Network Security Fundamentals ECSS Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company's network was breached after an attacker exploited a known vulnerability in the web server software. The vulnerability had a patch available for three months before the breach. The security team also discovered that several user accounts still used the default password 'Welcome1'. Which two weaknesses MOST directly contributed to this breach?

   • AUnpatched software and weak passwords
   • BMisconfigured firewall and lack of encryption
   • CPhishing emails and malware
   • DLack of intrusion detection and poor logging
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial firm stores sensitive client data on a server. The security team wants to ensure that the data is not read by unauthorized parties and that it is not corrupted during transmission. Which combination of security goals and controls addresses these requirements?

   • AAvailability and confidentiality; use redundant power supplies and access controls
   • BConfidentiality and integrity; use encryption for data at rest and in transit, and use hashing to detect tampering
   • CIntegrity and availability; use backups and disaster recovery plans
   • DConfidentiality and availability; use firewalls and load balancers
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A hospital's IT department wants to ensure that only authorized staff can access patient records, and that the records are not altered without authorization. Which security policy should the hospital implement to address BOTH of these requirements?

   • AA password policy that requires complex passwords changed every 90 days
   • BAn access control policy that defines roles and permissions, plus an integrity policy that requires change approval
   • CA monitoring policy that requires logging all access to patient records
   • DA backup policy that requires daily backups of all patient records
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is designing its network security architecture. They want to ensure that if an attacker compromises a web server, the attacker cannot easily access the internal database server. Which defense-in-depth technique should they implement?

   • APut the web server and database server on the same network segment to simplify management
   • BUse a single firewall to protect both servers from the internet
   • CDisable the database server's network interface to prevent access
   • DPlace the web server in a DMZ and the database server on the internal network with strict firewall rules between them
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security analyst is reviewing logs and notices that a user's account was used to log in from two different countries within 10 minutes. The analyst suspects a credential compromise. Which security goal is MOST directly threatened, and which control would BEST mitigate this risk?

   • AConfidentiality; implement a firewall to block foreign IP addresses
   • BAvailability; implement a load balancer
   • CIntegrity; implement file integrity monitoring
   • DConfidentiality; implement multi-factor authentication (MFA) and user behavior analytics
   Reveal Solution Discussion Select an answer first