Wireless Security Controls
Data Loss Prevention
Unified Threat Management

Questions 11–15

11foundation · easy
What is the primary difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?
Select an answer first
12foundation · easy
What is a primary function of a proxy server in a network?
Select an answer first
13foundation · easy
What is a Unified Threat Management (UTM) appliance?
Select an answer first
14application · medium
A small business with limited IT staff wants a single security appliance that provides firewall, intrusion prevention, and web filtering for its internet connection. Which solution should be selected?
Select an answer first
15expert · hard
A company has a mix of managed laptops and personal devices used by contractors. They need to provide secure remote access to internal applications. Managed laptops can have a VPN client installed, but personal devices cannot. The company also wants to enforce data loss prevention (DLP) on remote sessions. Which solution should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.