A network administrator notices that the network is slow and that a large number of TCP SYN packets are being sent to a single server from many different source IP addresses. The server is not responding to legitimate requests. What is the most likely attack, and which control would be most effective?

Brute-force attack; implement account lockout policies

SQL injection attack; deploy a web application firewall (WAF)

Distributed denial-of-service (DDoS) attack; use rate limiting and SYN proxy on the firewall

Man-in-the-middle attack; enable encryption on the server

What is the primary purpose of a defense-in-depth strategy in network security?

To ensure that only one security control is used for each asset

To replace all physical security controls with technical controls

To eliminate the need for user training

To provide multiple layers of security so that if one layer fails, others still protect the asset

EC-CouncilNetwork Defense Essentials

Domain 1Objective 1

Fundamentals of Network Security and Defense NDE Practice Questions (Page 5)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

44questions here

9free pages

8concepts

Questions 21–25

21foundation · easy
Which network component is responsible for forwarding data packets between different networks based on IP addresses?
Select an answer first
22expert · hard
A network administrator notices that the network is slow and that a large number of TCP SYN packets are being sent to a single server from many different source IP addresses. The server is not responding to legitimate requests. What is the most likely attack, and which control would be most effective?
Select an answer first
23foundation · easy
After a user successfully authenticates, what process determines which resources they are allowed to access?
Select an answer first
24foundation · easy
What is the primary purpose of a defense-in-depth strategy in network security?
Select an answer first
25foundation · easy
Which network topology connects every device directly to a central device, such as a switch, so that each device has a dedicated point-to-point connection to the central device?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Fundamentals of Network Security and Defense NDE Practice Questions (Page 5)

Questions 21–25

Which network component is responsible for forwarding data packets between different networks based on IP addresses?

After a user successfully authenticates, what process determines which resources they are allowed to access?

What is the primary purpose of a defense-in-depth strategy in network security?

Which network topology connects every device directly to a central device, such as a switch, so that each device has a dedicated point-to-point connection to the central device?

Keep studying — Network Security Fundamentals and Access Control