Network Security Fundamentals ECSS Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   What is the primary purpose of network security?

   • ATo protect the confidentiality, integrity, and availability of data and resources transmitted or stored on a network
   • BTo ensure that all network traffic is encrypted
   • CTo monitor and log all user activities on the network
   • DTo prevent unauthorized users from accessing the internet
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A company is developing a new security policy. The policy must balance user productivity with security. The security team proposes requiring multi-factor authentication (MFA) for all remote access, but employees complain it slows them down. Which approach BEST balances security and usability?

   • ARequire MFA only when accessing sensitive data, not for general remote access
   • BImplement MFA only for administrative accounts, not for regular users
   • CDrop MFA and rely on strong passwords only
   • DImplement MFA for all remote access, but use a single sign-on (SSO) system to reduce the number of authentication prompts
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   What is the core idea behind defense-in-depth?

   • APlacing all security devices at the network perimeter
   • BRelying on the latest technology to automatically stop all attacks
   • CLayering multiple security controls so that if one fails, others still provide protection
   • DUsing a single, strong security control to protect the entire network
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A network administrator discovers that a server's firewall rules are overly permissive, allowing inbound traffic on all ports from any source. This is an example of which type of network vulnerability?

   • AMisconfiguration
   • BUnpatched software
   • CPhishing
   • DWeak password
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A company has a legacy application that cannot be patched immediately due to compatibility issues. Which best practice should be implemented to reduce the risk of exploitation?

   • ADisable all logging to reduce overhead
   • BAllow all inbound traffic to the application to avoid disruption
   • CWait for the next scheduled patch cycle without any interim controls
   • DSegment the application and restrict access with firewall rules
   Reveal Solution Discussion Select an answer first