4.2 - Understand Network Threats and Attacks CC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a typical rule used by a firewall to filter traffic?

   • AMonitor system logs for unauthorized changes.
   • BAllow or block traffic based on source IP address and destination port.
   • CDetect and quarantine infected files.
   • DEncrypt data at rest on the hard drive.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company's employees frequently work from home and connect to the corporate network via VPN. A security analyst is concerned about man-in-the-middle (MITM) attacks on the VPN connection. The analyst proposes implementing mutual authentication, where both the client and the server verify each other's identity. What is the primary security benefit of this approach?

   • AIt eliminates the need for a firewall on the client's home network
   • BIt encrypts all traffic between the client and the server, making interception impossible
   • CIt ensures that the VPN connection is faster and more reliable
   • DIt prevents an attacker from impersonating the VPN server to intercept credentials
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does antivirus software typically detect known malware?

   • ABy analyzing network traffic for malicious patterns.
   • BBy blocking all incoming network connections.
   • CBy comparing files and processes against a database of known malware signatures.
   • DBy monitoring user behavior to identify suspicious actions.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does an Intrusion Prevention System (IPS) differ from an Intrusion Detection System (IDS)?

   • AAn IPS is a software tool, while an IDS is a hardware appliance.
   • BAn IPS uses signature-based detection, while an IDS uses anomaly-based detection.
   • CAn IPS is installed on a single host, while an IDS monitors the entire network.
   • DAn IPS can block malicious traffic, while an IDS only generates alerts.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary function of an Intrusion Prevention System (IPS)?

   • ATo actively block or prevent detected threats in real time.
   • BTo filter traffic based on static security rules.
   • CTo scan systems for vulnerabilities and report them.
   • DTo monitor and alert on suspicious activity without taking action.
   Reveal Solution Discussion Select an answer first