What is the primary purpose of a network security policy?

To provide a high-level statement of management intent and direction for security

To serve as a step-by-step guide for incident response

To list specific firewall rules and configurations

To replace the need for technical security controls

A company's security policy requires that all remote employees connect to the corporate network using a VPN. However, the IT team has discovered that some employees are using personal devices that do not support the company's VPN client. The company wants to maintain the security policy while allowing these employees to work remotely. Which approach best satisfies the policy and the need for remote access?

Create a separate network segment for personal devices and allow them to access only non-sensitive resources without VPN.

Allow the employees to use a web-based remote access portal that does not require a VPN client.

Ask the employees to install a third-party VPN client on their personal devices, even if it is not supported.

Provide the employees with company-managed laptops that have the VPN client pre-installed and enforce the policy through NAC.

In a defense-in-depth architecture, which of the following is an example of a technical control that operates at the network layer?

Background checks for employees

A security analyst is responding to a ransomware incident where multiple servers have been encrypted. The analyst needs to restore operations while preserving evidence for law enforcement. Which two actions should the analyst take?

Disconnect the servers from the network and then reboot them.

Immediately restore the servers from backups without isolating them.

Isolate the affected servers from the network and take forensic images of the servers before restoring from backups.

Pay the ransom to restore the servers quickly.

EC-CouncilCertified Network Defender

Domain 1Objective 3

Technical Network Security CND Practice Questions (Page 4)

Part of the Network Security Fundamentals and Defense Strategy domain, which makes up ~16% of our current practice bank.

45questions here

9free pages

7concepts

Questions 16–20

16foundation · easy
What is the primary purpose of a network security policy?
Select an answer first
17application · medium
A company's security policy requires that all remote employees connect to the corporate network using a VPN. However, the IT team has discovered that some employees are using personal devices that do not support the company's VPN client. The company wants to maintain the security policy while allowing these employees to work remotely. Which approach best satisfies the policy and the need for remote access?
Select an answer first
18foundation · easy
In a defense-in-depth architecture, which of the following is an example of a technical control that operates at the network layer?
Select an answer first
19expert · hard
A security analyst is responding to a ransomware incident where multiple servers have been encrypted. The analyst needs to restore operations while preserving evidence for law enforcement. Which two actions should the analyst take?
Select an answer first
20application · easy
A security analyst is reviewing network traffic logs and notices that a user's credentials were transmitted in plaintext over the network. Which security principle is most directly violated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.

Technical Network Security CND Practice Questions (Page 4)

Questions 16–20

What is the primary purpose of a network security policy?

In a defense-in-depth architecture, which of the following is an example of a technical control that operates at the network layer?

A security analyst is responding to a ransomware incident where multiple servers have been encrypted. The analyst needs to restore operations while preserving evidence for law enforcement. Which two actions should the analyst take?

A security analyst is reviewing network traffic logs and notices that a user's credentials were transmitted in plaintext over the network. Which security principle is most directly violated?

Keep studying — Network Security Fundamentals and Defense Strategy