A company's network administrator notices that the internal web server is receiving an unusually high volume of requests from a single IP address, and the server is becoming unresponsive. The administrator suspects a denial-of-service attack. Which immediate action should the administrator take to restore availability?

Block the attacking IP address at the firewall

Disable the web server's logging

A data center is being designed with multiple layers of security. The security manager has already implemented a perimeter firewall, an IDS, and a VPN for remote access. The manager now wants to add a control that specifically protects against an insider with physical access to the server room. Which control would be most effective?

Install a biometric access control system on the server room door

Implement a stronger password policy

Deploy an additional network firewall

Use a network-based intrusion prevention system

A company is writing a security policy that defines which employees can access customer data, how they should handle it, and what to do if it is leaked. Which components should this policy include?

Firewall rule syntax and VPN configuration commands

Vendor pricing and support contracts

Purpose, scope, roles and responsibilities, and enforcement

Network topology diagrams and IP address assignments

EC-CouncilNetwork Defense Essentials

Domain 1Objective 1

Fundamentals of Network Security and Defense NDE Practice Questions (Page 3)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

44questions here

9free pages

8concepts

Questions 11–15

11application · medium
A company's network administrator notices that the internal web server is receiving an unusually high volume of requests from a single IP address, and the server is becoming unresponsive. The administrator suspects a denial-of-service attack. Which immediate action should the administrator take to restore availability?
Select an answer first
12foundation · easy
Which security principle is primarily concerned with ensuring that systems and data are accessible to authorized users when needed?
Select an answer first
13foundation · easy
Which type of network attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?
Select an answer first
14expert · hard
A data center is being designed with multiple layers of security. The security manager has already implemented a perimeter firewall, an IDS, and a VPN for remote access. The manager now wants to add a control that specifically protects against an insider with physical access to the server room. Which control would be most effective?
Select an answer first
15application · easy
A company is writing a security policy that defines which employees can access customer data, how they should handle it, and what to do if it is leaked. Which components should this policy include?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Fundamentals of Network Security and Defense NDE Practice Questions (Page 3)

Questions 11–15

Which security principle is primarily concerned with ensuring that systems and data are accessible to authorized users when needed?

Which type of network attack involves an attacker intercepting and potentially altering communications between two parties without their knowledge?

A company is writing a security policy that defines which employees can access customer data, how they should handle it, and what to do if it is leaked. Which components should this policy include?

Keep studying — Network Security Fundamentals and Access Control