A technician is troubleshooting why a device with IPv6 address 2001:db8::1 cannot communicate with a device at 2001:db8::2 on the same link. Both devices show the same /64 prefix. Which configuration is most likely missing?

Duplicate Address Detection (DAD)

Neighbor Discovery Protocol (NDP) functioning

A network architect is designing a new data center and must support 500 servers. The architect wants to use IPv6 to simplify address management. Which IPv6 addressing approach would be most efficient for this environment?

Use stateless address autoconfiguration (SLAAC) for all servers.

Use static IPv6 addresses for each server.

Use link-local addresses for all server communication.

Use DHCPv6 to assign addresses from a managed scope.

A security analyst is investigating a potential malware infection on a user's computer. The analyst notices that the computer is sending encrypted traffic to an external IP address on port 443. Which action would best help the analyst determine if the traffic is malicious?

Ignore the traffic because it is encrypted and likely legitimate.

Disable the user's network connection.

Use a network forensics tool to capture and analyze the traffic, including TLS decryption if possible.

Block the external IP address immediately.

EC-CouncilCertified Cybersecurity Technician

Domain 1Objective 3

Network Security Fundamentals CCT Practice Questions (Page 5)

Part of the Information Security Threats and Attacks domain, which makes up ~12% of our current practice bank.

43questions here

9free pages

7concepts

Questions 21–25

21foundation · easy
Which network device is designed to filter incoming and outgoing traffic based on a set of security rules to protect a network from unauthorized access?
Select an answer first
22application · medium
A technician is troubleshooting why a device with IPv6 address 2001:db8::1 cannot communicate with a device at 2001:db8::2 on the same link. Both devices show the same /64 prefix. Which configuration is most likely missing?
Select an answer first
23expert · hard
A network architect is designing a new data center and must support 500 servers. The architect wants to use IPv6 to simplify address management. Which IPv6 addressing approach would be most efficient for this environment?
Select an answer first
24expert · hard
A security analyst is investigating a potential malware infection on a user's computer. The analyst notices that the computer is sending encrypted traffic to an external IP address on port 443. Which action would best help the analyst determine if the traffic is malicious?
Select an answer first
25application · easy
An employee receives an email that appears to be from the company's CEO, asking for a list of all employee passwords to be sent to a personal Gmail address. The email's 'From' field shows the CEO's name, but the reply-to address is different. Which type of attack is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Security Fundamentals CCT Practice Questions (Page 5)

Questions 21–25

Which network device is designed to filter incoming and outgoing traffic based on a set of security rules to protect a network from unauthorized access?

A technician is troubleshooting why a device with IPv6 address 2001:db8::1 cannot communicate with a device at 2001:db8::2 on the same link. Both devices show the same /64 prefix. Which configuration is most likely missing?

A network architect is designing a new data center and must support 500 servers. The architect wants to use IPv6 to simplify address management. Which IPv6 addressing approach would be most efficient for this environment?

A security analyst is investigating a potential malware infection on a user's computer. The analyst notices that the computer is sending encrypted traffic to an external IP address on port 443. Which action would best help the analyst determine if the traffic is malicious?

An employee receives an email that appears to be from the company's CEO, asking for a list of all employee passwords to be sent to a personal Gmail address. The email's 'From' field shows the CEO's name, but the reply-to address is different. Which type of attack is this?

Keep studying — Information Security Threats and Attacks