What is the primary security benefit of using Network Level Authentication (NLA) for Remote Desktop Protocol (RDP) connections?

It encrypts the remote desktop session using AES-256

It allows only administrators to connect remotely

It authenticates the user before a full remote desktop session is established

It prevents all man-in-the-middle attacks on the RDP connection

When establishing a VPN for third-party connectivity, what is the primary purpose of using strong authentication (e.g., certificates or multi-factor authentication)?

To verify the identity of the external entity before granting network access

To prevent denial-of-service attacks on the VPN gateway

To encrypt the data transmitted over the VPN

To monitor the external entity's network traffic

A retail chain connects its stores to the central office using a managed MPLS network. The security team wants to ensure that data transmitted between stores and the central office is protected from interception by the MPLS provider. Which control should be implemented?

Use VLAN segmentation within the MPLS network to isolate traffic.

Use a dedicated leased line instead of MPLS and assume it is secure.

Rely on the MPLS provider's service-level agreement for security.

Implement an IPsec VPN overlay on top of the MPLS network.

An oil exploration company uses a satellite link to communicate with an offshore drilling platform. The link carries operational telemetry and control commands. The security team is concerned about jamming and unauthorized interception of the satellite signal. Which combination of controls should be implemented?

Use frequency hopping spread spectrum (FHSS) and encrypt all traffic with AES-256.

Increase the satellite signal power to overcome potential jamming and use a simple checksum for integrity.

Implement a VPN over the satellite link using PPTP with MS-CHAPv2.

Use a directional antenna and rely on the physical alignment to prevent interception.

A news organization uses a satellite uplink to transmit live video from a remote location. The transmission is unencrypted, and the organization is concerned about interception. Which control should be implemented to protect the video feed?

Encrypt the video feed using AES-256 before transmission.

Compress the video feed to reduce the amount of data transmitted.

Use a higher transmission frequency to make interception more difficult.

Use a directional antenna to focus the signal on the receiving station.

Certified Information Systems Security Professional

Domain 4Objective 3

4.3 - Implement Secure Communication Channels According to Design CISSP Practice Questions (Page 3)

Part of the Communication and Network Security domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 3–5 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

6concepts

13%of the exam

Questions 11–15

11foundation · easy
What is the primary security benefit of using Network Level Authentication (NLA) for Remote Desktop Protocol (RDP) connections?
Select an answer first
12foundation · easy
When establishing a VPN for third-party connectivity, what is the primary purpose of using strong authentication (e.g., certificates or multi-factor authentication)?
Select an answer first
13application · medium
A retail chain connects its stores to the central office using a managed MPLS network. The security team wants to ensure that data transmitted between stores and the central office is protected from interception by the MPLS provider. Which control should be implemented?
Select an answer first
14application · medium
An oil exploration company uses a satellite link to communicate with an offshore drilling platform. The link carries operational telemetry and control commands. The security team is concerned about jamming and unauthorized interception of the satellite signal. Which combination of controls should be implemented?
Select an answer first
15application · medium
A news organization uses a satellite uplink to transmit live video from a remote location. The transmission is unencrypted, and the organization is concerned about interception. Which control should be implemented to protect the video feed?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.