Administrative Network Security CND Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which AAA component is primarily responsible for logging user activities for audit and billing purposes?

   • AAccounting
   • BAuthorization
   • CAuthentication
   • DIdentification
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A hospital network administrator is updating the security policy to require that all remote clinicians authenticate with a one-time passcode from a hardware token in addition to their username and password. The policy must also specify how the tokens are issued, revoked, and audited. Which policy component is the administrator primarily defining?

   • AA patch management schedule that ensures the token validation server is updated monthly
   • BAn access control standard that specifies the authentication mechanism and lifecycle of credentials
   • CA network segmentation rule that isolates the remote access VLAN from the hospital's internal network
   • DA data classification scheme that labels the patient data accessed by remote clinicians
   Reveal Solution Discussion Select an answer first
4. 28application · easy

   A new network administrator is joining a team that manages a corporate network. The administrator is asked to review the administrative controls that are in place. Which of the following is an example of an administrative control?

   • AA firewall rule that blocks all inbound traffic from unknown IP addresses
   • BA biometric scanner used to authenticate users at the data center entrance
   • CAn intrusion detection system that alerts on suspicious traffic patterns
   • DA policy that requires all network administrators to use individual accounts and change passwords every 90 days
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A multinational company is implementing a new access control system. The security team must ensure that user access rights are reviewed quarterly, but the company also wants to minimize administrative overhead. The current process requires each manager to manually review a spreadsheet of user permissions. Which approach best meets both the compliance requirement and the operational efficiency goal?

   • AContinue using the spreadsheet but ask managers to review it more frequently
   • BGive all employees the same access level to simplify the review process
   • CEliminate quarterly reviews and rely on the initial background checks of employees
   • DImplement an identity governance and administration (IGA) tool that automates access reviews and generates audit reports
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is evaluating its risk management process. The company has identified that a legacy application cannot be patched because the vendor no longer supports it. The application is critical to operations and is accessible from the internal network. The company has decided to accept the risk. What is the most important additional step to take?

   • AImplement compensating controls, such as network segmentation and strict access controls, to reduce the likelihood of exploitation.
   • BDisconnect the application from the network to eliminate the risk.
   • CDocument the decision to accept the risk and do nothing else.
   • DReplace the legacy application immediately with a modern alternative.
   Reveal Solution Discussion Select an answer first