Which security control is specifically designed to inspect network traffic for malicious patterns and take action to block or alert on suspicious activity?

Intrusion Prevention System (IPS)

Intrusion Detection System (IDS)

A company runs a multi-tier web application on VMware ESXi. The web tier, application tier, and database tier are all on the same virtual switch and VLAN. After a breach of the web server, attackers pivoted to the database. Which change should the network defender implement FIRST to reduce the blast radius of a similar future breach?

Create separate port groups on the virtual switch for each tier and apply firewall rules between them.

Move the database to a different physical host.

Enable promiscuous mode on the virtual switch to monitor all traffic.

Install a host-based intrusion detection system on the database server.

A network defender is reviewing the security of a virtual network and discovers that the management interface of the hypervisor is accessible from the same network segment as the VMs. Which threat does this configuration increase?

The hypervisor will automatically block all traffic from VMs.

VMs will be unable to communicate with each other due to network isolation.

An attacker who compromises a VM could attempt to access the hypervisor management interface and take control of the host.

The virtual network will be unable to route traffic to the internet.

What is the primary purpose of network segmentation in a virtual environment?

To allow all virtual machines to communicate freely without any restrictions.

To reduce the number of virtual switches needed in the environment.

To increase the speed of the virtual network by reducing the number of packets.

To isolate different workloads and limit the spread of attacks.

A network defender is investigating a suspected data exfiltration from a VM in a virtual network. The defender needs to determine whether large amounts of data were transferred to an external IP address. Which data source would provide the most useful evidence?

Netflow or flow logs that record bytes transferred per connection.

Hypervisor CPU utilization logs.

EC-CouncilCertified Network Defender

Domain 4Objective 1

Enterprise Virtual Network Security CND Practice Questions (Page 1)

Part of the Virtual, Cloud and Wireless Network Security domain, which makes up ~13% of our current practice bank.

41questions here

9free pages

5concepts

Questions 1–5

1foundation · easy
Which security control is specifically designed to inspect network traffic for malicious patterns and take action to block or alert on suspicious activity?
Select an answer first
2application · medium
A company runs a multi-tier web application on VMware ESXi. The web tier, application tier, and database tier are all on the same virtual switch and VLAN. After a breach of the web server, attackers pivoted to the database. Which change should the network defender implement FIRST to reduce the blast radius of a similar future breach?
Select an answer first
3application · medium
A network defender is reviewing the security of a virtual network and discovers that the management interface of the hypervisor is accessible from the same network segment as the VMs. Which threat does this configuration increase?
Select an answer first
4foundation · easy
What is the primary purpose of network segmentation in a virtual environment?
Select an answer first
5application · medium
A network defender is investigating a suspected data exfiltration from a VM in a virtual network. The defender needs to determine whether large amounts of data were transferred to an external IP address. Which data source would provide the most useful evidence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.