A mid-sized company is moving its customer relationship management (CRM) system to a cloud provider. The company's security team is concerned about the provider's uptime guarantees and what happens if the provider experiences a major outage. Which document should the company review and negotiate to ensure the provider is contractually obligated to maintain a specific level of availability?

Business Associate Agreement (BAA)

Memorandum of Understanding (MOU)

Data Processing Agreement (DPA)

How does Network Access Control (NAC) help secure IoT devices on a network?

By providing firmware updates to IoT devices

By blocking all internet access for IoT devices

By encrypting all IoT device communications

By placing them on a separate VLAN with restricted access

A company is implementing Network Access Control (NAC) to manage all devices connecting to its corporate network. The security team wants to ensure that any device that does not have up-to-date antivirus software is automatically placed on a quarantine VLAN with limited access. Which NAC feature is required to achieve this?

Posture assessment and remediation

What is the primary purpose of a Service-Level Agreement (SLA) in a cloud service contract?

To specify the performance and availability guarantees provided by the service provider

To provide a detailed network topology of the cloud provider

To replace the need for a security policy

To define the security responsibilities of the customer

Certified in Cybersecurity

Domain 4Objective 3

4.3 - Understand Network Security Infrastructure CC Practice Questions (Page 4)

Part of the Network Security domain, which accounts for 24% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

24%of the exam

Questions 16–20

16application · medium
A mid-sized company is moving its customer relationship management (CRM) system to a cloud provider. The company's security team is concerned about the provider's uptime guarantees and what happens if the provider experiences a major outage. Which document should the company review and negotiate to ensure the provider is contractually obligated to maintain a specific level of availability?
Select an answer first
17foundation · easy
How does Network Access Control (NAC) help secure IoT devices on a network?
Select an answer first
18application · medium
A company is implementing Network Access Control (NAC) to manage all devices connecting to its corporate network. The security team wants to ensure that any device that does not have up-to-date antivirus software is automatically placed on a quarantine VLAN with limited access. Which NAC feature is required to achieve this?
Select an answer first
19foundation · easy
What is the primary purpose of a Service-Level Agreement (SLA) in a cloud service contract?
Select an answer first
20foundation · easy
Which cloud deployment model combines on-premises infrastructure with public cloud services?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.

4.3 - Understand Network Security Infrastructure CC Practice Questions (Page 4)

Questions 16–20

How does Network Access Control (NAC) help secure IoT devices on a network?

What is the primary purpose of a Service-Level Agreement (SLA) in a cloud service contract?

Which cloud deployment model combines on-premises infrastructure with public cloud services?

Keep studying — Network Security