What is the primary purpose of Data Loss Prevention (DLP) technologies?

To manage user access permissions to files

To encrypt all data stored on endpoints

To provide backup and recovery of critical data

To detect and block unauthorized attempts to transmit sensitive data outside the organization

A company is implementing a remote access solution for contractors. Requirements: (1) contractors must authenticate using a one-time password (OTP) token, (2) their devices must be checked for compliance before accessing the internal network, and (3) the solution must work over the internet without dedicated leased lines. Which combination of controls should be used?

NAC with MAC authentication bypass

SSL VPN with OTP authentication and NAC posture check

Remote desktop gateway with OTP and host-based firewall

Site-to-site IPsec VPN with certificate authentication

A security analyst needs to detect and block malicious traffic in real time. The solution must be able to drop packets that match known attack signatures and also send alerts to a central log management system. Which control should be implemented?

Network-based intrusion detection system (IDS)

Network-based intrusion prevention system (IPS)

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 4

Network Security Controls - Technical Controls CCT Practice Questions (Page 4)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

52questions here

11free pages

14concepts

14 Concepts in This Objective

Technical Controls Overview
Access Control Mechanisms
Firewalls
Intrusion Detection and Prevention Systems
Virtual Private Networks
Network Segmentation
Network Access Control
Proxy Servers
Honeypots and Honeynets
Security Information and Event Management
Endpoint Security Controls
Wireless Security Controls
Data Loss Prevention
Unified Threat Management

Questions 16–20

16foundation · easy
What is the primary purpose of Data Loss Prevention (DLP) technologies?
Select an answer first
17application · medium
A small office wants to secure its Wi-Fi network. They need strong encryption and per-user authentication, and they want to avoid the overhead of a RADIUS server. Which wireless security control should be used?
Select an answer first
18expert · hard
A company is implementing a remote access solution for contractors. Requirements: (1) contractors must authenticate using a one-time password (OTP) token, (2) their devices must be checked for compliance before accessing the internal network, and (3) the solution must work over the internet without dedicated leased lines. Which combination of controls should be used?
Select an answer first
19application · medium
A security analyst needs to detect and block malicious traffic in real time. The solution must be able to drop packets that match known attack signatures and also send alerts to a central log management system. Which control should be implemented?
Select an answer first
20foundation · easy
Which type of firewall inspects packets based solely on source and destination IP addresses, ports, and protocols without considering the state of the connection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Security Controls - Technical Controls CCT Practice Questions (Page 4)

Questions 16–20

What is the primary purpose of Data Loss Prevention (DLP) technologies?

A small office wants to secure its Wi-Fi network. They need strong encryption and per-user authentication, and they want to avoid the overhead of a RADIUS server. Which wireless security control should be used?

A security analyst needs to detect and block malicious traffic in real time. The solution must be able to drop packets that match known attack signatures and also send alerts to a central log management system. Which control should be implemented?

Which type of firewall inspects packets based solely on source and destination IP addresses, ports, and protocols without considering the state of the connection?

Keep studying — Identity and Network Security Controls