Fundamentals of Network Security and Defense NDE Practice Questions (Page 9)

Questions 41–44

1. 41application · medium

   An attacker intercepts communication between a client and a server and modifies the data being transmitted. Which security principle is violated, and which control would prevent this?

   • AIntegrity; use encryption with message authentication
   • BNon-repudiation; use digital signatures
   • CConfidentiality; use a firewall
   • DAvailability; use a load balancer
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company is designing a layered security architecture for a new data center. The security team has already implemented a perimeter firewall, an intrusion detection system, and antivirus on all servers. The management wants to add a control that specifically protects against an attacker who has already gained a foothold on an internal server and is attempting to move laterally to other servers. Which control would be most effective?

   • ASchedule regular vulnerability scans
   • BImplement a honeypot to attract attackers
   • CIncrease the logging level on all servers
   • DDeploy a second firewall between the internal network segments
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   An organization wants to implement single sign-on (SSO) so users authenticate once and then access multiple applications. However, the security team is concerned that if a user's account is compromised, all applications become accessible. Which additional control would best mitigate this risk?

   • AImplement role-based access control (RBAC) within each application
   • BUse longer passwords for all applications
   • CRequire multi-factor authentication (MFA) for the SSO login
   • DLog all SSO authentication events
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company has a limited budget and must protect a network that contains both a public web server and internal employee workstations. They currently have only a perimeter firewall. Which additional control would provide the most significant improvement in defense in depth without requiring a major redesign?

   • ADeploy a host-based intrusion prevention system (HIPS) on all workstations
   • BPlace the web server in a DMZ with its own firewall rules
   • CImplement strong password policies and multi-factor authentication
   • DInstall a network-based intrusion detection system (NIDS) on the internal network
   Reveal Solution Discussion Select an answer first