Network Perimeter Security CND Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a common method used by an Intrusion Detection System (IDS) to detect malicious activity?

   • AHashing all files on the network to detect changes
   • BBlocking all inbound traffic by default
   • CSignature-based detection, which compares traffic patterns against known attack signatures
   • DEncrypting all network traffic to prevent attacks
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement best defines the role of network perimeter security in an organization?

   • AIt ensures that all data stored on internal servers is encrypted at rest.
   • BIt focuses solely on protecting the internal network from malware infections on endpoint devices.
   • CIt primarily manages user authentication and authorization for accessing internal applications.
   • DIt establishes a boundary between the trusted internal network and untrusted external networks, controlling traffic that crosses that boundary.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of the 'default deny' rule in firewall configuration?

   • ATo block all traffic that is not explicitly permitted by a rule
   • BTo allow all traffic by default and then block specific malicious IP addresses
   • CTo log all denied traffic for auditing purposes only
   • DTo deny traffic only from external networks while allowing all internal traffic
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company wants to provide remote employees with secure access to internal applications. The security team requires that all remote access traffic be encrypted and that remote users be authenticated using multi-factor authentication (MFA). Which solution should be implemented?

   • AAllow remote users to connect using telnet and a shared secret.
   • BUse a site-to-site VPN between the company and each remote employee's home network.
   • CSet up a remote-access VPN with IPsec or SSL/TLS and integrate it with an MFA system.
   • DExpose the internal applications directly to the internet and rely on strong passwords.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst is reviewing firewall logs and notices a large number of outbound connections from an internal workstation to an external IP address on port 6667 (IRC). The workstation has no business need to use IRC. What should the analyst do?

   • AAllow the traffic because the firewall has not blocked it and the workstation may be compromised.
   • BIgnore the traffic because IRC is a common protocol and may be used for legitimate purposes.
   • CDisable the workstation's network port to prevent all communication.
   • DBlock outbound traffic to that specific external IP address on port 6667 and investigate the workstation for malware.
   Reveal Solution Discussion Select an answer first