Network Perimeter Security CND Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which technology is specifically designed to create a secure, encrypted tunnel for data transmitted over an untrusted network?

   • AFirewall
   • BVirtual Private Network (VPN)
   • CNetwork Access Control (NAC)
   • DIntrusion Detection System (IDS)
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company wants to allow a remote employee to access the internal network securely. The employee's laptop is company-managed and has a certificate installed. The security team wants to ensure that only this laptop can connect and that all traffic is encrypted. Which solution is most appropriate?

   • AConfigure a remote-access VPN that requires the laptop's certificate for authentication and uses IPsec or SSL/TLS for encryption.
   • BExpose the internal file server directly to the internet and require a username and password.
   • CCreate a site-to-site VPN between the employee's home router and the company network.
   • DAllow the employee to use a web-based remote desktop tool without additional controls.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network administrator notices a sudden spike in outbound traffic from an internal workstation to an external IP on port 4444. The firewall logs show the connection was initiated from the workstation. The IDS has not raised an alert. What should be the administrator's first response?

   • ABlock the external IP at the firewall and continue normal operations.
   • BReboot the workstation to clear any temporary network issues.
   • CIgnore the traffic because the IDS did not alert.
   • DIsolate the workstation from the network and investigate the process that initiated the connection.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security analyst is investigating a potential breach. The firewall logs show that an internal host made outbound connections to a known malicious IP address on port 443. The IDS did not generate an alert for these connections. What is the most likely reason the IDS did not alert?

   • AThe IDS signature for the malicious IP was disabled.
   • BThe IDS was overloaded and dropped the packets.
   • CThe IDS was configured to monitor only inbound traffic.
   • DThe IDS was in passive mode and only logged alerts without notifying the analyst.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An organization deploys an IDS at the perimeter. The security team wants to detect both known attack patterns and anomalous behavior that may indicate zero-day exploits. Which configuration best achieves this?

   • ADisable the IDS and rely on firewall logs for analysis.
   • BUse only signature-based detection with a regularly updated signature database.
   • CEnable signature-based detection and configure anomaly-based detection with a baseline of normal traffic.
   • DUse only anomaly-based detection with a static baseline.
   Reveal Solution Discussion Select an answer first