A hospital is implementing an access control system for its electronic health records. The system must allow nurses to view patient records only for patients currently assigned to their ward, and doctors to view records for all patients in the hospital. The access decision must be based on the user's role and the patient's ward assignment. Which access control model best fits this requirement?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

A company is upgrading its wireless network. They have legacy devices that only support WPA2, but they want to use WPA3 for new devices. They also need to ensure that the network is segmented so that guest devices cannot access internal resources. Which approach should they take?

Use WPA2 for all devices and disable the guest network

Use only WPA3 and require all legacy devices to be upgraded

Use an open network with a captive portal for guests and WPA2 for employees

Enable WPA3 transition mode, which allows both WPA2 and WPA3 devices to connect, and use a separate guest VLAN

What is the primary purpose of a VPN in remote access?

To increase the speed of the internet connection

To provide a public IP address to the user

To replace the need for a firewall

To create an encrypted tunnel over an untrusted network

EC-CouncilNetwork Defense Essentials

Domain 1Objective 2

Network Security Controls and Protocols NDE Practice Questions (Page 4)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

45questions here

9free pages

10concepts

10 Concepts in This Objective

Network Security Controls Overview
Access Control Models
Authentication Mechanisms
Authorization and Accounting
Network Security Protocols
Firewalls and Intrusion Detection/Prevention
VPNs and Remote Access Security
Wireless Network Security
Network Segmentation and Isolation
Security Policies and Procedures

Questions 16–20

16application · medium
A hospital is implementing an access control system for its electronic health records. The system must allow nurses to view patient records only for patients currently assigned to their ward, and doctors to view records for all patients in the hospital. The access decision must be based on the user's role and the patient's ward assignment. Which access control model best fits this requirement?
Select an answer first
17foundation · easy
Which authentication method relies on a physical device that generates a one-time passcode?
Select an answer first
18expert · hard
A company is upgrading its wireless network. They have legacy devices that only support WPA2, but they want to use WPA3 for new devices. They also need to ensure that the network is segmented so that guest devices cannot access internal resources. Which approach should they take?
Select an answer first
19foundation · easy
What is the primary purpose of a VPN in remote access?
Select an answer first
20foundation · easy
Which technology is commonly used to create logical network segments on the same physical switch?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.

Network Security Controls and Protocols NDE Practice Questions (Page 4)

Questions 16–20

Which authentication method relies on a physical device that generates a one-time passcode?

A company is upgrading its wireless network. They have legacy devices that only support WPA2, but they want to use WPA3 for new devices. They also need to ensure that the network is segmented so that guest devices cannot access internal resources. Which approach should they take?

What is the primary purpose of a VPN in remote access?

Which technology is commonly used to create logical network segments on the same physical switch?

Keep studying — Network Security Fundamentals and Access Control