Network Attack Detection and Countermeasures EHE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   After a network attack has been contained and eradicated, what is the final step in the incident response process?

   • AContainment
   • BEradication
   • CPost-incident analysis
   • DRecovery
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company needs to allow remote employees to securely access internal applications over the internet. The current firewall only supports port-based rules. Which countermeasure should be added to protect the data in transit?

   • AUse a packet sniffer to monitor remote access traffic.
   • BOpen the internal application ports directly to the internet.
   • CImplement a VPN gateway that encrypts all remote access traffic.
   • DConfigure the firewall to allow all traffic from the remote employees' home IP addresses.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company must comply with a regulation that requires all customer data to remain within the country. They are considering a public cloud provider that offers a local region. Which additional control is necessary to ensure compliance?

   • ADeploy a firewall to block all outbound traffic from the cloud environment.
   • BEncrypt all data in transit and at rest using strong encryption.
   • CUse a private cloud model to ensure physical isolation of the infrastructure.
   • DConfigure the cloud resources to use only the local region and verify that data replication is also confined to that region.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   A network analyst needs to capture raw packets traversing a network interface to inspect the payload of suspicious traffic. Which tool is designed for this purpose?

   • APacket sniffer
   • BFirewall
   • CSIEM system
   • DIntrusion prevention system (IPS)
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to prevent unauthorized devices from connecting to its network. Which countermeasure should be implemented?

   • ADeploy an IDS to monitor for rogue devices.
   • BUse MAC address filtering on the wireless access points.
   • CEncrypt all network traffic with WPA2.
   • DEnable 802.1X authentication on network switches.
   Reveal Solution Discussion Select an answer first