Technical Network Security CND Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to implement a technical control to prevent unauthorized devices from connecting to the network. Which control is most appropriate for this requirement?

   • AUse a VPN to encrypt all traffic on the network.
   • BUse a firewall to block all incoming traffic from unknown IP addresses.
   • CImplement an intrusion detection system to alert on unauthorized devices.
   • DDeploy a network access control (NAC) solution that authenticates devices before granting network access.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   After a network breach, the incident response team has contained the incident and eradicated the threat. The team is now ready to restore systems to normal operation. Which action should be taken to ensure a safe recovery?

   • ARestore systems from known-good backups and verify that all security patches are applied before reconnecting to the network.
   • BReconnect all systems to the network immediately to minimize downtime.
   • CRestore systems from backups and reconnect without applying patches to save time.
   • DUse the original compromised systems without restoration to avoid data loss.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A financial institution is designing a network for a new trading application that requires low latency and high availability. The application must be accessible to internal traders and external partners via the internet. The security team requires that the application be protected from DDoS attacks and that partner access be limited to specific IP ranges. Which architecture best meets these requirements?

   • APlace the application on the same network as the internal systems and rely on host-based firewalls.
   • BPlace the application behind a DDoS protection service and a firewall that allows partner IP ranges, with the application in a DMZ.
   • CPlace the application on the internal network and use a VPN for partner access.
   • DPlace the application on a separate VLAN with no internet access and provide partners with a direct connection.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to implement network access control (NAC) to ensure that only compliant devices can connect to the corporate network. The company has a mix of company-owned and personal devices. Which approach best balances security and usability?

   • AUse NAC to quarantine non-compliant devices and provide them with limited access to a remediation network.
   • BBlock all personal devices from connecting to the network.
   • CUse NAC to automatically install security updates on all devices before granting access.
   • DAllow all devices to connect but monitor them for suspicious activity.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   During a security incident, a network administrator discovers that an attacker has been using a compromised account to access sensitive files on a file server. The administrator needs to contain the incident while preserving evidence for a forensic investigation. Which two actions should the administrator take first?

   • ADisconnect the file server from the network and then restart it.
   • BChange the password of the compromised account and continue monitoring.
   • CDisable the compromised account and take a snapshot of the file server's memory and disk.
   • DShut down the file server immediately to prevent further access.
   Reveal Solution Discussion Select an answer first