A company has a WAN link that is frequently congested. The network team wants to ensure that VoIP traffic gets priority over file transfers, but also wants to reduce the total amount of data sent over the link. The solution must be implemented on the existing routers without adding new hardware. Which approach should be taken?

Enable stateful inspection on the routers

Deploy a load balancer to distribute traffic

Implement traffic shaping with rate limiting only

Configure QoS to prioritize VoIP and enable WAN optimization features on the routers

What is the primary difference between a network-based intrusion detection system (IDS) and an intrusion prevention system (IPS)?

An IDS is only for network traffic, while an IPS is only for host traffic

An IDS is deployed inline, while an IPS is deployed passively

An IDS uses only signature-based detection, while an IPS uses only anomaly-based detection

An IDS monitors traffic and generates alerts, while an IPS can actively block malicious traffic

A network administrator needs to restrict management access to a router so that only the IT department's subnet can SSH into it. Which configuration should be applied on the router?

Disable all remote management and use console only

Use SNMPv3 with a community string

Enable Telnet and restrict it with an ACL

Configure SSH and apply an ACL that permits only the IT subnet to the management interface

Systems Security Certified Practitioner

Domain 6Objective 5

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 4)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

12concepts

16%of the exam

Questions 16–20

16expert · hard
A company has a WAN link that is frequently congested. The network team wants to ensure that VoIP traffic gets priority over file transfers, but also wants to reduce the total amount of data sent over the link. The solution must be implemented on the existing routers without adding new hardware. Which approach should be taken?
Select an answer first
17foundation · easy
What is the primary difference between a network-based intrusion detection system (IDS) and an intrusion prevention system (IPS)?
Select an answer first
18foundation · easy
Which switch security mechanism is used to prevent MAC flooding attacks by limiting the number of MAC addresses that can be learned on a port?
Select an answer first
19foundation · easy
Which router security feature is used to filter traffic based on source and destination IP addresses, protocols, and port numbers?
Select an answer first
20application · medium
A network administrator needs to restrict management access to a router so that only the IT department's subnet can SSH into it. Which configuration should be applied on the router?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 4)

Questions 16–20

What is the primary difference between a network-based intrusion detection system (IDS) and an intrusion prevention system (IPS)?

Which switch security mechanism is used to prevent MAC flooding attacks by limiting the number of MAC addresses that can be learned on a port?

Which router security feature is used to filter traffic based on source and destination IP addresses, protocols, and port numbers?

A network administrator needs to restrict management access to a router so that only the IT department's subnet can SSH into it. Which configuration should be applied on the router?

Keep studying — Network and Communication Security