Network Attacks and Defense Strategies CND Practice Questions (Page 6)

Questions 26–30

1. 26expert · medium

   A company wants to protect its internal network from external attacks while also allowing remote employees to access internal resources securely. The network defender is considering a layered defense strategy. Which combination of controls would provide the most comprehensive protection?

   • AVPN and network segmentation only
   • BIDS/IPS and antivirus only
   • CFirewall and antivirus only
   • DFirewall, VPN, and IDS/IPS
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is implementing network segmentation to protect its payment card data. The payment processing systems are in a separate VLAN from the general user network. Which additional control is most important to enforce the segmentation?

   • AConfigure a firewall between the VLANs to allow only necessary traffic.
   • BImplement 802.1X authentication on the access ports.
   • CUse a single switch for both VLANs to reduce cost.
   • DEnable port security on the switch ports.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company has implemented multi-factor authentication (MFA) for all remote access. An attacker has compromised a user's credentials and is attempting to log in. The attacker is using a phishing site that captures the user's password and the MFA code in real time. What type of attack is this, and what is the most effective defense?

   • AMan-in-the-middle attack; use phishing-resistant MFA such as FIDO2 security keys.
   • BSocial engineering attack; provide security awareness training to users.
   • CPassword spraying attack; enforce a longer password policy.
   • DCredential stuffing attack; implement account lockout policies.
   Reveal Solution Discussion Select an answer first
5. 29expert · medium

   A network defender is troubleshooting a wireless network issue. Users report that they can connect to the Wi-Fi but cannot access the internet. The defender discovers that the DHCP server is not assigning IP addresses correctly. Upon further investigation, the defender finds that a rogue DHCP server is responding to DHCP requests before the legitimate server. Which type of attack is this?

   • AARP poisoning
   • BDHCP spoofing
   • CDNS poisoning
   • DEvil twin attack
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   How can social engineering be used to facilitate a network attack?

   • ABy sending a large volume of traffic to overwhelm a server
   • BBy tricking an employee into revealing their credentials, which are then used to access the network
   • CBy intercepting network traffic with a rogue access point
   • DBy exploiting a software vulnerability in a web application
   Reveal Solution Discussion Select an answer first