Administrative Network Security CND Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   In a defense-in-depth strategy, which activity is an example of an administrative control?

   • AEnforcing a password policy that requires 12-character complex passwords
   • BInstalling a network intrusion detection system
   • CConfiguring an access control list on a router
   • DEncrypting data in transit using TLS
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   Which document should be updated to reflect a new legal requirement that all network administrators must use multi-factor authentication?

   • AThe incident response plan
   • BThe network topology diagram
   • CThe hardware maintenance log
   • DThe security policy
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   Why is it important to document and report security incidents?

   • ATo provide a record for legal, regulatory, and improvement purposes
   • BTo assign blame to specific employees
   • CTo satisfy the curiosity of external auditors
   • DTo increase the workload of the IT department
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A mid-sized company is conducting a risk assessment for its network. The assessment identifies that the company's web server runs an outdated version of Apache with known vulnerabilities. The server is internet-facing and critical to business operations. What is the most appropriate risk treatment decision?

   • APurchase cyber insurance to cover potential losses from a breach.
   • BAccept the risk because the server is critical and cannot be taken offline.
   • CApply the vendor-recommended patches during the next scheduled maintenance window.
   • DMove the web server to a different network segment without patching.
   Reveal Solution Discussion Select an answer first
6. 55application · medium

   A retail company has experienced multiple phishing incidents where employees clicked on malicious links in email. The security team wants to reduce the likelihood of successful phishing. Which approach is most effective as part of a security awareness program?

   • AImplement a technical email filter that blocks all suspected phishing emails.
   • BRequire all employees to change their passwords every 30 days.
   • CConduct regular simulated phishing campaigns and provide immediate, targeted training to employees who fail.
   • DSend a monthly email newsletter that describes common phishing techniques.
   Reveal Solution Discussion Select an answer first