A security administrator is categorizing controls for a new data center. Which of the following is an example of a physical control?

Configuring a firewall to block unauthorized inbound traffic

Enforcing a password policy that requires 12-character passwords

Installing biometric scanners at the entrance to the server room

Requiring employees to complete annual security awareness training

An organization is implementing multi-factor authentication for its VPN. They want to use a combination of something the user knows and something the user has. Which of the following combinations meets this requirement?

Password and a one-time code from a mobile app

Password and a security question

Fingerprint scan and a retina scan

A network administrator is troubleshooting a VPN connection that uses IPsec. The VPN tunnel establishes, but data is not being encrypted. The administrator suspects that the encryption algorithm is not being negotiated correctly. Which of the following should the administrator check first?

The IPsec security association (SA) settings on both ends

The firewall rules on the VPN gateway

Which of the following is an example of multi-factor authentication (MFA)?

Entering a password and then a code sent to your smartphone

Using a fingerprint scanner alone

Entering a username and password

A company is deploying a wireless network for guests. They want to provide internet access but prevent guests from accessing internal resources. They also want to ensure that guest traffic is encrypted. Which approach should they take?

Disable SSID broadcast and use WEP

Create a separate guest VLAN with a firewall rule blocking access to internal subnets, and use WPA2 with a shared passphrase

Use MAC filtering to allow only known guest devices

Use the same VLAN as employees but require a captive portal

EC-CouncilNetwork Defense Essentials

Domain 1Objective 2

Network Security Controls and Protocols NDE Practice Questions (Page 1)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

45questions here

9free pages

10concepts

10 Concepts in This Objective

Network Security Controls Overview
Access Control Models
Authentication Mechanisms
Authorization and Accounting
Network Security Protocols
Firewalls and Intrusion Detection/Prevention
VPNs and Remote Access Security
Wireless Network Security
Network Segmentation and Isolation
Security Policies and Procedures

Questions 1–5

1foundation · easy
A security administrator is categorizing controls for a new data center. Which of the following is an example of a physical control?
Select an answer first
2application · medium
An organization is implementing multi-factor authentication for its VPN. They want to use a combination of something the user knows and something the user has. Which of the following combinations meets this requirement?
Select an answer first
3expert · hard
A network administrator is troubleshooting a VPN connection that uses IPsec. The VPN tunnel establishes, but data is not being encrypted. The administrator suspects that the encryption algorithm is not being negotiated correctly. Which of the following should the administrator check first?
Select an answer first
4foundation · easy
Which of the following is an example of multi-factor authentication (MFA)?
Select an answer first
5application · medium
A company is deploying a wireless network for guests. They want to provide internet access but prevent guests from accessing internal resources. They also want to ensure that guest traffic is encrypted. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.