Fundamentals of Network Security and Defense NDE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has a single firewall, no internal segmentation, and no endpoint protection. A recent ransomware attack encrypted both servers and workstations. Management wants to improve resilience against future attacks but has a limited budget. Which combination of controls would provide the most cost-effective defense in depth?

   • AEndpoint antivirus and regular backups
   • BIntrusion prevention system (IPS) and security awareness training
   • CNetwork segmentation and endpoint detection and response (EDR)
   • DA second firewall and a stronger password policy
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of a network security policy?

   • ATo define the hardware specifications for network devices
   • BTo provide a framework for managing and protecting network resources
   • CTo guarantee that no security breaches will occur
   • DTo replace the need for technical security controls
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security analyst is investigating a potential malware infection on a user's workstation. The analyst notices that the workstation is sending large amounts of data to an external IP address that is not on any known threat list. The analyst must decide whether to disconnect the workstation from the network. Which factor should be the primary consideration in this decision?

   • AThe cost of the antivirus software
   • BThe external IP address is not on a threat list
   • CThe workstation's operating system version
   • DThe user's job role and the sensitivity of the data on the workstation
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is developing a security policy for remote workers. Which element is essential for the policy to be effective?

   • AClear enforcement and consequences for non-compliance
   • BDetailed firewall configuration examples
   • CA network topology diagram
   • DA list of approved VPN vendors
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of implementing defense in depth?

   • ACombining a firewall, an intrusion detection system, and regular security awareness training
   • BUsing a single firewall at the network perimeter
   • CRelying solely on strong passwords for all access
   • DInstalling antivirus software on all servers
   Reveal Solution Discussion Select an answer first