Network Security Controls and Protocols NDE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A data center is implementing a defense-in-depth strategy. They have already deployed a firewall and an IDS. Now they want to add a control that protects the physical server racks from unauthorized access. Which type of control should they add?

   • AA biometric door lock on the server room
   • BA new security policy requiring badge use
   • CA VLAN segmentation scheme
   • DAn additional network-based IPS
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company wants to deploy a wireless network for employees and guests. They need to ensure that employee traffic is encrypted with the strongest available protocol, while guest traffic is isolated from the corporate network. Which configuration should they use?

   • AWPA2 for both employee and guest networks, with guest traffic on the same VLAN
   • BWPA3 for both networks, but with guest traffic on the same VLAN
   • CWEP for the guest network and WPA3 for the employee network
   • DWPA3 for the employee network and a separate guest VLAN with WPA2
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An organization is implementing a new access control system. They need to ensure that employees can only access resources necessary for their job, and they also need to be able to generate reports on who accessed what and when. They are considering using RBAC and auditing. Which of the following best describes the relationship between RBAC and auditing in this scenario?

   • ARBAC and auditing are interchangeable and either one can be used for both purposes
   • BRBAC is used for authentication, and auditing is used for authorization
   • CAuditing defines the permissions, and RBAC records the access events
   • DRBAC defines the permissions, and auditing records the actual access events for accountability
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has a flat network where all devices can communicate with each other. They want to reduce the risk of lateral movement in case of a breach. They also need to maintain performance for critical servers. Which approach should they take?

   • APlace all servers in the same VLAN as users
   • BDisable inter-VLAN routing
   • CImplement VLANs to segment departments and place critical servers in a separate VLAN
   • DUse MAC filtering on all switches
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization wants to strengthen its remote access authentication. Currently, users log in with a username and password. The security team wants to add a second factor that is something the user has, and they also need to ensure that authentication attempts are logged for auditing. Which combination of controls meets both requirements?

   • AUse a smart card and rely on the operating system's default audit policy
   • BImplement a one-time password (OTP) token and enable accounting logs on the VPN gateway
   • CIncrease password complexity and enable verbose logging on the firewall
   • DRequire a biometric scan and disable password authentication
   Reveal Solution Discussion Select an answer first