Network Security Fundamentals ECSS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company's security team is developing a policy to govern remote access. They want to ensure that employees use strong authentication and that all remote sessions are logged. Which document should formally define these requirements?

   • AA standard
   • BA procedure
   • CA security policy
   • DA guideline
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Why is network security important for an organization?

   • AIt protects sensitive data from unauthorized access, theft, and damage, thereby safeguarding business operations and reputation
   • BIt eliminates the need for user authentication on internal systems
   • CIt ensures the network is always fast and free of congestion
   • DIt guarantees that all employees can access any network resource from any location
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company's web server is flooded with a massive amount of traffic from many different IP addresses, causing the website to become unresponsive to legitimate users. Which type of threat is this, and which control is MOST effective in mitigating it?

   • AA man-in-the-middle attack; implement encryption and certificate validation
   • BA phishing attack; implement email filtering and user awareness training
   • CA malware infection; implement antivirus software and endpoint detection
   • DA distributed denial-of-service (DDoS) attack; implement rate limiting and traffic filtering at the perimeter
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company wants to establish a baseline for acceptable use of its network resources. Which document should they create and enforce?

   • AA threat model that identifies potential attackers and their methods
   • BA disaster recovery plan that outlines procedures for restoring services after an outage
   • CA network diagram that shows the layout of the network infrastructure
   • DAn acceptable use policy (AUP) that defines what users may and may not do with company resources
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a network security best practice?

   • AAllowing all network traffic to pass through the firewall to avoid blocking legitimate users
   • BUsing the same password for all systems to simplify login
   • CRegularly updating software and firmware to patch known vulnerabilities
   • DDisabling security patches to avoid system reboots
   Reveal Solution Discussion Select an answer first