A company's disaster recovery plan specifies a recovery time objective (RTO) of 2 hours for its customer-facing web application. The application runs on virtual machines in a private cloud. The company has a secondary site with replicated VMs, but the secondary site has not been tested in over a year. The network administrator is asked to improve the plan. What is the most important action to take?

Purchase additional licenses for the virtualization platform to ensure capacity at the secondary site.

Update the disaster recovery documentation to reflect the current architecture.

Increase the frequency of backups to reduce the recovery point objective (RPO).

Conduct a full failover test to the secondary site and measure the actual recovery time.

A government agency requires that all network administrators use multi-factor authentication (MFA) when accessing network devices. The agency also requires that administrative actions be traceable to a specific individual. What additional control is necessary to meet the traceability requirement?

Require administrators to change their passwords every 90 days.

Use a shared administrative account with MFA to simplify management.

Implement a network access control (NAC) solution to restrict which devices can connect.

Assign a unique administrative account to each administrator and enable detailed logging of all administrative actions.

A network administrator needs to change the firewall rule set to allow a new vendor management tool to access an internal server. The change is urgent because the vendor contract starts tomorrow. What is the best practice before making the change?

Ask the vendor to provide a written request and then implement the change without internal review

Add the rule to the firewall and test it only after the vendor starts using the tool

Make the change immediately and document it after the fact to meet the deadline

Submit a change request that includes the business justification, risk assessment, rollback plan, and approval from the change advisory board

EC-CouncilCertified Network Defender

Domain 1Objective 2

Administrative Network Security CND Practice Questions (Page 2)

Part of the Network Security Fundamentals and Defense Strategy domain, which makes up ~16% of our current practice bank.

55questions here

11free pages

10concepts

Questions 6–10

6expert · hard
A company's disaster recovery plan specifies a recovery time objective (RTO) of 2 hours for its customer-facing web application. The application runs on virtual machines in a private cloud. The company has a secondary site with replicated VMs, but the secondary site has not been tested in over a year. The network administrator is asked to improve the plan. What is the most important action to take?
Select an answer first
7foundation · easy
In the AAA framework, which component is responsible for determining what a user is allowed to do after authentication?
Select an answer first
8application · medium
A government agency requires that all network administrators use multi-factor authentication (MFA) when accessing network devices. The agency also requires that administrative actions be traceable to a specific individual. What additional control is necessary to meet the traceability requirement?
Select an answer first
9foundation · easy
Which metric defines the maximum acceptable downtime after a disaster?
Select an answer first
10application · medium
A network administrator needs to change the firewall rule set to allow a new vendor management tool to access an internal server. The change is urgent because the vendor contract starts tomorrow. What is the best practice before making the change?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Administrative Network Security CND Practice Questions (Page 2)

Questions 6–10

In the AAA framework, which component is responsible for determining what a user is allowed to do after authentication?

A government agency requires that all network administrators use multi-factor authentication (MFA) when accessing network devices. The agency also requires that administrative actions be traceable to a specific individual. What additional control is necessary to meet the traceability requirement?

Which metric defines the maximum acceptable downtime after a disaster?

A network administrator needs to change the firewall rule set to allow a new vendor management tool to access an internal server. The change is urgent because the vendor contract starts tomorrow. What is the best practice before making the change?

Keep studying — Network Security Fundamentals and Defense Strategy