Network Security Fundamentals ECSS Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   An intrusion detection system (IDS) that alerts administrators to suspicious activity is an example of which type of security control?

   • APreventive control
   • BCorrective control
   • CDeterrent control
   • DDetective control
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company's network administrator notices that several workstations are running outdated operating systems with known vulnerabilities. The administrator wants to reduce the risk of exploitation. Which best practice should be applied FIRST?

   • AIncrease the frequency of security awareness training for employees
   • BDisable all unnecessary network services on the workstations
   • CDeploy additional intrusion detection sensors on the network
   • DImplement a regular patch management process to update operating systems and applications
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which scenario best illustrates a breach of availability?

   • AAn unauthorized user reads confidential emails without altering them
   • BA distributed denial-of-service (DDoS) attack floods a web server with traffic, making the website inaccessible to legitimate users
   • CAn employee accidentally deletes a critical file, and the backup is also corrupted
   • DAn attacker steals customer credit card numbers from a database
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Why is continuous network monitoring considered a best practice?

   • AIt eliminates the need for other security controls
   • BIt helps detect suspicious activity early, allowing timely response to potential incidents
   • CIt automatically patches all vulnerabilities
   • DIt ensures that all users are authenticated at all times
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to reduce the risk of unauthorized access to its internal network. Which best practice is most effective?

   • AImplement strong authentication and least-privilege access
   • BDisable all network monitoring to reduce overhead
   • CAllow all users to have administrator privileges for convenience
   • DUse the same password for all systems to simplify management
   Reveal Solution Discussion Select an answer first