A sales team uses personal laptops to connect to the corporate network from home. The company wants a VPN that works without requiring pre-installed client software and provides secure access through a web browser. Which VPN technology should be chosen?

SSL/TLS VPN accessed via a web portal.

IPsec VPN with a dedicated hardware client.

Site-to-site VPN between the home router and the corporate gateway.

L2TP VPN with a pre-shared key.

How does a SIEM system help security analysts detect threats?

By correlating events from different sources to identify patterns

By scanning all network traffic for malware signatures

By replacing the need for firewalls

By physically isolating compromised systems

What is the purpose of ordering firewall rules from specific to general?

To ensure that more specific rules are evaluated before broader rules

To make the firewall rules easier to read for administrators

To reduce the number of rules needed in the firewall

To ensure that all traffic is blocked by default

EC-CouncilCertified Security Specialist

Domain 1Objective 5

Technical Controls (firewalls, IDS/IPS, VPNs, SIEM) ECSS Practice Questions (Page 10)

Part of the Network Defense Fundamentals and Controls domain, which makes up ~21% of our current practice bank.

51questions here

11free pages

14concepts

14 Concepts in This Objective

Firewall Fundamentals
Firewall Types
Firewall Architectures
Firewall Configuration and Rules
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
IDS/IPS Detection Methods
IDS/IPS Deployment Considerations
Virtual Private Networks (VPNs)
VPN Protocols and Technologies
VPN Types and Architectures
Security Information and Event Management (SIEM)
SIEM Components and Functions
SIEM Implementation and Use Cases

Questions 46–50

46application · medium
An organization needs to detect a brute-force attack that involves multiple failed logins across several servers within a short time window. They have a SIEM that collects authentication logs from all servers. Which SIEM feature should they configure to identify this pattern?
Select an answer first
47application · medium
A sales team uses personal laptops to connect to the corporate network from home. The company wants a VPN that works without requiring pre-installed client software and provides secure access through a web browser. Which VPN technology should be chosen?
Select an answer first
48foundation · easy
How does a SIEM system help security analysts detect threats?
Select an answer first
49foundation · easy
Which IDS/IPS detection method relies on a database of known attack patterns?
Select an answer first
50foundation · easy
What is the purpose of ordering firewall rules from specific to general?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Technical Controls (firewalls, IDS/IPS, VPNs, SIEM) ECSS Practice Questions (Page 10)

Questions 46–50

An organization needs to detect a brute-force attack that involves multiple failed logins across several servers within a short time window. They have a SIEM that collects authentication logs from all servers. Which SIEM feature should they configure to identify this pattern?

A sales team uses personal laptops to connect to the corporate network from home. The company wants a VPN that works without requiring pre-installed client software and provides secure access through a web browser. Which VPN technology should be chosen?

How does a SIEM system help security analysts detect threats?

Which IDS/IPS detection method relies on a database of known attack patterns?

What is the purpose of ordering firewall rules from specific to general?

Keep studying — Network Defense Fundamentals and Controls