Network Perimeter Security CND Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which of the following is the primary purpose of a network perimeter security strategy?

   • ATo encrypt all data stored in the organization's databases
   • BTo manage user identities and access rights within the organization
   • CTo enforce an organization's security policy at the point where its network connects to external networks
   • DTo detect and remove viruses from endpoint devices
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which protocol is commonly used to establish a secure VPN tunnel and encrypt data transmitted between a remote user and the corporate network?

   • ASNMP
   • BFTP
   • CIPsec
   • DHTTP
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An IDS deployed at the network perimeter generates a high volume of alerts for port scans against the DMZ web server. The security team confirms the scans originate from a single external IP and no successful intrusions have occurred. The team wants to reduce alert fatigue while maintaining visibility. What should they do?

   • AIncrease the alert threshold for all signatures to reduce the number of alerts.
   • BDisable the IDS signature for all port scans to eliminate the alerts.
   • CChange the IDS to inline mode so it blocks the scanning IP automatically.
   • DCreate a suppression rule for the specific source IP and alert signature, while keeping the IDS in monitoring mode.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An organization's firewall has a rule that allows all outbound traffic. The security team wants to reduce the risk of data exfiltration while minimizing disruption to business operations. Which approach is most appropriate?

   • AKeep the allow-all rule but enable logging on the firewall to monitor outbound traffic.
   • BUse an IDS to monitor outbound traffic and alert on suspicious patterns.
   • CImplement a default-deny outbound policy and create allow rules for specific business-required destinations and ports.
   • DBlock all outbound traffic except web browsing on port 80 and 443.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   An organization deploys an IPS in inline mode at the perimeter. After deployment, users report that a legitimate business application is failing intermittently. The IPS logs show that the application's traffic matches a signature for a known exploit, but the traffic is benign. What should the administrator do first?

   • ACreate an IPS exception for the specific application's source and destination IP addresses and ports.
   • BDisable the IPS entirely to restore application functionality.
   • CChange the IPS to passive mode so it only logs the traffic without blocking.
   • DIncrease the IPS sensitivity to detect more threats, which may resolve the issue.
   Reveal Solution Discussion Select an answer first