A small business wants to protect its Windows workstations from malware, including viruses and Trojans. The owner is concerned about cost and wants a solution that requires minimal user interaction. Which approach is most appropriate?

Deploy centrally managed antivirus software with automatic signature updates and scheduled scans

Enable the Windows firewall and disable all other security software

Instruct users to manually download and run a free antivirus scanner each week

Use a network-based intrusion detection system (NIDS) to monitor for malware

What does a Host-based Intrusion Detection System (HIDS) monitor?

Activity on a single host or device, such as file changes, system logs, and process activity.

Traffic between different network segments.

The physical security of a data center.

Network traffic across the entire network to detect threats.

Which of the following is an example of a side-channel attack?

Intercepting network traffic to read unencrypted messages.

Sending a phishing email to trick a user into revealing their password.

Exploiting a buffer overflow vulnerability in a network service.

Measuring the time it takes for a system to perform cryptographic operations to infer the secret key.

A company's security team wants to detect malware that evades network-based detection by encrypting its communication. The team needs visibility into the behavior of individual endpoints, including file system changes and process execution. Which tool is best suited for this requirement?

Network-based intrusion detection system (NIDS)

Host-based intrusion detection system (HIDS)

A security analyst is evaluating tools to monitor network traffic for signs of an ongoing attack. The analyst needs a solution that can detect suspicious patterns and generate alerts, but the organization's policy requires that legitimate traffic not be blocked. Which type of tool should the analyst choose?

Host-based intrusion detection system (HIDS)

Intrusion prevention system (IPS)

Network-based intrusion detection system (NIDS)

Certified in Cybersecurity

Domain 4Objective 2

4.2 - Understand Network Threats and Attacks CC Practice Questions (Page 5)

Part of the Network Security domain, which accounts for 24% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 4–6 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

13concepts

24%of the exam

Questions 21–25

21application · easy
A small business wants to protect its Windows workstations from malware, including viruses and Trojans. The owner is concerned about cost and wants a solution that requires minimal user interaction. Which approach is most appropriate?
Select an answer first
22foundation · easy
What does a Host-based Intrusion Detection System (HIDS) monitor?
Select an answer first
23foundation · easy
Which of the following is an example of a side-channel attack?
Select an answer first
24application · medium
A company's security team wants to detect malware that evades network-based detection by encrypting its communication. The team needs visibility into the behavior of individual endpoints, including file system changes and process execution. Which tool is best suited for this requirement?
Select an answer first
25application · medium
A security analyst is evaluating tools to monitor network traffic for signs of an ongoing attack. The analyst needs a solution that can detect suspicious patterns and generate alerts, but the organization's policy requires that legitimate traffic not be blocked. Which type of tool should the analyst choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.