An organization wants to protect its Windows workstations from malware and also prevent unauthorized applications from making outbound connections. They also want to ensure that only company-managed devices can connect to the network. Which combination of endpoint and network controls should they deploy?

Deploy a proxy server and require users to authenticate before internet access.

Install antivirus software only and rely on the perimeter firewall to block outbound connections.

Install EDR agents on workstations, enable the host-based firewall with outbound rules, and deploy NAC to verify device compliance.

Deploy a network-based IPS and use MAC address filtering on the switch ports.

What is the primary purpose of Network Access Control (NAC)?

To enforce security policies on devices before they are granted network access

To provide secure remote access for telecommuters

To encrypt all network traffic between devices

To monitor and log all network activity for forensic analysis

Which endpoint security control is specifically designed to detect and respond to advanced threats by continuously monitoring endpoint activity and using behavioral analysis?

Endpoint Detection and Response (EDR)

A university wants to separate student dormitory traffic from administrative systems. They also want to enforce that only devices with up-to-date antivirus can access the network. Which combination of controls should they implement?

Deploy a single flat network and use MAC address filtering on the switches.

Create VLANs for dormitories and administration, and deploy a NAC solution that checks antivirus status before granting access.

Use separate subnets without VLANs and rely on a host-based firewall on each administrative computer.

Implement a stateful firewall between the dormitories and administration, but do not check device health.

A data center hosts multiple tenants on shared infrastructure. Each tenant must be isolated from others at the network layer, and the security team wants to enforce micro-segmentation to limit lateral movement. The solution must work across multiple physical hosts. Which control should be used?

Software-defined networking (SDN) with micro-segmentation

Host-based firewalls on each VM

Network access control (NAC) with 802.1X

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 4

Network Security Controls - Technical Controls CCT Practice Questions (Page 7)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

52questions here

11free pages

14concepts

14 Concepts in This Objective

Technical Controls Overview
Access Control Mechanisms
Firewalls
Intrusion Detection and Prevention Systems
Virtual Private Networks
Network Segmentation
Network Access Control
Proxy Servers
Honeypots and Honeynets
Security Information and Event Management
Endpoint Security Controls
Wireless Security Controls
Data Loss Prevention
Unified Threat Management

Questions 31–35

31application · medium
An organization wants to protect its Windows workstations from malware and also prevent unauthorized applications from making outbound connections. They also want to ensure that only company-managed devices can connect to the network. Which combination of endpoint and network controls should they deploy?
Select an answer first
32foundation · easy
What is the primary purpose of Network Access Control (NAC)?
Select an answer first
33foundation · easy
Which endpoint security control is specifically designed to detect and respond to advanced threats by continuously monitoring endpoint activity and using behavioral analysis?
Select an answer first
34application · medium
A university wants to separate student dormitory traffic from administrative systems. They also want to enforce that only devices with up-to-date antivirus can access the network. Which combination of controls should they implement?
Select an answer first
35expert · hard
A data center hosts multiple tenants on shared infrastructure. Each tenant must be isolated from others at the network layer, and the security team wants to enforce micro-segmentation to limit lateral movement. The solution must work across multiple physical hosts. Which control should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.