A security architect is designing a perimeter for a financial application. The solution must block known malicious IPs, allow only established connections, and inspect HTTP traffic for SQL injection. The architect has a limited budget and can only deploy one appliance. Which approach best meets all requirements?

Deploy a network-based IDS only

Deploy a packet filtering firewall only

Deploy a stateful firewall with an IPS module

A network administrator is hardening a router that connects a branch office to the corporate network. The router must be managed remotely, but only from the corporate management subnet. Additionally, the router should log all management access attempts. Which configuration best meets these requirements?

Enable SSH, apply an ACL allowing only the management subnet, and configure logging for SSH sessions

Enable Telnet and apply an ACL allowing the management subnet

Enable SNMPv3 with a strong community string

Disable remote management and use console access only

A network engineer is configuring a switch that connects to a public area where users plug in personal devices. The engineer wants to prevent unauthorized devices from connecting and also prevent ARP spoofing. Which combination of switch features should be enabled?

Port security and Dynamic ARP Inspection (DAI)

VLAN segmentation and DHCP snooping

Port security and DHCP snooping

Systems Security Certified Practitioner

Domain 6Objective 5

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 3)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

12concepts

16%of the exam

Questions 11–15

11expert · hard
A security architect is designing a perimeter for a financial application. The solution must block known malicious IPs, allow only established connections, and inspect HTTP traffic for SQL injection. The architect has a limited budget and can only deploy one appliance. Which approach best meets all requirements?
Select an answer first
12expert · hard
A network administrator is hardening a router that connects a branch office to the corporate network. The router must be managed remotely, but only from the corporate management subnet. Additionally, the router should log all management access attempts. Which configuration best meets these requirements?
Select an answer first
13expert · hard
A network engineer is configuring a switch that connects to a public area where users plug in personal devices. The engineer wants to prevent unauthorized devices from connecting and also prevent ARP spoofing. Which combination of switch features should be enabled?
Select an answer first
14application · medium
A small business wants to replace multiple standalone security appliances with a single device to reduce cost and management overhead. The device must provide firewall, intrusion prevention, antivirus, and VPN capabilities. Which solution fits this requirement?
Select an answer first
15foundation · easy
Which firewall filtering method examines the state and context of a connection, such as whether a packet is part of an established session, to make allow or deny decisions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 3)

Questions 11–15

A network engineer is configuring a switch that connects to a public area where users plug in personal devices. The engineer wants to prevent unauthorized devices from connecting and also prevent ARP spoofing. Which combination of switch features should be enabled?

A small business wants to replace multiple standalone security appliances with a single device to reduce cost and management overhead. The device must provide firewall, intrusion prevention, antivirus, and VPN capabilities. Which solution fits this requirement?

Which firewall filtering method examines the state and context of a connection, such as whether a packet is part of an established session, to make allow or deny decisions?

Keep studying — Network and Communication Security