Technical Network Security CND Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company's security policy requires that all remote access be authenticated using multi-factor authentication (MFA). The company is using a VPN for remote access. Which technical control should be implemented to enforce this policy?

   • AConfigure the VPN to require MFA for all remote access connections.
   • BUse a firewall to block remote access from non-corporate devices.
   • CUse a network access control solution to authenticate devices before granting access.
   • DImplement an intrusion prevention system to detect unauthorized remote access.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which technical control is primarily used to create a secure, encrypted tunnel for remote users to access internal network resources?

   • ANetwork Access Control (NAC)
   • BIntrusion Prevention System (IPS)
   • CFirewall
   • DVirtual Private Network (VPN)
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   During a security incident, the incident response team discovers that an attacker has encrypted critical files on a file server. The team has backups, but the most recent backup is from two days ago. The company cannot afford significant data loss. What should the team do first?

   • AAttempt to decrypt the files using publicly available decryption tools.
   • BPay the ransom to quickly regain access to the files.
   • CImmediately restore the files from backup without further action.
   • DRestore the files from the backup after ensuring the ransomware is eradicated from the environment.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   A network administrator needs to enforce security policies on devices before they are granted access to the network. Which technical control is specifically designed for this purpose?

   • AVirtual Private Network (VPN)
   • BNetwork Access Control (NAC)
   • CFirewall
   • DIntrusion Detection System (IDS)
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company's security policy requires that all network traffic be inspected for malware and that any malicious traffic be blocked automatically. The network team is evaluating which technical control to deploy at the internet gateway. Which control best meets this requirement?

   • AAn intrusion prevention system (IPS) configured in inline mode with automatic blocking.
   • BA network access control (NAC) system that enforces endpoint compliance.
   • CAn intrusion detection system (IDS) configured in passive mode with alerts to the security team.
   • DA firewall configured to allow all traffic except known malicious IP addresses.
   Reveal Solution Discussion Select an answer first