Elements of Information Security CEH Practice Questions (Page 12)

Questions 56–57

1. 56expert · hard

   A financial institution is designing a new online banking system. They must ensure that customer account balances are accurate, that transactions cannot be intercepted, and that the system is available during business hours. They also need to prove that a customer authorized a specific transfer. Which set of controls addresses all four requirements?

   • AUse strong passwords, two-factor authentication, and account lockout policies
   • BUse TLS for data in transit, database checksums, redundant servers, and digital signatures on transactions
   • CUse a firewall, antivirus software, and a VPN
   • DUse data encryption at rest, regular backups, and an intrusion detection system
   Reveal Solution Discussion Select an answer first
2. 57expert · hard

   A remote workforce uses a VPN to access internal resources. The company wants to ensure that only authorized employees can connect, but employees complain that the VPN is slow and requires frequent re-authentication. The security team must balance confidentiality with usability. Which approach best meets both goals?

   • AImplement certificate-based authentication with a persistent VPN session
   • BUse a shared VPN account for all employees
   • CRequire a one-time password (OTP) for every VPN connection
   • DDisable the VPN and rely on the public internet
   Reveal Solution Discussion Select an answer first