Proxy Servers, VPNs, and Secure Network Communication NDE Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A company hosts its public e-commerce website on a set of backend web servers. The security team wants to hide the internal server IPs from external clients, distribute incoming HTTPS traffic across the servers, and cache static content to reduce load. Which type of proxy should they deploy?

   • AReverse proxy placed in front of the web servers
   • BForward proxy placed at the network edge
   • COpen proxy configured as a transparent cache
   • DSOCKS proxy on each web server
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security administrator is configuring a remote-access VPN and wants to ensure that only authorized users can connect and that data cannot be read or modified in transit. Which combination of settings is required?

   • ANetwork address translation and port forwarding
   • BData compression and caching
   • CStrong encryption and mutual authentication
   • DContent filtering and access control lists
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company wants to allow remote employees to access internal web applications securely. They also want to enforce URL filtering and cache frequently accessed external content to reduce bandwidth. Which combined architecture best meets these needs?

   • ASSL/TLS VPN portal for all traffic and no proxy
   • BReverse proxy for internal apps and a site-to-site VPN for external traffic
   • CRemote-access VPN for internal apps and a forward proxy for external web traffic
   • DOpen proxy for internal apps and IPsec VPN for external web
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company deploys a reverse proxy to protect its internal web servers. The security team is concerned about the proxy becoming a single point of failure and a target for DDoS attacks. They also need to maintain the ability to inspect HTTPS traffic for malware. Which approach best addresses these concerns?

   • AUse a single reverse proxy with a large bandwidth pipe
   • BDisable SSL inspection to reduce load
   • CDeploy multiple reverse proxies in a high-availability cluster with SSL inspection
   • DPlace the reverse proxy outside the firewall
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company deploys a forward proxy with TLS interception to enforce content filtering. After deployment, employees using mobile devices report that many apps fail to connect, and the help desk is overwhelmed. The security team still wants to filter web traffic. What is the best course of action?

   • ADeploy the proxy's certificate to all managed devices and exclude non-browser apps from interception
   • BSwitch to a reverse proxy for all employee traffic
   • CDisable TLS interception and rely on DNS-based filtering
   • DBlock all non-browser traffic at the firewall
   Reveal Solution Discussion Select an answer first