2.4 Explain the Purpose and Function of Common Network Security Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is implementing SSL/TLS decryption for outbound web traffic. They need to ensure that users' browsers trust the decryption process. What must be configured on the client devices?

   • ADisable certificate validation in the browser.
   • BConfigure the browser to use a different DNS server.
   • CSet the proxy to bypass decryption for all sites.
   • DInstall the proxy's CA certificate in the trusted root store.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which deployment mode places an IPS directly in the traffic path so it can block traffic?

   • AInline mode
   • BTap mode
   • CPassive mode
   • DOffline mode
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a DNS-based attack that DNS security aims to prevent?

   • AMan-in-the-middle attack on HTTP
   • BDenial of service on web servers
   • CCache poisoning
   • DSQL injection
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A security team is investigating a potential DNS cache poisoning attack. They notice that some users are being redirected to a malicious IP address when they request a legitimate domain. The DNS server logs show unusual responses from an external source. What is the most effective immediate response?

   • AFlush the DNS cache and implement DNSSEC to validate responses.
   • BChange the DNS server to a different public resolver.
   • CBlock the malicious IP address in the firewall.
   • DDisable DNS recursion to prevent external queries.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company wants to protect against malware that uses DNS to communicate with command-and-control (C2) servers. The security team has limited resources and wants a solution that provides early detection with minimal overhead. Which approach is most suitable?

   • AImplement full packet capture on all network traffic for forensic analysis.
   • BConfigure the firewall to block all outbound DNS traffic.
   • CUse an IPS with signature-based detection for known C2 patterns.
   • DDeploy a DNS security solution that uses threat intelligence to block known malicious domains.
   Reveal Solution Discussion Select an answer first