Which capability is a key feature of a SIEM system?

Deep packet inspection of all traffic

Correlation of events from different sources

Blocking malicious IP addresses

A company hosts a public web application that must allow HTTPS traffic from any source, but the security team wants to block SQL injection attempts in the HTTP payload and also restrict outbound DNS queries to the corporate DNS server. The existing network firewall is a stateful packet-filtering device. Which control should the team add to meet both requirements?

Place an IDS inline between the router and the firewall and configure it to drop malicious packets.

Configure the existing firewall to allow only HTTPS and block all outbound UDP traffic.

Replace the firewall with a packet-filtering firewall that inspects port 80 and 443 traffic.

Deploy an application-layer gateway in front of the web server and configure egress rules on the existing firewall.

What is the primary purpose of a Virtual Private Network (VPN)?

To increase the speed of internet connections

To provide secure communication over a public network by encrypting traffic

To provide a public IP address for servers

To block all inbound traffic from the internet

EC-CouncilSOC Essentials

Domain 1Objective 3

Network Security Controls and Devices SCE Practice Questions (Page 13)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 63 practice questions to prepare you well beyond it. (estimate)

63questions here

13free pages

14concepts

14 Concepts in This Objective

Network security controls overview
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Unified Threat Management (UTM)
Next-Generation Firewalls (NGFW)
Virtual Private Networks (VPN)
Network Access Control (NAC)
Security Information and Event Management (SIEM)
Web and Email Security Gateways
Load Balancers and DDoS Protection
Honeypots and Honeynets
Security Zones and DMZ
Placement of Security Devices

Questions 61–63

61foundation · easy
Which capability is a key feature of a SIEM system?
Select an answer first
62application · medium
A company hosts a public web application that must allow HTTPS traffic from any source, but the security team wants to block SQL injection attempts in the HTTP payload and also restrict outbound DNS queries to the corporate DNS server. The existing network firewall is a stateful packet-filtering device. Which control should the team add to meet both requirements?
Select an answer first
63foundation · easy
What is the primary purpose of a Virtual Private Network (VPN)?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Network Security Controls and Devices SCE Practice Questions (Page 13)

Questions 61–63

Which capability is a key feature of a SIEM system?

What is the primary purpose of a Virtual Private Network (VPN)?

Keep studying — Computer Network and Security Fundamentals