A company wants to centralize log collection from firewalls, servers, and endpoint detection and response (EDR) tools to detect suspicious activity across the network. They also want to generate alerts when multiple failed logins occur across different systems. Which solution should they implement?

Deploy an IDS that monitors network traffic and generates alerts based on signatures.

Deploy a UTM appliance that combines firewall and antivirus functions.

Deploy a separate log server for each system and review them manually.

Deploy a SIEM platform that ingests logs from all sources and uses correlation rules to generate alerts.

What is the primary purpose of a honeypot in network security?

To block all incoming malicious traffic

To attract attackers and study their behavior

To encrypt sensitive data at rest

To provide redundant network connectivity

A company wants to prevent employees from uploading sensitive files to personal cloud storage while also improving web performance through caching. Which solution should be deployed?

Forward proxy with content filtering and caching

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 4

Network Security Controls - Technical Controls CCT Practice Questions (Page 9)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

52questions here

11free pages

14concepts

14 Concepts in This Objective

Technical Controls Overview
Access Control Mechanisms
Firewalls
Intrusion Detection and Prevention Systems
Virtual Private Networks
Network Segmentation
Network Access Control
Proxy Servers
Honeypots and Honeynets
Security Information and Event Management
Endpoint Security Controls
Wireless Security Controls
Data Loss Prevention
Unified Threat Management

Questions 41–45

41application · medium
A company wants to centralize log collection from firewalls, servers, and endpoint detection and response (EDR) tools to detect suspicious activity across the network. They also want to generate alerts when multiple failed logins occur across different systems. Which solution should they implement?
Select an answer first
42foundation · easy
What is the primary purpose of a honeypot in network security?
Select an answer first
43foundation · easy
Which NAC deployment mode actively blocks or quarantines non-compliant devices by being placed inline in the network path?
Select an answer first
44application · medium
A company wants to prevent employees from uploading sensitive files to personal cloud storage while also improving web performance through caching. Which solution should be deployed?
Select an answer first
45foundation · easy
Which detection method used by IDS/IPS relies on comparing current traffic patterns against a baseline of normal behavior?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Security Controls - Technical Controls CCT Practice Questions (Page 9)

Questions 41–45

A company wants to centralize log collection from firewalls, servers, and endpoint detection and response (EDR) tools to detect suspicious activity across the network. They also want to generate alerts when multiple failed logins occur across different systems. Which solution should they implement?

What is the primary purpose of a honeypot in network security?

Which NAC deployment mode actively blocks or quarantines non-compliant devices by being placed inline in the network path?

A company wants to prevent employees from uploading sensitive files to personal cloud storage while also improving web performance through caching. Which solution should be deployed?

Which detection method used by IDS/IPS relies on comparing current traffic patterns against a baseline of normal behavior?

Keep studying — Identity and Network Security Controls