Managing Network Security GSLC Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company's network team is configuring a VPN for remote employees. The security policy requires that data transmitted between remote employees and the corporate network remain confidential and unaltered. Which VPN configuration best meets these requirements?

   • AUse a GRE tunnel over the internet without additional security.
   • BUse SSL/TLS VPN without encryption but with certificate-based authentication.
   • CUse IPsec with ESP in tunnel mode and strong encryption and integrity algorithms.
   • DUse IPsec with AH only, which provides authentication but no encryption.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A financial services firm allows employees to connect personal laptops to the corporate network via a guest SSID. The security team discovers that some employees are using the guest SSID to access internal resources because the corporate SSID requires certificate-based authentication. The firm needs to maintain productivity while enforcing security. Which policy and control combination best addresses this issue?

   • ABlock all access from the guest SSID to internal resources and require employees to use the corporate SSID for work.
   • BKeep the guest SSID open but monitor all traffic from it for suspicious activity.
   • CAllow guest SSID users to access internal resources after a simple password prompt.
   • DRemove the guest SSID entirely and require all personal devices to connect via the corporate SSID.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is creating a network security policy that must be enforced consistently across all departments. The policy should define the acceptable use of the network and the consequences of violations. Which element is most important to include in the policy?

   • AA list of all employees' names and their job titles.
   • BA clear statement of management support and the consequences for non-compliance.
   • CA description of the company's disaster recovery plan.
   • DA detailed list of all network hardware and software in use.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which security model assumes that no user or device should be trusted by default, even if they are inside the network perimeter?

   • ADefense-in-depth
   • BLayered security
   • CPerimeter-based security
   • DZero trust architecture
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A multinational company must store customer personal data in the European Union to comply with GDPR data residency requirements. The company is designing a new network architecture for a customer-facing application. Which design decision best satisfies the compliance requirement while maintaining security?

   • AUse a VPN to connect a US-based data center to an EU office and claim the data is processed in the EU.
   • BHost the application in the US but store backups of the database in an EU region.
   • CEncrypt all data with strong encryption and argue that encrypted data is not subject to GDPR residency rules.
   • DHost the application and database in an EU-based cloud region with encryption in transit and at rest.
   Reveal Solution Discussion Select an answer first