Network Security Architecture GSLC Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A law firm has remote attorneys who need to access internal case management systems from home and while traveling. The firm wants to ensure that all remote connections are encrypted and that only authorized devices can connect. Which solution should be implemented?

   • AProvide remote desktop protocol (RDP) access directly to the case management servers over the internet.
   • BSet up a VPN concentrator with IPsec tunnels and require client certificates on each attorney's laptop.
   • CUse a web-based portal with HTTPS and require only a username and password.
   • DConfigure a site-to-site VPN between each attorney's home router and the office.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security operations center (SOC) is overwhelmed with alerts from multiple monitoring tools. The team wants to reduce false positives and improve the accuracy of threat detection. Which approach should they take?

   • AIncrease the sensitivity of all detection tools to catch more threats.
   • BImplement a SIEM that correlates events from multiple sources and uses context to reduce false positives.
   • CDisable alerts from less critical tools to reduce noise.
   • DHire more analysts to manually review all alerts.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A small business wants to protect its internal network from internet threats. They currently have a single firewall and no other security controls. Which addition would best improve their defense-in-depth posture?

   • AReplace the firewall with a more expensive model.
   • BMove all servers to the cloud to reduce on-premises risk.
   • CAdd an intrusion detection system (IDS) that monitors traffic on the internal network.
   • DDisable the firewall's logging to improve performance.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company has a remote workforce that needs to access internal resources. They are concerned about the security of remote access and want to ensure that only company-managed laptops can connect. Which solution should they implement?

   • AExpose internal applications through a web portal that requires multi-factor authentication.
   • BUse a site-to-site VPN from the employees' home routers to the corporate network.
   • CImplement a remote access VPN that requires a client certificate issued by the company's PKI, in addition to user credentials.
   • DUse a remote access VPN with only username and password authentication.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A hospital is implementing NAC to control access to its network. The NAC solution must support a mix of wired and wireless devices, including medical devices that do not support 802.1X. The security team wants to ensure that all devices are authenticated and compliant. Which approach should be taken for the medical devices?

   • ADisable NAC on the ports where medical devices are connected.
   • BRequire all medical devices to be upgraded to support 802.1X.
   • CUse MAC authentication bypass (MAB) for medical devices and place them in a separate VLAN with limited access.
   • DPlace medical devices on the same VLAN as employee computers for simplicity.
   Reveal Solution Discussion Select an answer first