Technical Controls (firewalls, IDS/IPS, VPNs, SIEM) ECSS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of a firewall in network security?

   • ATo encrypt all data transmitted between two hosts
   • BTo filter traffic based on a set of security rules
   • CTo provide a backup of network configuration files
   • DTo detect and block malware already present on a host
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How does an IPS actively block a detected threat?

   • ABy dropping the malicious packets or resetting the connection
   • BBy creating a backup of the compromised data
   • CBy encrypting the traffic to prevent eavesdropping
   • DBy sending an alert to the security team and waiting for manual action
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of a Virtual Private Network (VPN)?

   • ATo detect and alert on suspicious activity
   • BTo create a secure, encrypted tunnel over an untrusted network
   • CTo block malicious traffic from entering the network
   • DTo provide a backup of network configurations
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In firewall rule configuration, what does the 'action' of a rule typically specify?

   • AWhether the rule is applied to inbound or outbound traffic
   • BWhether to permit or deny the traffic that matches the rule
   • CThe source IP address of the traffic
   • DThe logging level for the traffic
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which component of a SIEM is responsible for collecting and storing log data from various sources?

   • ADashboard
   • BAlerting module
   • CCorrelation engine
   • DLog management
   Reveal Solution Discussion Select an answer first