Network Security Controls and Devices SCE Practice Questions (Page 11)

Questions 51–55

1. 51foundation · easy

   What is the primary function of a web security gateway?

   • ATo encrypt email messages
   • BTo provide VPN access for remote users
   • CTo filter malicious web content and enforce web usage policies
   • DTo balance traffic across web servers
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   What is the primary purpose of a Security Information and Event Management (SIEM) system?

   • ATo encrypt data at rest
   • BTo provide secure remote access to the network
   • CTo block malicious traffic at the network perimeter
   • DTo aggregate and analyze logs from multiple sources for security monitoring
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   Which category of network security controls is primarily designed to detect and alert on suspicious activity without actively blocking it?

   • ADetective controls
   • BCorrective controls
   • CDeterrent controls
   • DPreventive controls
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A company allows employees to connect personal laptops to the office network. The security team wants to ensure that only devices with up-to-date antivirus and a corporate image can access the internal network, while guests should only reach the internet. Which control should be implemented?

   • ASet up a honeypot to detect unauthorized devices.
   • BInstall a firewall that blocks all inbound traffic from personal laptops.
   • CUse a VPN for all internal network access.
   • DDeploy Network Access Control (NAC) with posture assessment and VLAN assignment.
   Reveal Solution Discussion Select an answer first
6. 55application · easy

   A security operations center (SOC) receives alerts from multiple IDS/IPS sensors, firewalls, and servers. Analysts are overwhelmed by the volume of alerts and need a single interface to correlate events and prioritize incidents. Which control should be deployed?

   • ADeploy additional IDS sensors to increase detection coverage.
   • BConfigure a load balancer to distribute alerts to analysts.
   • CUse a honeypot to divert attacks away from production systems.
   • DImplement a SIEM platform to aggregate and correlate logs from all sources.
   Reveal Solution Discussion Select an answer first