Which of the following is a recommended practice for securing router management access?

Use Telnet for remote administration

Use SSH for remote administration

Allow management from any source IP

Disable all remote management protocols

An organization uses multiple SaaS applications. The security team needs to enforce data loss prevention policies on data uploaded to these apps, ensure that only compliant devices can access them, and provide visibility into user activity. The team wants a single solution that integrates with existing identity provider and device management systems. Which solution should be chosen?

Deploy a NAC for network access only

Deploy a network-based DLP only

Deploy a WAF in front of each SaaS app

Deploy a CASB that integrates with the identity provider and MDM

What is the primary purpose of Network Access Control (NAC)?

To encrypt all traffic on the network

To monitor network traffic for intrusions

To enforce security policies on devices before granting network access

To provide load balancing across network links

Systems Security Certified Practitioner

Domain 6Objective 5

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 5)

Part of the Network and Communication Security domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

12concepts

16%of the exam

Questions 21–25

21foundation · easy
Which NAC component checks a device's compliance with security policies, such as having up-to-date antivirus definitions, before granting network access?
Select an answer first
22foundation · easy
Which of the following is a recommended practice for securing router management access?
Select an answer first
23foundation · easy
Which switch security feature validates ARP packets to prevent ARP spoofing attacks?
Select an answer first
24expert · hard
An organization uses multiple SaaS applications. The security team needs to enforce data loss prevention policies on data uploaded to these apps, ensure that only compliant devices can access them, and provide visibility into user activity. The team wants a single solution that integrates with existing identity provider and device management systems. Which solution should be chosen?
Select an answer first
25foundation · easy
What is the primary purpose of Network Access Control (NAC)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

6.5 - Operate and Configure Network-Based Security Appliances and Services SSCP Practice Questions (Page 5)

Questions 21–25

Which NAC component checks a device's compliance with security policies, such as having up-to-date antivirus definitions, before granting network access?

Which of the following is a recommended practice for securing router management access?

Which switch security feature validates ARP packets to prevent ARP spoofing attacks?

What is the primary purpose of Network Access Control (NAC)?

Keep studying — Network and Communication Security