Administrative Network Security CND Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A network administrator detects unusual outbound traffic from a server that is not supposed to communicate externally. The traffic pattern suggests a possible data exfiltration. What is the first step in the incident response process?

   • ANotify the public about the potential data breach
   • BDelete the server's logs to prevent the attacker from covering their tracks
   • CImmediately shut down the server and reimage it from a known good backup
   • DContain the incident by isolating the affected server from the network while preserving evidence
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which topic is most appropriate for a general security awareness training session?

   • AConfiguring VLANs on enterprise switches
   • BPerforming forensic analysis of compromised systems
   • CRecognizing phishing emails and reporting them
   • DWriting custom intrusion detection signatures
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of a standard operating procedure (SOP) in network administration?

   • ATo outline the company's mission and vision statements
   • BTo provide step-by-step instructions for performing routine tasks consistently and securely
   • CTo list all network hardware and software inventory
   • DTo define the organizational hierarchy and reporting lines
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is subject to both GDPR and PCI DSS. The security team is planning an audit of user access rights. GDPR requires data minimization, while PCI DSS requires strict access control for cardholder data. The company has a single user directory for all employees. What is the best approach to satisfy both requirements?

   • AImplement role-based access control (RBAC) that separates cardholder data access from general data access and conduct regular access reviews
   • BDelete all user accounts and recreate them annually to ensure compliance
   • CConduct access reviews only for employees who handle cardholder data
   • DGive all employees access to cardholder data to simplify management
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A small business runs a legacy file server that is no longer supported by the vendor. The administrator must decide whether to keep it running. The server is used daily by the accounting team, and the business cannot afford a replacement this quarter. What is the most appropriate risk management action?

   • ATransfer the risk by purchasing a cyber insurance policy that covers data loss from the server
   • BAvoid the risk by immediately disconnecting the server from the network
   • CAccept the risk and document the decision, then implement compensating controls such as strict access restrictions and enhanced monitoring
   • DMitigate the risk by applying an unofficial patch downloaded from a third-party website
   Reveal Solution Discussion Select an answer first