4.2 - Secure Network Components CISSP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company is implementing endpoint security. They want to ensure that all endpoints are compliant with security policies before they can access the network. They also want to automatically remediate non-compliant devices. Which solution is most appropriate?

   • ADeploy a network-based IPS and block non-compliant devices based on their IP address.
   • BDeploy a NAC solution that integrates with the endpoint protection platform to enforce compliance and trigger remediation.
   • CDeploy a VPN and require users to authenticate before accessing the network.
   • DDeploy a host-based firewall on each endpoint and manually review logs.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A small business wants to protect its network from malware and unauthorized access. They have a mix of Windows and macOS computers. They want a solution that can be centrally managed and enforce security policies on each device. Which approach is most effective?

   • ADeploy an endpoint protection platform (EPP) with centralized management and integrate it with a NAC solution.
   • BInstall a standalone antivirus on each computer and configure the router's firewall.
   • CUse a network-based intrusion prevention system (IPS) only.
   • DEnable the built-in firewall on each computer and rely on user awareness training.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Why is endpoint security important for network-connected devices?

   • AIt replaces the need for network firewalls
   • BIt protects devices from malware and unauthorized access, preventing them from becoming a threat to the network
   • CIt ensures the physical security of the data center
   • DIt increases the speed of network connections
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which transmission medium provides the best protection against signal interception and electromagnetic interference due to its use of light?

   • ACoaxial cable
   • BUnshielded twisted pair (UTP) cable
   • CWireless radio frequency (RF)
   • DFiber-optic cable
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A hospital is deploying a network access control (NAC) solution. The security team requires that only managed, domain-joined workstations with up-to-date antivirus can connect to the internal network. However, the hospital also allows personal tablets on a separate guest Wi-Fi network. The NAC must enforce the policy without requiring agents on the guest devices. Which approach best meets these requirements?

   • AImplement a virtual NAC with 802.1X using PEAP-MSCHAPv2 for both corporate and guest networks, requiring users to enter domain credentials.
   • BUse a host-based firewall on each managed workstation and manually configure the guest Wi-Fi with WPA2-PSK.
   • CDeploy a physical NAC appliance inline on the corporate network and rely on MAC address filtering for the guest network.
   • DDeploy a virtual NAC that uses 802.1X with EAP-TLS for the corporate network and a captive portal for the guest network.
   Reveal Solution Discussion Select an answer first