Network Security Controls and Devices SCE Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What feature distinguishes a Next-Generation Firewall (NGFW) from a traditional stateful firewall?

   • AIt performs deep packet inspection and is application-aware.
   • BIt only filters based on IP addresses and ports.
   • CIt uses a proxy server for all traffic.
   • DIt is a hardware-only device.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the primary function of Network Access Control (NAC)?

   • ATo encrypt all network traffic
   • BTo enforce security policies on devices before granting network access
   • CTo monitor network traffic for anomalies
   • DTo balance traffic across multiple servers
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A security architect must choose a firewall for a network that carries both internal traffic and traffic to a public web server. The firewall must be able to inspect application-layer payloads and block specific applications, while also maintaining high throughput. Which firewall type should be selected?

   • APacket-filtering firewall
   • BProxy firewall
   • CStateful firewall
   • DNext-generation firewall (NGFW)
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company allows remote employees to use their personal devices to connect to the corporate network via VPN. The security team wants to ensure that only devices with full-disk encryption and a patched OS can access internal resources. However, some employees use devices that cannot be centrally managed. Which approach best balances security and usability?

   • AImplement NAC that checks device posture before granting VPN access, and quarantine non-compliant devices to a restricted network.
   • BRequire all employees to use company-issued laptops for VPN access.
   • CDisable VPN access for all personal devices.
   • DAllow all VPN connections but monitor for non-compliant devices.
   Reveal Solution Discussion Select an answer first
6. 40application · easy

   A small business with a limited IT budget wants to replace several separate security appliances (firewall, antivirus gateway, web filter, and email filter) with a single device that provides all these functions. Which solution best meets this requirement?

   • ASet up a honeynet to attract and analyze malicious traffic.
   • BUse a load balancer to distribute traffic across multiple security appliances.
   • CInstall a SIEM to aggregate logs from all existing appliances.
   • DDeploy a Unified Threat Management (UTM) appliance at the network perimeter.
   Reveal Solution Discussion Select an answer first