Network Perimeter Security CND Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company allows employees to work from home. They must access internal applications securely. The current VPN uses PPTP, which the security team considers weak. The company wants to enforce stronger authentication and encryption without replacing the VPN concentrator. What should they implement?

   • AKeep PPTP but require users to change passwords every 30 days.
   • BConfigure the VPN to use IPsec with certificate-based authentication and AES encryption.
   • CDisable the VPN and rely on a public cloud file-sharing service.
   • DUse SSL VPN through a web portal with only username and password.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a primary source of data for monitoring perimeter security events?

   • ABuilding access control logs
   • BEmployee performance reviews
   • CMarketing analytics reports
   • DFirewall logs
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of a remote access policy in the context of VPN security?

   • ATo encrypt all data stored on remote user devices
   • BTo block all remote access to the corporate network
   • CTo manage the physical security of remote user devices
   • DTo define the rules and conditions under which remote users are allowed to connect to the corporate network
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A network defender is reviewing perimeter security events. They notice that the firewall has blocked several inbound connections from a known malicious IP. The IDS has also generated alerts for the same IP. What should the defender do to improve future detection and response?

   • AChange the firewall rule to allow the traffic to see what the attacker is doing.
   • BIgnore the events because the firewall already blocked the traffic.
   • CCreate a firewall rule to permanently block the IP and add the IP to the IDS watchlist for enhanced monitoring.
   • DDisable the IDS signature that generated the alert to reduce noise.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to provide remote access to employees using personal laptops. The security team is concerned about malware on personal devices. They want to ensure that remote access does not introduce malware into the corporate network. Which approach is most effective?

   • AProvide VPN access but do not enforce any endpoint requirements.
   • BRequire VPN clients with endpoint posture checking that verifies antivirus and OS patch levels before allowing connection.
   • CUse a remote desktop gateway that allows access to a single server, but do not restrict which devices can connect.
   • DDisable VPN and require employees to use a public cloud file-sharing service.
   Reveal Solution Discussion Select an answer first