Administrative Network Security CND Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A network administrator is implementing AAA (authentication, authorization, and accounting) for network device access. The company requires that administrators use individual accounts and that all commands entered on network devices be logged. The administrator is considering using RADIUS or TACACS+. Which protocol is more appropriate for this requirement?

   • AUse local authentication on each device to avoid the complexity of a central server.
   • BEither protocol because both provide the same level of command logging.
   • CRADIUS because it is more widely supported and encrypts the entire packet.
   • DTACACS+ because it provides per-command authorization and detailed accounting of commands.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   In risk management, what does the term 'risk' represent?

   • AThe total number of security controls implemented in the network
   • BThe cost of purchasing new security software
   • CThe likelihood that a threat will exploit a vulnerability, combined with the potential impact
   • DThe process of identifying all network assets
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   What is the purpose of change management in network administration?

   • ATo ensure that all changes to network devices are approved, tested, and documented
   • BTo automatically apply all configuration updates without human review
   • CTo replace network administrators with automated tools
   • DTo monitor network performance in real time
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   Which activity is a key first step in a systematic vulnerability management process?

   • ADisabling all network services to prevent attacks
   • BInventorying all network assets and software
   • CPurchasing the most expensive security software
   • DImmediately applying all available patches without testing
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A regional bank is updating its administrative network security program. The compliance team has flagged that the current policy set does not clearly define who may approve temporary emergency access to the core banking switch, nor does it specify how such access must be logged and reviewed. The bank's risk assessment shows that unauthorized configuration changes are a top threat. What should the network administrator do first to address this gap?

   • ADraft a standard operating procedure (SOP) for emergency access that names the approving role, mandates immediate logging, and requires a post-incident review within 72 hours.
   • BAdd a rule to the firewall that blocks all remote access to the switch management interface.
   • CConduct a full security audit of the switch configuration before making any policy changes.
   • DImmediately disable all administrative accounts on the core switch until a new policy is written.
   Reveal Solution Discussion Select an answer first