A company wants to allow employees working from home to securely access internal resources. The solution must encrypt all traffic between the employee's device and the corporate network. Which technology should be implemented?

Intrusion prevention system (IPS)

A company wants to provide remote access to employees using personal devices. They require that the remote device be encrypted and have a passcode enabled before it can connect. Which combination of controls should be implemented?

NAC and intrusion detection system (IDS)

VPN and network access control (NAC)

A network has a perimeter firewall, an internal firewall, and a critical database server. The security team wants to detect and block attacks targeting the database while minimizing latency for legitimate traffic. Where should an IPS be placed?

On the database server as a host-based IPS.

On a SPAN port of the core switch, monitoring all traffic.

Inline between the internal firewall and the database server.

At the perimeter, outside the firewall.

A network of honeypots designed to simulate a larger target environment

A type of intrusion detection system

A firewall rule that blocks all inbound traffic

Where should an intrusion prevention system (IPS) be placed to be most effective?

Inline at the network perimeter

On a network tap in passive mode

On the internal management network only

At the core switch in passive mode

EC-CouncilSOC Essentials

Domain 1Objective 3

Network Security Controls and Devices SCE Practice Questions (Page 9)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 63 practice questions to prepare you well beyond it. (estimate)

63questions here

13free pages

14concepts

14 Concepts in This Objective

Network security controls overview
Firewalls
Intrusion Detection Systems (IDS)
Intrusion Prevention Systems (IPS)
Unified Threat Management (UTM)
Next-Generation Firewalls (NGFW)
Virtual Private Networks (VPN)
Network Access Control (NAC)
Security Information and Event Management (SIEM)
Web and Email Security Gateways
Load Balancers and DDoS Protection
Honeypots and Honeynets
Security Zones and DMZ
Placement of Security Devices

Questions 41–45

41application · medium
A company wants to allow employees working from home to securely access internal resources. The solution must encrypt all traffic between the employee's device and the corporate network. Which technology should be implemented?
Select an answer first
42expert · hard
A company wants to provide remote access to employees using personal devices. They require that the remote device be encrypted and have a passcode enabled before it can connect. Which combination of controls should be implemented?
Select an answer first
43application · medium
A network has a perimeter firewall, an internal firewall, and a critical database server. The security team wants to detect and block attacks targeting the database while minimizing latency for legitimate traffic. Where should an IPS be placed?
Select an answer first
44foundation · easy
What is a honeynet?
Select an answer first
45foundation · easy
Where should an intrusion prevention system (IPS) be placed to be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.