Network, Endpoint, and Data Security CISA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company issues corporate-owned laptops to employees who work remotely. The laptops contain sensitive customer data. The security team wants to ensure that if a laptop is stolen, the data cannot be read. Which control is most important?

   • AImplement a DLP solution that monitors file transfers.
   • BEnable full-disk encryption on the laptops.
   • CRequire a BIOS password on the laptops.
   • DInstall a host-based firewall on the laptops.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A manufacturing company has deployed hundreds of IoT sensors on the factory floor. The sensors have default credentials and cannot be patched. The security team wants to reduce the risk of these devices being compromised and used to attack the corporate network. Which control is most effective?

   • APlace the IoT sensors on a separate network segment with strict firewall rules.
   • BChange the default credentials on each sensor.
   • CDeploy an antivirus agent on each sensor.
   • DDisable the sensors' network access entirely.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A hospital allows physicians to use personal smartphones to access patient records through a web portal. The security team is concerned about data leakage if a device is lost or stolen. Which control should be implemented to best protect the patient data on these devices?

   • ARequire a strong password on each device and enforce a screen lock timeout.
   • BEnable two-factor authentication (2FA) for the web portal.
   • CDeploy a mobile device management (MDM) solution that can remotely wipe the device.
   • DInstall a mobile antivirus app on each device.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A small business wants to secure its office Wi-Fi network. They currently use WEP because some older printers only support it. The business is concerned about unauthorized access. Which action should they take?

   • AUpgrade to WPA2 or WPA3 and replace or isolate the older devices that cannot support it.
   • BDisable SSID broadcast to hide the network.
   • CKeep WEP but enable MAC address filtering to restrict access.
   • DIncrease the WEP key length to 128 bits.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company runs a multi-tenant virtualized environment where different business units share the same hypervisor. The security team is concerned about the risk of one tenant sniffing another tenant's network traffic. Which control should they implement to mitigate this risk?

   • AConfigure virtual LANs (VLANs) to segment traffic between tenants.
   • BEncrypt all traffic between VMs using IPsec.
   • CUse a virtual firewall on each VM.
   • DEnable promiscuous mode on the virtual switches.
   Reveal Solution Discussion Select an answer first