A company wants to protect its internal network from external attacks. They have already deployed a perimeter firewall. Which additional layer would provide the most benefit for detecting and blocking malicious traffic that bypasses the perimeter?

Disabling logging on the firewall to improve performance

Relying solely on host-based antivirus

Network intrusion detection and prevention system (IDPS) placed behind the firewall

Removing all internal segmentation to simplify management

A small e-commerce company recently suffered a ransomware infection that encrypted its customer database. The incident response team restored the database from backups and removed the malware. The security manager now wants to reduce the impact of similar incidents in the future. Which control should the company implement FIRST to achieve this goal?

Install a host-based firewall on all servers to block unauthorized inbound connections.

Deploy an intrusion detection system (IDS) to alert on suspicious network traffic.

Enforce a password policy requiring complex passwords and multi-factor authentication.

Implement regular, tested backups stored offline or in an isolated environment.

What is the primary goal of a denial-of-service (DoS) attack?

To intercept and modify communications between two parties

To install malware on a victim's device

To disrupt or degrade the availability of a service or network resource

To steal confidential data from a network

What is the primary role of a security policy in an organization?

To specify the exact technical configuration for every device

To provide a high-level framework that defines the organization's security goals and rules

To replace the need for security awareness training

To guarantee that no security incidents will ever occur

Which of the following is a common network security threat that involves tricking users into revealing sensitive information?

Man-in-the-middle (MITM) attack

EC-CouncilCertified Security Specialist

Domain 1Objective 1

Network Security Fundamentals ECSS Practice Questions (Page 3)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

8concepts

Questions 11–15

11application · medium
A company wants to protect its internal network from external attacks. They have already deployed a perimeter firewall. Which additional layer would provide the most benefit for detecting and blocking malicious traffic that bypasses the perimeter?
Select an answer first
12application · medium
A small e-commerce company recently suffered a ransomware infection that encrypted its customer database. The incident response team restored the database from backups and removed the malware. The security manager now wants to reduce the impact of similar incidents in the future. Which control should the company implement FIRST to achieve this goal?
Select an answer first
13foundation · easy
What is the primary goal of a denial-of-service (DoS) attack?
Select an answer first
14foundation · easy
What is the primary role of a security policy in an organization?
Select an answer first
15foundation · easy
Which of the following is a common network security threat that involves tricking users into revealing sensitive information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.