Network Perimeter Security CND Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the first step in responding to a perimeter security incident?

   • AIdentify and confirm the incident through analysis of alerts and logs
   • BReboot all network devices to clear the issue
   • CNotify law enforcement immediately
   • DContain the incident to prevent further damage
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has a remote workforce that uses a VPN to access internal resources. The VPN is currently configured with pre-shared keys and password authentication. The security team wants to improve security without requiring users to install new software. Which change is most effective?

   • AKeep pre-shared keys but increase the key length.
   • BDisable the VPN and use a remote desktop gateway without encryption.
   • CRequire users to change their VPN passwords every 30 days.
   • DSwitch to certificate-based authentication for the VPN and require multi-factor authentication.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the main benefit of network segmentation in a perimeter security architecture?

   • AIt allows all devices to communicate freely without restrictions
   • BIt ensures that all traffic is encrypted
   • CIt eliminates the need for firewalls
   • DIt reduces the attack surface by limiting lateral movement within the network
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a remote-access VPN for employees. The VPN concentrator is behind the perimeter firewall. The security team wants to enforce a policy that only allows VPN traffic from employees who have completed a security awareness training. The VPN concentrator does not support integration with the training database. Which approach best meets the policy while maintaining security?

   • ACreate a firewall rule that allows VPN traffic only from source IP addresses of employees who have completed the training.
   • BPlace the VPN concentrator in the DMZ and allow all VPN traffic, relying on the VPN's internal authentication.
   • CUse a firewall rule to allow VPN traffic only during business hours, assuming trained employees are more likely to work then.
   • DConfigure the VPN to require a client certificate that is only issued to employees who have completed the training.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary difference between an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS)?

   • AAn IDS is a software solution, while an IPS is always a hardware appliance.
   • BAn IDS is placed inline and can block traffic, while an IPS only monitors traffic passively.
   • CAn IDS monitors traffic and alerts, while an IPS can actively block or drop malicious traffic.
   • DAn IDS encrypts traffic, while an IPS decrypts traffic for inspection.
   Reveal Solution Discussion Select an answer first