4.3 - Understand Network Security Infrastructure CC Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of a technical control used in a defense in depth strategy?

   • ABackground checks
   • BFirewall rules
   • CAcceptable use policy
   • DSecurity awareness training
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which document is most likely to specify the detailed security responsibilities and expectations that each party must meet in a partnership?

   • ANetwork topology diagram
   • BAcceptable use policy
   • CMemorandum of Agreement (MOA)
   • DIncident response plan
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A university is deploying a new network access control (NAC) solution. The IT department wants to automatically place student-owned laptops on a restricted VLAN that only allows internet access, while placing faculty-owned, domain-joined computers on the full internal network. Which NAC capability is essential to achieve this policy?

   • AA DHCP server that assigns IP addresses based on the device's MAC address.
   • BDevice posture assessment and dynamic VLAN assignment based on the device's identity and compliance status.
   • CA VPN concentrator that requires all devices to authenticate before accessing the network.
   • DA firewall rule that blocks all traffic from unknown IP addresses.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In which cloud service model does the customer have the least responsibility for security of the underlying infrastructure?

   • ASoftware as a Service (SaaS)
   • BInfrastructure as a Service (IaaS)
   • CAll models have equal responsibility
   • DPlatform as a Service (PaaS)
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A company is adopting a hybrid cloud strategy. They plan to keep sensitive customer data on-premises and run a public-facing web application in the cloud. The security team is concerned about the security of data as it travels between the on-premises data center and the cloud provider. Which control is essential to protect this data in transit?

   • AA firewall on the on-premises network that blocks all outbound traffic to the cloud.
   • BA DMZ on the cloud side to isolate the web application.
   • CA site-to-site VPN with strong encryption (e.g., IPsec) between the on-premises network and the cloud provider.
   • DA Network Access Control (NAC) solution that authenticates all cloud users.
   Reveal Solution Discussion Select an answer first