What is the primary purpose of analyzing network logs?

To identify signs of unauthorized access or malicious activity

A network architect is designing a defense-in-depth strategy for a company that hosts a web application. The application is accessible from the internet and connects to a backend database. Which of the following is the most effective layered defense approach?

Place both the web server and database in the same network segment to simplify management.

Place the web server in a DMZ, the database in the internal network, and use a firewall to allow only necessary traffic.

Use a single firewall to protect both the web server and database from the internet.

Implement strong authentication on the web application and rely on the database's built-in security.

A company's file server is infected with malware that encrypts files and displays a ransom note. The malware spread to other servers by copying itself to network shares and exploiting a known vulnerability in the SMB protocol. What type of malware is this, and what defense-in-depth measure would have been most effective in preventing the spread?

Trojan; implement application whitelisting on all servers.

Ransomware; patch the SMB vulnerability and restrict outbound SMB traffic.

Virus; enable the Windows firewall on all servers.

Worm; use endpoint detection and response (EDR) to quarantine the infected server.

What is a rogue access point?

An unauthorized wireless access point installed on a network without permission

A legitimate access point that is misconfigured

An access point that is used for load balancing

An access point that uses weak encryption

EC-CouncilCertified Network Defender

Domain 1Objective 1

Network Attacks and Defense Strategies CND Practice Questions (Page 4)

Part of the Network Security Fundamentals and Defense Strategy domain, which makes up ~16% of our current practice bank.

53questions here

11free pages

12concepts

Questions 16–20

16foundation · easy
What is the primary purpose of analyzing network logs?
Select an answer first
17application · medium
A network architect is designing a defense-in-depth strategy for a company that hosts a web application. The application is accessible from the internet and connects to a backend database. Which of the following is the most effective layered defense approach?
Select an answer first
18application · medium
A company's file server is infected with malware that encrypts files and displays a ransom note. The malware spread to other servers by copying itself to network shares and exploiting a known vulnerability in the SMB protocol. What type of malware is this, and what defense-in-depth measure would have been most effective in preventing the spread?
Select an answer first
19foundation · easy
Which social engineering technique involves an attacker pretending to be a legitimate person or entity to trick a victim into revealing sensitive information?
Select an answer first
20foundation · easy
What is a rogue access point?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Network Attacks and Defense Strategies CND Practice Questions (Page 4)

Questions 16–20

What is the primary purpose of analyzing network logs?

A network architect is designing a defense-in-depth strategy for a company that hosts a web application. The application is accessible from the internet and connects to a backend database. Which of the following is the most effective layered defense approach?

Which social engineering technique involves an attacker pretending to be a legitimate person or entity to trick a victim into revealing sensitive information?

What is a rogue access point?

Keep studying — Network Security Fundamentals and Defense Strategy