An organization wants to allow employees to use a specific SaaS application (e.g., Salesforce) but block other web applications that use the same port (443). The current firewall only filters by IP and port. Which control should be added to enforce this policy?

Use a VPN to restrict access to the SaaS application.

Deploy a next-generation firewall (NGFW) with application awareness.

Configure the existing firewall to allow all HTTPS traffic.

Install a honeypot to detect unauthorized web application usage.

An organization wants to block phishing emails and prevent users from accessing malicious websites. Which set of controls should be deployed?

VPN and network access control (NAC)

Load balancer and DDoS protection

Email security gateway and web security gateway

Firewall and intrusion detection system (IDS)

What is the primary purpose of a load balancer?

To distribute incoming traffic across multiple servers

To filter malicious web traffic

An organization wants to block employees from visiting known malicious websites and also prevent phishing emails from reaching inboxes. Which two controls should be deployed at the internet perimeter?

Use a honeypot to lure attackers away from the network.

Deploy a web security gateway and an email security gateway.

Set up a VPN for all internet traffic.

Install a stateful firewall with default-deny outbound rules.

An organization wants to block the use of a specific social media application over its network, even if the traffic uses non-standard ports. Which firewall type is best suited for this task?

Next-generation firewall (NGFW)

EC-CouncilSOC Essentials

Domain 1Objective 3

Network Security Controls and Devices SCE Practice Questions (Page 12)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 63 practice questions to prepare you well beyond it. (estimate)

63questions here

13free pages

14concepts

14 Concepts in This Objective

Network security controls overview
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Unified Threat Management (UTM)
Next-Generation Firewalls (NGFW)
Virtual Private Networks (VPN)
Network Access Control (NAC)
Security Information and Event Management (SIEM)
Web and Email Security Gateways
Load Balancers and DDoS Protection
Honeypots and Honeynets
Security Zones and DMZ
Placement of Security Devices

Questions 56–60

56application · medium
An organization wants to allow employees to use a specific SaaS application (e.g., Salesforce) but block other web applications that use the same port (443). The current firewall only filters by IP and port. Which control should be added to enforce this policy?
Select an answer first
57application · medium
An organization wants to block phishing emails and prevent users from accessing malicious websites. Which set of controls should be deployed?
Select an answer first
58foundation · easy
What is the primary purpose of a load balancer?
Select an answer first
59application · easy
An organization wants to block employees from visiting known malicious websites and also prevent phishing emails from reaching inboxes. Which two controls should be deployed at the internet perimeter?
Select an answer first
60application · medium
An organization wants to block the use of a specific social media application over its network, even if the traffic uses non-standard ports. Which firewall type is best suited for this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.