How can weak passwords be exploited by attackers?

They allow attackers to guess or brute-force credentials to gain unauthorized access

They cause the network to slow down

They prevent the installation of security patches

They automatically encrypt all network traffic

Which of the following is an example of a host-level security layer in defense-in-depth?

Network segmentation using VLANs

Firewall at the network perimeter

Antivirus software installed on individual computers

A company's internal web application was recently exploited because a developer left a debug mode enabled in production, exposing sensitive error messages. The security team wants to prevent similar issues. Which combination of controls is MOST effective?

Implement a secure coding standard, conduct code reviews, and disable debug mode in production

Require all developers to use strong passwords for their accounts

Deploy a web application firewall (WAF) and rely on it to block attacks

Increase network monitoring and log all application errors

A company's security team wants to detect a malware infection that may already be present on the network. Which type of control should they prioritize?

Install a firewall to block inbound malicious traffic

Implement a backup and recovery plan

Enforce a strong password policy

Deploy an intrusion detection system (IDS) and enable detailed logging

A small e-commerce company has deployed a web application with a public IP address. The security team wants to ensure that even if the web server is compromised, the attacker cannot easily pivot to internal databases. Which defense-in-depth layer should be prioritized to limit lateral movement?

Placing the database on the same subnet as the web server for easier backups

Enabling HTTPS on the web application

Network segmentation with internal firewalls between the web tier and database tier

Installing the latest antivirus on the web server

EC-CouncilCertified Security Specialist

Domain 1Objective 1

Network Security Fundamentals ECSS Practice Questions (Page 8)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

50questions here

10free pages

8concepts

Questions 36–40

36foundation · easy
How can weak passwords be exploited by attackers?
Select an answer first
37foundation · easy
Which of the following is an example of a host-level security layer in defense-in-depth?
Select an answer first
38expert · hard
A company's internal web application was recently exploited because a developer left a debug mode enabled in production, exposing sensitive error messages. The security team wants to prevent similar issues. Which combination of controls is MOST effective?
Select an answer first
39application · medium
A company's security team wants to detect a malware infection that may already be present on the network. Which type of control should they prioritize?
Select an answer first
40application · medium
A small e-commerce company has deployed a web application with a public IP address. The security team wants to ensure that even if the web server is compromised, the attacker cannot easily pivot to internal databases. Which defense-in-depth layer should be prioritized to limit lateral movement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.