Managing Network Security GSLC Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A company is evaluating a zero trust architecture to replace its traditional perimeter-based security model. The CISO wants to ensure that the new architecture reduces the risk of lateral movement. Which implementation is most aligned with zero trust principles?

   • AIncrease the use of network access control (NAC) to verify device compliance before allowing network entry.
   • BDeploy a next-generation firewall at the internet edge and rely on it to block malicious traffic.
   • CUse a VPN for all remote access and assume the internal network is trusted.
   • DImplement micro-segmentation and require authentication and authorization for every access request, regardless of source.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which principle is best described as granting users only the permissions necessary to perform their job functions?

   • AFail-safe defaults
   • BSeparation of duties
   • CDefense-in-depth
   • DLeast privilege
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A company allows employees to work remotely. The security team needs to ensure that remote workers can securely access internal applications while also enforcing that only company-managed devices can connect. Which solution best meets these requirements?

   • AImplement a VPN that requires certificate-based authentication and verify that the device is compliant with the company's security policy before granting access.
   • BExpose the internal applications directly to the internet and rely on strong passwords for authentication.
   • CProvide employees with a list of public IP addresses that are allowed to access internal applications.
   • DUse a remote desktop gateway without additional authentication controls.
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A company is updating its network security policy. The policy must ensure that employees do not connect unauthorized devices to the corporate network. Which control should be included in the policy to enforce this requirement?

   • AMonitor network traffic for unusual activity and respond to incidents.
   • BRequire network access control (NAC) that checks device compliance before allowing connection to the network.
   • CPost a notice that unauthorized devices are prohibited and rely on employee compliance.
   • DUse a strong Wi-Fi password to prevent outsiders from connecting.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   What is the primary function of an intrusion prevention system (IPS) in a network?

   • ATo detect and block malicious traffic in real time
   • BTo encrypt data transmitted between two endpoints
   • CTo filter traffic based on IP addresses and ports
   • DTo authenticate users before granting network access
   Reveal Solution Discussion Select an answer first