An employee's laptop is configured with a personal firewall. The employee frequently connects to public Wi-Fi at airports and needs to allow only web browsing and email (HTTPS and IMAPS) while blocking all other inbound and outbound traffic. Which firewall rule set best meets this requirement?

Allow all outbound traffic; block all inbound traffic.

Block all inbound traffic; allow outbound TCP ports 443 and 993.

Allow inbound TCP ports 443 and 993; block all outbound traffic.

Block all inbound and outbound traffic except TCP port 80.

A user's personal firewall is blocking a legitimate application that needs to receive incoming connections for a video call. The user has verified the application is safe and necessary. What is the most appropriate action to take?

Change the application's settings to use a different port that is not blocked.

Add a rule to allow the application only on the current private network profile.

Temporarily disable the firewall for the duration of the video call.

Create a rule to allow the specific application through the firewall for both private and public networks.

An employee is traveling internationally and needs to access a corporate intranet that is only reachable through a VPN. The hotel Wi-Fi blocks VPN connections. The employee also has a cellular data plan with international roaming. Which approach is the most reliable?

Use the hotel Wi-Fi and try a different VPN protocol.

Use a web-based proxy to access the intranet.

Use the cellular data connection to establish the VPN.

Ask the hotel to unblock VPN traffic.

A small business owner wants to set up a guest Wi-Fi network for customers. The owner wants to keep the guest network separate from the business network. Which configuration is the most secure?

Disable the SSID broadcast for the guest network.

Use MAC address filtering to allow only customer devices.

Enable a separate guest SSID with WPA2 and enable AP isolation.

Use the same SSID as the business network but with a different password.

EC-CouncilCertified Secure Computer User

Domain 4Objective 3

Securing Network Connections CSCU Practice Questions (Page 2)

Part of the Mobile, Cloud, and Network Security domain, which makes up ~24% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

6concepts

Questions 6–10

6application · medium
An employee's laptop is configured with a personal firewall. The employee frequently connects to public Wi-Fi at airports and needs to allow only web browsing and email (HTTPS and IMAPS) while blocking all other inbound and outbound traffic. Which firewall rule set best meets this requirement?
Select an answer first
7application · medium
A user's personal firewall is blocking a legitimate application that needs to receive incoming connections for a video call. The user has verified the application is safe and necessary. What is the most appropriate action to take?
Select an answer first
8expert · hard
An employee is traveling internationally and needs to access a corporate intranet that is only reachable through a VPN. The hotel Wi-Fi blocks VPN connections. The employee also has a cellular data plan with international roaming. Which approach is the most reliable?
Select an answer first
9application · medium
A small business owner wants to set up a guest Wi-Fi network for customers. The owner wants to keep the guest network separate from the business network. Which configuration is the most secure?
Select an answer first
10foundation · easy
Before connecting to a public Wi-Fi network, which setting should you disable on your device to reduce the risk of unauthorized access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSCU

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSCU” is a trademark of its owner, used for identification only.