Technical Network Security CND Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which component is typically included in a network security policy to define the scope of the policy?

   • AThe specific IP addresses of all network devices
   • BThe systems, users, and networks to which the policy applies
   • CA list of all employee passwords
   • DThe exact brand of firewall to purchase
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network administrator notices a sudden spike in outbound DNS queries from an internal workstation to an external domain that is known to be malicious. The workstation has also been observed communicating with an IP address in a foreign country at odd hours. Which two actions should the administrator take first to contain the potential threat?

   • ABlock the malicious domain at the firewall and continue monitoring the workstation for further activity.
   • BDisconnect the workstation from the network and then review the DNS logs to identify the full scope of the compromise.
   • CReboot the workstation to clear the malware from memory and then update the firewall rules.
   • DRun a full antivirus scan on the workstation without disconnecting it from the network.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A network administrator notices a sudden spike in outbound DNS traffic from a single workstation to multiple external domains, many of which are newly registered. The workstation has not been used by its assigned user for the past hour. What should the administrator do first?

   • AReboot the workstation to clear any temporary processes causing the traffic.
   • BIsolate the workstation from the network and initiate an incident response procedure.
   • CDisable the DNS service on the workstation to stop the traffic.
   • DAdd the external domains to a blocklist on the firewall.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A financial company is designing a secure network architecture. It must comply with regulations that require strict separation between the cardholder data environment (CDE) and the rest of the network. The company also needs to allow employees to access the internet for research. Which architecture best balances compliance and usability?

   • APlace the CDE in a dedicated VLAN with a firewall enforcing strict access control, and provide internet access through a separate proxy with content filtering.
   • BDisable internet access for all employees to eliminate the risk of data exfiltration.
   • CUse a single firewall for all traffic and rely on encryption to protect cardholder data.
   • DPlace the CDE on the same network segment as employee workstations to simplify management.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company's security policy requires that all network traffic be encrypted. However, some legacy applications do not support encryption. Which technical control can be used to enforce encryption for these applications?

   • AImplement an intrusion prevention system to detect unencrypted traffic.
   • BConfigure the applications to use a proxy that adds encryption.
   • CUse a firewall to block all unencrypted traffic.
   • DDeploy a VPN gateway that encrypts all traffic between the client and the server.
   Reveal Solution Discussion Select an answer first