Administrative Network Security CND Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement best describes the role of administrative network security within a comprehensive network defense strategy?

   • AIt is the process of encrypting all network traffic to prevent unauthorized access.
   • BIt focuses solely on deploying firewalls and intrusion detection systems at the network perimeter.
   • CIt refers exclusively to the physical security of network devices and data centers.
   • DIt involves the policies, procedures, and management practices that govern how network resources are secured and administered.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital's network team is implementing role-based access control (RBAC) for its electronic health record (EHR) system. The compliance officer requires that nurses can view patient records but cannot modify them, while physicians can both view and modify records for their own patients. The system currently uses a single shared admin account for all staff. What is the most effective first step to meet the requirement?

   • AKeep the shared admin account but add a password policy that requires a complex password and rotation every 30 days.
   • BImplement single sign-on (SSO) for all staff but keep the shared admin account for system administration.
   • CConfigure the EHR system to allow all users to modify records, then rely on audit logs to detect unauthorized changes.
   • DCreate individual user accounts for each staff member and assign them to role-based groups with least-privilege permissions.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company runs a legacy SCADA system that controls its production line. The vendor has released a critical security patch, but the patch is known to cause intermittent communication failures with older programmable logic controllers (PLCs). The plant cannot afford unplanned downtime. What is the best approach for the network administrator?

   • AApply the patch only to the IT network servers and leave the SCADA network unpatched.
   • BDo not apply the patch and instead increase firewall monitoring around the SCADA network.
   • CApply the patch immediately to all PLCs to eliminate the vulnerability as quickly as possible.
   • DTest the patch in a lab that mirrors the production environment, then schedule a maintenance window to apply it with a rollback plan.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's disaster recovery plan requires that critical network configurations be restored within four hours of a disaster. The administrator is updating the plan. What is the most important action to ensure this recovery time objective (RTO) is met?

   • ADocument the configurations in a spreadsheet and keep it on the administrator's desk
   • BRely on the vendor's support team to reconfigure the devices from scratch
   • CMaintain versioned backups of all network device configurations in a secure, off-site location and test restoration procedures regularly
   • DStore configuration backups on the same server as the network management console for easy access
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a vulnerability management program that scans all systems monthly. A critical vulnerability is discovered on a database server that is part of a cluster. The vendor has released a patch, but the patch requires a reboot and the database cluster cannot be rebooted all at once. What is the best approach to patch the cluster?

   • APatch all servers simultaneously to minimize the time the vulnerability is exposed.
   • BDo not patch the cluster and instead increase monitoring to detect exploitation.
   • CPatch the cluster during a scheduled maintenance window that allows a full outage.
   • DPatch the database servers one at a time, failing over each node to maintain availability.
   Reveal Solution Discussion Select an answer first