Fundamentals of Network Security and Defense NDE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of a physical security control?

   • AAn access control list on a router
   • BA security awareness training program
   • CA password policy
   • DA biometric door lock
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's remote employees connect to the corporate network via a VPN. The security team wants to ensure that only company-issued laptops can connect, and that the user is who they claim to be. Which combination of controls should the security team implement?

   • AImplement a network access control (NAC) solution that checks for antivirus updates
   • BUse a client certificate on each company laptop and require a strong password
   • CUse a shared secret for all employees and require a VPN token
   • DRequire a username and password, and enable multi-factor authentication
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is updating its security policies. The HR department wants to ensure that employees understand the consequences of violating the policy, such as disciplinary action. The IT department wants to ensure that the policy includes technical requirements like password length and encryption. Which type of policy should contain both the consequences and the technical requirements?

   • AAn incident response plan
   • BA single comprehensive security policy
   • CA data classification policy
   • DA separate policy for each topic
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A university's IT department is writing a security policy for student workers who help with help-desk tasks. The policy must define what actions the students are allowed to perform, such as resetting passwords but not viewing other students' grades. Which component of the security policy should specify these permissions?

   • AIncident response plan
   • BAccess control policy
   • CAcceptable use policy (AUP)
   • DPassword policy
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An online banking portal requires users to log in with a password and then enter a one-time code sent to their mobile phone. A security analyst is explaining to a new developer why this is more secure than a password alone. Which statement is accurate?

   • AIt replaces the need for strong password policies
   • BIt verifies the user's identity using two different authentication factors
   • CIt ensures the user's password is never stored on the server
   • DIt prevents all phishing attacks because the one-time code is unique
   Reveal Solution Discussion Select an answer first