Administrative Network Security CND Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization wants to enforce least privilege for its network administrators. Currently, all admins have full administrative rights on all servers. The security team wants to ensure that each admin can only perform tasks required for their role, and that all privileged actions are logged. Which control should be implemented?

   • AGrant all admins full rights but require them to sign a confidentiality agreement
   • BDisable all administrative accounts and use standard user accounts for all tasks
   • CUse the same admin account for all administrators to simplify management and reduce confusion
   • DImplement role-based access control (RBAC) with separate admin roles and require privileged access management (PAM) for elevated tasks
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial institution must comply with a regulation that requires periodic reviews of user access rights. The internal audit team is preparing for an external audit. What should the network administrator provide to demonstrate compliance?

   • ALogs of user access reviews, including who performed the review, the date, and any changes made
   • BA list of all user accounts and their passwords to show they are strong
   • CThe network diagram showing the physical location of servers
   • DA verbal assurance that access rights are reviewed annually
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial services company must comply with PCI DSS. An internal audit reveals that network device configurations are not reviewed on a regular basis, and there is no documented process for reviewing firewall rule changes. What should the company implement to meet the compliance requirement?

   • AConduct a one-time security audit of all network devices and fix any issues found.
   • BRestrict access to network device management interfaces to only the network administrator.
   • CImplement an automated configuration backup system that stores copies of all device configs.
   • DEstablish a quarterly review process for firewall and router configurations, with documented sign-off by management.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A network administrator at a financial firm is about to implement a major change to the core router's access control list (ACL). The change is intended to block traffic from a compromised subnet. The change has been approved, but the administrator is concerned about accidentally locking out legitimate users. What is the most prudent step to take before applying the change?

   • AInform the help desk about the change so they can handle user complaints.
   • BApply the change immediately to stop the compromised subnet as soon as possible.
   • CCreate a backup of the current configuration and schedule the change during a maintenance window with a rollback plan.
   • DTest the ACL change on a lab router that has the same configuration as the production router.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which document should be maintained to track the approved baseline configuration of a network switch?

   • AConfiguration management database (CMDB)
   • BUser access review report
   • CIncident response log
   • DNetwork traffic capture file
   Reveal Solution Discussion Select an answer first