Which placement is most appropriate for a network-based intrusion detection system (IDS) to monitor traffic without affecting performance?

On the internal server directly

At the internet gateway in active mode

Inline between the firewall and the core switch

What is the primary function of an Intrusion Detection System (IDS)?

To encrypt network traffic between remote sites

To filter web content based on URL categories

To block malicious traffic in real time

To monitor network traffic and generate alerts on suspicious activity

Which capability is typically found in a Next-Generation Firewall (NGFW) but not in a traditional packet-filtering firewall?

Application identification and control

Network address translation (NAT)

A security analyst needs to detect signs of a potential brute-force attack against the company's web application. The analyst wants to see real-time alerts and correlate them with authentication logs from multiple servers. Which control should be deployed to meet this need?

Deploy a honeypot that mimics the web application and monitor it for login attempts.

Deploy an intrusion detection system (IDS) on the network segment hosting the web application and feed its alerts to a SIEM that also collects authentication logs.

Deploy a web application firewall (WAF) and configure it to block IP addresses after multiple failed logins.

Deploy a network access control (NAC) solution to block repeated failed login attempts at the network level.

EC-CouncilSOC Essentials

Domain 1Objective 3

Network Security Controls and Devices SCE Practice Questions (Page 7)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 63 practice questions to prepare you well beyond it. (estimate)

63questions here

13free pages

14concepts

14 Concepts in This Objective

Network security controls overview
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Unified Threat Management (UTM)
Next-Generation Firewalls (NGFW)
Virtual Private Networks (VPN)
Network Access Control (NAC)
Security Information and Event Management (SIEM)
Web and Email Security Gateways
Load Balancers and DDoS Protection
Honeypots and Honeynets
Security Zones and DMZ
Placement of Security Devices

Questions 31–35

31foundation · easy
Which placement is most appropriate for a network-based intrusion detection system (IDS) to monitor traffic without affecting performance?
Select an answer first
32foundation · easy
What is the primary function of an Intrusion Detection System (IDS)?
Select an answer first
33foundation · easy
Which capability is typically found in a Next-Generation Firewall (NGFW) but not in a traditional packet-filtering firewall?
Select an answer first
34application · medium
A security analyst needs to detect signs of a potential brute-force attack against the company's web application. The analyst wants to see real-time alerts and correlate them with authentication logs from multiple servers. Which control should be deployed to meet this need?
Select an answer first
35foundation · easy
Which threat is an email security gateway specifically designed to block?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.