Network Security Fundamentals ECSS Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   A firewall that blocks unauthorized inbound traffic is an example of which type of security control?

   • ADetective control
   • BPreventive control
   • CCorrective control
   • DCompensating control
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In the CIA triad, which goal ensures that data is not altered or destroyed by unauthorized parties?

   • AIntegrity
   • BAuthentication
   • CAvailability
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A company has implemented a strong perimeter firewall, but a recent penetration test revealed that an attacker could move laterally within the internal network after compromising a single workstation. Which defense-in-depth improvement would MOST effectively limit lateral movement?

   • AAdd a second perimeter firewall in series with the existing one
   • BIncrease the frequency of password changes for all users
   • CDeploy an IDS on the internal network to monitor for suspicious activity
   • DImplement network segmentation with internal firewalls and strict access control lists between segments
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A network administrator discovers that a router has been left with its default administrative password and that SNMP is enabled with a community string of 'public'. Which type of vulnerability does this represent, and what is the BEST immediate remediation?

   • AMisconfiguration; change the administrative password and disable or restrict SNMP
   • BMalware infection; run an antivirus scan on the router
   • CWeak passwords; implement a password policy for all users
   • DUnpatched software; install the latest firmware update
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company's website is experiencing intermittent slowdowns. The security team suspects a denial-of-service (DoS) attack, but the traffic appears to come from a single IP address. Which type of attack is this, and what is the BEST immediate mitigation?

   • AA phishing attack; send an alert to all users
   • BA distributed denial-of-service attack; implement a CDN to absorb traffic
   • CA denial-of-service attack; block the source IP address at the firewall
   • DA malware infection; run an antivirus scan on the web server
   Reveal Solution Discussion Select an answer first