A security operations center (SOC) receives thousands of alerts daily from various security tools. Analysts are overwhelmed and missing critical incidents. Which control should be implemented to reduce alert fatigue and improve incident detection?

Deploy more intrusion detection systems (IDS) to increase coverage.

Deploy a SIEM with correlation rules to aggregate and prioritize alerts.

Deploy a network access control (NAC) solution to block non-compliant devices.

Deploy a load balancer to distribute alerts to different analysts.

A company wants to block employees from using peer-to-peer file sharing applications, but some employees need to use a legitimate business application that also uses the same port range. The security team needs to enforce this policy without disrupting the legitimate application. Which control should be used?

Deploy an NGFW with application identification and allow/deny rules based on application signatures.

Configure a stateful firewall to block the entire port range used by P2P.

Use a web security gateway to filter P2P traffic.

Set up a honeypot to detect P2P usage.

Which technology is used by VPNs to encapsulate and encrypt data for secure transmission?

Network Address Translation (NAT)

Dynamic Host Configuration Protocol (DHCP)

How does an IPS block malicious traffic?

By sending a TCP reset to the source and destination

By dropping packets that match malicious signatures

By quarantining the infected host from the network

By updating the firewall rules on the perimeter firewall

EC-CouncilSOC Essentials

Domain 1Objective 3

Network Security Controls and Devices SCE Practice Questions (Page 1)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 63 practice questions to prepare you well beyond it. (estimate)

63questions here

13free pages

14concepts

14 Concepts in This Objective

Network security controls overview
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Unified Threat Management (UTM)
Next-Generation Firewalls (NGFW)
Virtual Private Networks (VPN)
Network Access Control (NAC)
Security Information and Event Management (SIEM)
Web and Email Security Gateways
Load Balancers and DDoS Protection
Honeypots and Honeynets
Security Zones and DMZ
Placement of Security Devices

Questions 1–5

1expert · hard
A security operations center (SOC) receives thousands of alerts daily from various security tools. Analysts are overwhelmed and missing critical incidents. Which control should be implemented to reduce alert fatigue and improve incident detection?
Select an answer first
2application · medium
A company wants to block employees from using peer-to-peer file sharing applications, but some employees need to use a legitimate business application that also uses the same port range. The security team needs to enforce this policy without disrupting the legitimate application. Which control should be used?
Select an answer first
3foundation · easy
Which security function is typically included in a Unified Threat Management (UTM) appliance?
Select an answer first
4foundation · easy
Which technology is used by VPNs to encapsulate and encrypt data for secure transmission?
Select an answer first
5foundation · easy
How does an IPS block malicious traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Network Security Controls and Devices SCE Practice Questions (Page 1)

Questions 1–5

A security operations center (SOC) receives thousands of alerts daily from various security tools. Analysts are overwhelmed and missing critical incidents. Which control should be implemented to reduce alert fatigue and improve incident detection?

Which security function is typically included in a Unified Threat Management (UTM) appliance?

Which technology is used by VPNs to encapsulate and encrypt data for secure transmission?

How does an IPS block malicious traffic?

Keep studying — Computer Network and Security Fundamentals