An organization needs to track which employees access a sensitive file server and what actions they perform. They also need to ensure that employees can only access files based on their job function. Which combination of controls should be implemented?

Implement ABAC policies and disable auditing to improve performance

Use DAC permissions and enable verbose logging on the firewall

Enable auditing on the file server and implement RBAC for folder permissions

Use MAC labels on files and rely on the operating system's default logging

A company wants to isolate its guest Wi-Fi network from the internal corporate network. They plan to use VLANs to segment the traffic. Additionally, they want to prevent guests from accessing internal servers even if they somehow connect to the corporate network. Which additional control should they implement?

Enable MAC address filtering on the access points

Disable SSID broadcast for the guest network

Deploy a firewall between the guest VLAN and the corporate VLAN

Use WPA3 encryption on the guest network

A company wants to strengthen remote access authentication for its administrators. They currently use only passwords. They require that even if a password is compromised, an attacker cannot gain access without a second factor. Which solution best meets this requirement?

Require a longer password with complexity rules

Enforce account lockout after three failed attempts

Use biometric authentication only

Implement multi-factor authentication with a hardware token

A company has a web server that must be accessible from the internet. They want to protect it from application-layer attacks while also ensuring that legitimate traffic is not blocked. Which deployment should they choose?

A stateful firewall in front of the web server

A firewall and an IPS in series, with the IPS configured to alert only

What is the primary purpose of accounting in network security?

To determine what resources a user can access

To track user activities for auditing and accountability

To verify the identity of users

EC-CouncilNetwork Defense Essentials

Domain 1Objective 2

Network Security Controls and Protocols NDE Practice Questions (Page 6)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

45questions here

9free pages

10concepts

10 Concepts in This Objective

Network Security Controls Overview
Access Control Models
Authentication Mechanisms
Authorization and Accounting
Network Security Protocols
Firewalls and Intrusion Detection/Prevention
VPNs and Remote Access Security
Wireless Network Security
Network Segmentation and Isolation
Security Policies and Procedures

Questions 26–30

26application · medium
An organization needs to track which employees access a sensitive file server and what actions they perform. They also need to ensure that employees can only access files based on their job function. Which combination of controls should be implemented?
Select an answer first
27application · medium
A company wants to isolate its guest Wi-Fi network from the internal corporate network. They plan to use VLANs to segment the traffic. Additionally, they want to prevent guests from accessing internal servers even if they somehow connect to the corporate network. Which additional control should they implement?
Select an answer first
28application · medium
A company wants to strengthen remote access authentication for its administrators. They currently use only passwords. They require that even if a password is compromised, an attacker cannot gain access without a second factor. Which solution best meets this requirement?
Select an answer first
29expert · hard
A company has a web server that must be accessible from the internet. They want to protect it from application-layer attacks while also ensuring that legitimate traffic is not blocked. Which deployment should they choose?
Select an answer first
30foundation · easy
What is the primary purpose of accounting in network security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.