Administrative Network Security CND Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A company's business continuity plan requires that the network be available within two hours of a disaster. The current backup strategy stores configuration backups on a local server in the same building. The administrator is reviewing the plan. What is the most critical improvement to meet the recovery time objective (RTO)?

   • APurchase a second server and keep it in the same building as a backup
   • BIncrease the frequency of local backups to every hour
   • CStore configuration backups off-site and test the restoration process regularly
   • DDocument the restoration steps in a manual and keep it on the administrator's desk
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the purpose of a security audit?

   • ATo replace the need for continuous monitoring
   • BTo verify that security controls and procedures are implemented correctly and effectively
   • CTo guarantee that no security breaches will occur
   • DTo design new security policies from scratch
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the primary objective of a security awareness program?

   • ATo replace technical security controls with user vigilance
   • BTo train employees to identify and avoid behaviors that could compromise network security
   • CTo certify employees as security professionals
   • DTo provide detailed technical training on firewall configuration
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company is updating its security policies. The current policy states that employees must report security incidents to the IT help desk within 24 hours. However, a recent incident showed that employees did not report a phishing email because they were unsure if it was a real incident. The security team wants to improve incident reporting. What is the best policy change to make?

   • AProvide a list of specific indicators of compromise and only require reporting if those indicators are present.
   • BClarify the policy to state that any suspicious activity should be reported immediately, even if it turns out to be a false alarm.
   • CRequire employees to confirm with their supervisor before reporting to the help desk.
   • DIncrease the reporting time window to 72 hours to give employees more time to decide.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A logistics company's network operations center (NOC) is located in a region prone to hurricanes. The company's business continuity plan requires that the network can be restored within 4 hours of a disaster. The current backup site is 500 miles away and has limited network capacity. What is the most important consideration when updating the disaster recovery plan?

   • ADocument the disaster recovery plan but do not test it to avoid disrupting operations.
   • BPurchase additional backup tapes and store them at the primary site.
   • CFocus on restoring the primary site as quickly as possible after the hurricane.
   • DEnsure that the backup site has sufficient bandwidth and that failover procedures are tested regularly.
   Reveal Solution Discussion Select an answer first