Technical Network Security CND Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   During a risk assessment, a security analyst identifies that an attacker could exploit a misconfigured firewall to gain unauthorized access to an internal database. Which type of threat vector does this scenario represent?

   • ADenial of service
   • BSocial engineering
   • CMisconfiguration
   • DMalware
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A network administrator is troubleshooting a suspected ARP spoofing attack. The administrator notices that the ARP cache on a switch has multiple entries for the same IP address with different MAC addresses. What is the best immediate action to mitigate the attack?

   • AClear the ARP cache on all devices to remove the malicious entries.
   • BEnable dynamic ARP inspection (DAI) on the switch to validate ARP packets.
   • CManually configure static ARP entries on all devices.
   • DDisable ARP on the switch to stop the attack.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A company is writing a network security policy. The policy must be enforceable with technical controls and must address the use of personal devices on the corporate network. Which approach best balances security and usability?

   • AProhibit all personal devices from the network to ensure maximum security.
   • BAllow personal devices without any restrictions to avoid hindering productivity.
   • CImplement a BYOD policy that requires devices to be enrolled in MDM and compliant with security baselines before accessing the network.
   • DProvide a separate guest network for personal devices with no access to internal resources.
   Reveal Solution Discussion Select an answer first
5. 44application · easy

   A company wants to protect its internal network from external threats. The security team proposes a layered approach that includes a perimeter firewall, an internal firewall, and host-based firewalls on critical servers. What is the primary benefit of this defense-in-depth strategy?

   • AIt guarantees that no external attack can succeed.
   • BIt reduces the number of security policies required.
   • CIf one layer fails, other layers still provide protection.
   • DIt eliminates the need for intrusion detection systems.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A network analyst is monitoring traffic and sees a large amount of UDP traffic to port 53 from an internal host to an external server. The analyst suspects DNS tunneling. What additional evidence would strengthen this suspicion?

   • AThe external server is a well-known public DNS server.
   • BThe DNS queries are to domains with long, random-looking subdomains.
   • CThe internal host is a domain controller.
   • DThe traffic occurs during business hours.
   Reveal Solution Discussion Select an answer first