A web application experiences intermittent slowdowns during peak hours, and the security team suspects a volumetric DDoS attack. The application is hosted on a single server behind a firewall. Which combination of controls would best improve availability and mitigate the attack?

Deploy an IDS on the server to detect the attack and alert the team.

Use a VPN to hide the server's IP address.

Configure the firewall to block all UDP traffic.

Place a load balancer in front of multiple application servers and subscribe to a cloud-based DDoS protection service.

What is the purpose of a DMZ in network architecture?

To provide a secure area for internal employees only

To isolate public-facing services from the internal network

To monitor all network traffic for anomalies

To encrypt all traffic between sites

Which statement best describes how an IDS generates alerts?

It modifies firewall rules to block the source IP address.

It compares observed traffic against known attack signatures and raises an alert when a match is found.

It sends a copy of the traffic to a sandbox for analysis.

It automatically quarantines infected hosts from the network.

A company wants to ensure that only devices with up-to-date antivirus software and the latest operating system patches can connect to the corporate network. Which control should be implemented at the network edge?

Intrusion detection system (IDS)

A company wants to automatically block a known malware signature that appears in inbound network traffic, without requiring manual intervention. The solution must also allow legitimate traffic to continue flowing. Which control should be deployed inline?

Intrusion detection system (IDS)

Intrusion prevention system (IPS)

EC-CouncilSOC Essentials

Domain 1Objective 3

Network Security Controls and Devices SCE Practice Questions (Page 4)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 63 practice questions to prepare you well beyond it. (estimate)

63questions here

13free pages

14concepts

14 Concepts in This Objective

Network security controls overview
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Unified Threat Management (UTM)
Next-Generation Firewalls (NGFW)
Virtual Private Networks (VPN)
Network Access Control (NAC)
Security Information and Event Management (SIEM)
Web and Email Security Gateways
Load Balancers and DDoS Protection
Honeypots and Honeynets
Security Zones and DMZ
Placement of Security Devices

Questions 16–20

16application · medium
A web application experiences intermittent slowdowns during peak hours, and the security team suspects a volumetric DDoS attack. The application is hosted on a single server behind a firewall. Which combination of controls would best improve availability and mitigate the attack?
Select an answer first
17foundation · easy
What is the purpose of a DMZ in network architecture?
Select an answer first
18foundation · easy
Which statement best describes how an IDS generates alerts?
Select an answer first
19application · medium
A company wants to ensure that only devices with up-to-date antivirus software and the latest operating system patches can connect to the corporate network. Which control should be implemented at the network edge?
Select an answer first
20application · medium
A company wants to automatically block a known malware signature that appears in inbound network traffic, without requiring manual intervention. The solution must also allow legitimate traffic to continue flowing. Which control should be deployed inline?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.