A small company's web server was compromised after an attacker exploited a vulnerability in a public-facing application. The security team wants to reduce the risk of similar attacks by limiting which traffic can reach the server. They also want to contain any future breach so the attacker cannot easily move to other internal systems. Which two measures should they implement together?

Apply the latest security patches to the web server and change all administrative passwords.

Disable SSID broadcast on the wireless network and require WPA3 for all clients.

Install a host-based intrusion detection system on the web server and enable full packet capture on the internal switch.

Place the web server in a DMZ and configure a stateful firewall to allow only HTTP/HTTPS traffic to it.

A hospital wants to separate its patient-monitoring devices from the general office network to prevent a malware infection on office computers from reaching the medical devices. They also want to allow only authorized staff to access the monitoring network. Which approach should they take?

Create a separate VLAN for the medical devices and use firewall rules to restrict access between VLANs

Install antivirus software on all office computers and hope it stops the malware

Use a single flat network but enable MAC address filtering on the switch

Disable the SSID broadcast on the office Wi-Fi

A company wants to allow external partners to access a specific web application on an internal server, but they do not want to expose any other internal services. They also want to ensure that the traffic is encrypted. Which solution should they use?

A network-based intrusion detection system (IDS) placed in front of the server

A stateful firewall that allows all inbound traffic to the internal network

A VPN that gives partners full access to the internal network

A reverse proxy that forwards HTTPS traffic to the internal web server

What is the main difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?

An IDS is a hardware device, while an IPS is software

An IDS encrypts traffic, while an IPS decrypts traffic

An IDS is used for wireless networks, while an IPS is used for wired networks

An IDS monitors and alerts, while an IPS can also block or prevent attacks

Why is network logging important for security?

It encrypts all network traffic

It blocks all malicious traffic automatically

It provides a record of events that can be analyzed to detect suspicious activity

LPI Security Essentials

Domain 4Objective 2

024.2 Network and Internet Security (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 6)

Part of the 024 Network and Service Security domain, which makes up ~19% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 26–30

26application · medium
A small company's web server was compromised after an attacker exploited a vulnerability in a public-facing application. The security team wants to reduce the risk of similar attacks by limiting which traffic can reach the server. They also want to contain any future breach so the attacker cannot easily move to other internal systems. Which two measures should they implement together?
Select an answer first
27application · medium
A hospital wants to separate its patient-monitoring devices from the general office network to prevent a malware infection on office computers from reaching the medical devices. They also want to allow only authorized staff to access the monitoring network. Which approach should they take?
Select an answer first
28application · medium
A company wants to allow external partners to access a specific web application on an internal server, but they do not want to expose any other internal services. They also want to ensure that the traffic is encrypted. Which solution should they use?
Select an answer first
29foundation · easy
What is the main difference between an intrusion detection system (IDS) and an intrusion prevention system (IPS)?
Select an answer first
30foundation · easy
Why is network logging important for security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.