A network engineer is troubleshooting a performance issue on a core switch. The switch's CPU usage is consistently high, and data forwarding is slow. The engineer suspects that excessive management traffic (e.g., SNMP polls, SSH sessions) is overwhelming the control plane. Which solution should be implemented?

Implement control plane policing to rate-limit management traffic to the control plane.

Increase the switch's CPU priority for management traffic.

Move all management traffic to the data plane to reduce control plane load.

Disable all management protocols and use only console access.

What is the primary function of an Access Control List (ACL) on a network device?

To encrypt traffic between two networks

To authenticate users before they access the network

To filter traffic based on defined criteria

To provide redundancy in case of link failure

What is micro-segmentation?

A protocol for secure remote access

A method to increase network bandwidth

A technique to divide a network into very small, isolated segments

A type of firewall that only inspects packet headers

A firewall has three interfaces: one connected to the internet, one to the internal network, and one to a DMZ. How many zones should be configured to properly segment these networks?

Two zones: one for the internet and one for the internal network

Three zones: one for each interface

Four zones: one for each interface plus a default zone

Systems Security Certified Practitioner

Domain 6Objective 4

6.4 - Manage Network Security SSCP Practice Questions (Page 4)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

8concepts

16%of the exam

Questions 16–20

16foundation · easy
A network security appliance is connected to a switch using a port that receives a copy of all traffic passing through the switch. This placement is BEST described as which of the following?
Select an answer first
17expert · hard
A network engineer is troubleshooting a performance issue on a core switch. The switch's CPU usage is consistently high, and data forwarding is slow. The engineer suspects that excessive management traffic (e.g., SNMP polls, SSH sessions) is overwhelming the control plane. Which solution should be implemented?
Select an answer first
18foundation · easy
What is the primary function of an Access Control List (ACL) on a network device?
Select an answer first
19foundation · easy
What is micro-segmentation?
Select an answer first
20foundation · easy
A firewall has three interfaces: one connected to the internet, one to the internal network, and one to a DMZ. How many zones should be configured to properly segment these networks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

6.4 - Manage Network Security SSCP Practice Questions (Page 4)

Questions 16–20

A network security appliance is connected to a switch using a port that receives a copy of all traffic passing through the switch. This placement is BEST described as which of the following?

What is the primary function of an Access Control List (ACL) on a network device?

What is micro-segmentation?

A firewall has three interfaces: one connected to the internet, one to the internal network, and one to a DMZ. How many zones should be configured to properly segment these networks?

Keep studying — Network and Communication Security