Which of the following is a common network vulnerability?

Running up-to-date antivirus software

Implementing network segmentation

Unpatched software with known security flaws

Using strong, unique passwords for all accounts

A company has a public-facing web server that was compromised. The investigation reveals the attacker exploited a known vulnerability in the web server software. The company's security team must decide how to respond while maintaining service availability. Which approach best balances security and availability?

Apply the vendor's security patch immediately and restart the service during a scheduled maintenance window

Ignore the vulnerability and continue operating to avoid downtime

Take the server offline indefinitely until a full forensic investigation is complete

Apply a temporary firewall rule to block all traffic to the server

A company wants to protect its internal network from external attackers. They have already deployed a firewall at the perimeter. To implement defense-in-depth, which additional control should they add to protect against attacks that bypass the firewall?

Increasing the logging level on the existing firewall

A second firewall at the same perimeter point

Removing all external network connections

Network segmentation and internal access controls

EC-CouncilCertified Security Specialist

Domain 1Objective 1

Network Security Fundamentals ECSS Practice Questions (Page 5)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

8concepts

Questions 21–25

21application · medium
A hospital's patient portal experienced a distributed denial-of-service (DDoS) attack that made the system unavailable for several hours. Which aspect of the CIA triad was most directly violated?
Select an answer first
22foundation · easy
Which of the following is a common network vulnerability?
Select an answer first
23expert · hard
A company has a public-facing web server that was compromised. The investigation reveals the attacker exploited a known vulnerability in the web server software. The company's security team must decide how to respond while maintaining service availability. Which approach best balances security and availability?
Select an answer first
24expert · hard
A company's network experienced a ransomware attack. The attack encrypted files, but the company was able to restore from backups. However, the investigation revealed that the attacker had access to the network for several weeks before the attack. Which CIA goal was most severely compromised during the weeks of undetected access?
Select an answer first
25application · medium
A company wants to protect its internal network from external attackers. They have already deployed a firewall at the perimeter. To implement defense-in-depth, which additional control should they add to protect against attacks that bypass the firewall?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Network Security Fundamentals ECSS Practice Questions (Page 5)

Questions 21–25

A hospital's patient portal experienced a distributed denial-of-service (DDoS) attack that made the system unavailable for several hours. Which aspect of the CIA triad was most directly violated?

Which of the following is a common network vulnerability?

A company wants to protect its internal network from external attackers. They have already deployed a firewall at the perimeter. To implement defense-in-depth, which additional control should they add to protect against attacks that bypass the firewall?

Keep studying — Network Defense Fundamentals and Controls