An organization is adopting a SaaS application for file sharing. The security team needs visibility into user activity, the ability to enforce data loss prevention policies on files uploaded to the cloud, and the ability to block access from non-compliant devices. Which solution should be deployed?

Cloud access security broker (CASB)

What is the primary purpose of a Web Application Firewall (WAF)?

To provide load balancing across multiple web servers

To protect web applications by inspecting HTTP/HTTPS traffic and blocking application-layer attacks

To encrypt all traffic between a client and a web server

To filter traffic between network segments based on IP addresses and ports

Which of the following attacks is a Web Application Firewall (WAF) specifically designed to detect and block?

Denial of service (DoS) at the network layer

A security team is choosing between an IDS and an IPS for a high-throughput network. The network carries critical business traffic that cannot be interrupted. The team wants to detect and alert on suspicious activity without risking legitimate traffic being blocked. Which deployment is most appropriate?

Deploy an IDS in passive mode and review alerts

Deploy an IPS in inline mode with strict blocking rules

Deploy a firewall with IPS disabled

Systems Security Certified Practitioner

Domain 6Objective 5

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 2)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

12concepts

16%of the exam

Questions 6–10

6application · medium
An organization is adopting a SaaS application for file sharing. The security team needs visibility into user activity, the ability to enforce data loss prevention policies on files uploaded to the cloud, and the ability to block access from non-compliant devices. Which solution should be deployed?
Select an answer first
7foundation · easy
What is the primary purpose of a Web Application Firewall (WAF)?
Select an answer first
8foundation · easy
Which of the following attacks is a Web Application Firewall (WAF) specifically designed to detect and block?
Select an answer first
9expert · hard
A security team is choosing between an IDS and an IPS for a high-throughput network. The network carries critical business traffic that cannot be interrupted. The team wants to detect and alert on suspicious activity without risking legitimate traffic being blocked. Which deployment is most appropriate?
Select an answer first
10foundation · easy
Which DLP deployment mode monitors and controls data transfers on the network, such as email and web traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 2)

Questions 6–10

An organization is adopting a SaaS application for file sharing. The security team needs visibility into user activity, the ability to enforce data loss prevention policies on files uploaded to the cloud, and the ability to block access from non-compliant devices. Which solution should be deployed?

What is the primary purpose of a Web Application Firewall (WAF)?

Which of the following attacks is a Web Application Firewall (WAF) specifically designed to detect and block?

Which DLP deployment mode monitors and controls data transfers on the network, such as email and web traffic?

Keep studying — Network and Communication Security