An organization wants to allow remote employees to securely access internal applications over the internet. The solution must encrypt all traffic and enforce multi-factor authentication. Which technical control should be implemented?

A VPN gateway with IPsec or SSL/TLS tunneling and integration with an MFA provider.

A network access control (NAC) system that checks endpoint compliance before granting access.

A firewall rule that allows remote employees to access internal applications directly.

An intrusion prevention system (IPS) deployed at the network perimeter.

A network administrator is analyzing captured traffic and sees repeated failed TCP connection attempts to a server from a single external IP address. What does this pattern most likely indicate?

A normal user misconfiguring their client.

A port scan or reconnaissance attempt.

A denial-of-service attack in progress.

Which device placement is most appropriate for a public-facing web server in a secure network architecture?

On the internal network without any firewall

In the same segment as the database server

In the internal corporate network

A network administrator is configuring a network monitoring system and wants to detect potential port scanning activity. Which monitoring technique is most effective for this purpose?

Use a host-based intrusion detection system to monitor file integrity.

Monitor system logs on the target host for failed login attempts.

Analyze netflow data to identify patterns of connections to multiple ports on the same host.

Review firewall logs for blocked traffic from a single IP address.

EC-CouncilCertified Network Defender

Domain 1Objective 3

Technical Network Security CND Practice Questions (Page 8)

Part of the Network Security Fundamentals and Defense Strategy domain, which makes up ~16% of our current practice bank.

45questions here

9free pages

7concepts

Questions 36–40

36application · medium
An organization wants to allow remote employees to securely access internal applications over the internet. The solution must encrypt all traffic and enforce multi-factor authentication. Which technical control should be implemented?
Select an answer first
37application · medium
A network administrator is analyzing captured traffic and sees repeated failed TCP connection attempts to a server from a single external IP address. What does this pattern most likely indicate?
Select an answer first
38foundation · easy
Which device placement is most appropriate for a public-facing web server in a secure network architecture?
Select an answer first
39application · medium
A network administrator is configuring a network monitoring system and wants to detect potential port scanning activity. Which monitoring technique is most effective for this purpose?
Select an answer first
40application · easy
A company is updating its network security policy. The policy must define how security incidents are reported and who is responsible for responding. Which component of the policy addresses this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.