Managing Network Security GSLC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A hospital's network has a flat design where clinical workstations, the EHR database, and guest Wi-Fi all share the same broadcast domain. After a malware outbreak on a guest laptop, the infection spread to clinical systems. The security manager must prevent a recurrence without disrupting clinical operations. Which approach best addresses the root cause?

   • AInstall host-based antivirus on all clinical workstations and the EHR server.
   • BSegment the network into separate VLANs for guest, clinical, and server zones with firewall rules between them.
   • CDisable guest Wi-Fi access during business hours to reduce exposure.
   • DDeploy an intrusion prevention system at the internet edge to block malware before it enters the network.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security analyst notices repeated failed SSH login attempts from a single external IP address against a public-facing server. The attempts have been occurring for several hours and are increasing in frequency. The analyst wants to detect and respond to this activity. Which action is most appropriate as an immediate response?

   • AIgnore the attempts because they are common on the internet and do not indicate a real threat.
   • BBlock the IP address at the perimeter firewall and add a rule to the intrusion detection system to alert on similar patterns.
   • CChange the SSH port to a non-standard port to avoid the brute-force attempts.
   • DDisable SSH on the server until the source IP is identified.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the context of network security, which principle ensures that data has not been altered or tampered with during transmission?

   • AIntegrity
   • BConfidentiality
   • CAuthentication
   • DAvailability
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security analyst is reviewing network logs and notices that a server is sending large amounts of data to an external IP address during non-business hours. The server is not supposed to communicate externally. Which step should the analyst take first?

   • AVerify the source and destination of the traffic and check if the server has any legitimate reason for the communication.
   • BIgnore the traffic because it is outside business hours and may be a scheduled backup.
   • CImmediately block the external IP address at the firewall.
   • DDisconnect the server from the network to prevent data exfiltration.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following best describes the principle of availability in network security?

   • AEnsuring that data is accessible to authorized users when needed
   • BGuaranteeing that data is not modified by unauthorized parties
   • CVerifying the identity of users before granting access
   • DProtecting data from unauthorized disclosure
   Reveal Solution Discussion Select an answer first