Network Security Fundamentals CCT Practice Questions (Page 9)

Questions 41–43

1. 41expert · hard

   A financial institution must comply with regulations requiring that customer data be stored separately from general corporate data. The network team has a single /22 subnet and must create at least four isolated segments. They also need to maintain high availability for the customer-facing application. Which approach best satisfies both requirements?

   • ADeploy a separate physical network for customer data
   • BUse one large VLAN and rely on host-based firewalls on each server
   • CCreate two /23 VLANs and use ACLs on the core switch
   • DCreate four /24 VLANs and place a stateful firewall between each VLAN
   Reveal Solution Discussion Select an answer first
2. 42application · easy

   A company is deploying a new application that must be accessible from the internet on port 443. The application server is on a private IP address. Which device should be configured to translate the public IP to the private IP and forward the traffic?

   • AA network hub
   • BA wireless access point
   • CA router with NAT
   • DA Layer 2 switch
   Reveal Solution Discussion Select an answer first
3. 43expert · hard

   A company is deploying a new IoT sensor network. The sensors are on a separate VLAN and must only communicate with a central management server. The management server is on a different VLAN. The administrator wants to ensure that even if a sensor is compromised, it cannot be used to scan or attack other internal systems. Which control is most effective?

   • AAssign static IP addresses to all sensors
   • BPlace a stateful firewall between the IoT VLAN and the rest of the network, allowing only the sensor-to-management-server traffic
   • CUse MAC address filtering on the switch ports for the sensors
   • DEnable SNMP on the sensors for monitoring
   Reveal Solution Discussion Select an answer first