Communication and Network Security GISP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Why is network monitoring important for security?

   • AIt automatically patches vulnerabilities
   • BIt eliminates the need for firewalls
   • CIt encrypts all network traffic
   • DIt helps detect suspicious activity and potential security incidents
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A healthcare provider is implementing secure messaging for clinicians to discuss patient cases. The solution must ensure that messages are encrypted in transit and at rest, and that only authorized clinicians can read them. The provider also needs to be able to audit who accessed which messages. Which solution best meets these requirements?

   • AUse standard email with S/MIME encryption
   • BUse a shared network drive with folder permissions
   • CUse an end-to-end encrypted messaging platform that supports user authentication and provides audit logs of message access
   • DUse a public instant messaging app that supports encryption
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A remote employee needs to access internal resources from a public Wi-Fi network. The company requires that the employee's traffic be encrypted and that the employee authenticate with a company-issued certificate. Which VPN technology should the administrator configure?

   • ASSL/TLS VPN using client certificates for authentication
   • BIPsec VPN with pre-shared keys
   • CA web proxy that forwards HTTP traffic
   • DA remote desktop protocol (RDP) connection over the internet
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which authentication standard is commonly used in enterprise wireless networks to provide per-user authentication via a RADIUS server?

   • A802.1X
   • BMAC filtering
   • CWEP
   • DWPA2-PSK
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security architect is designing a network for a critical industrial control system (ICS). The system must remain available at all times, but the security team is concerned about the risk of a denial-of-service (DoS) attack. The architect is considering deploying an IPS in inline mode. Which trade-off must be considered?

   • AAn inline IPS can block malicious traffic, but it introduces a single point of failure that could disrupt availability if the device fails
   • BAn inline IPS does not provide any protection against DoS attacks
   • CAn inline IPS requires no configuration and will automatically block all malicious traffic
   • DAn inline IPS will always degrade network performance, making it unsuitable for ICS environments
   Reveal Solution Discussion Select an answer first