2.4 Explain the Purpose and Function of Common Network Security Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How does DNS security typically detect malicious DNS queries?

   • ABy requiring users to authenticate before making DNS queries
   • BBy decrypting all DNS traffic to inspect the content
   • CBy blocking all DNS queries from unknown IP addresses
   • DBy using threat intelligence feeds and machine learning to analyze DNS queries
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which statement best describes how an IPS handles network traffic?

   • AIt analyzes traffic in real time and can block malicious packets before they reach their destination
   • BIt only generates alerts for security analysts to review manually
   • CIt copies traffic to a separate device for offline analysis and reporting
   • DIt encrypts traffic to protect it from eavesdropping during transmission
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   In URL filtering, what is the purpose of assigning risk levels to URL categories?

   • ATo authenticate users before accessing websites
   • BTo help administrators decide which categories to allow, block, or warn on
   • CTo prioritize network bandwidth for high-risk sites
   • DTo encrypt the URL in the browser
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security architect is designing a defense-in-depth strategy. They want to add a control that can detect malicious domains before a user's browser even makes a connection. Which technology should they integrate?

   • AAn email security gateway to filter phishing emails.
   • BA web application firewall (WAF) to protect web servers.
   • CDNS security that inspects and blocks malicious DNS queries.
   • DAn IPS that inspects traffic after the DNS resolution.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A network administrator is evaluating an IPS solution for a data center. The requirement is to detect zero-day exploits that do not have known signatures. Which IPS detection mechanism is most effective for this requirement?

   • ASignature-based detection using a regularly updated signature database.
   • BPolicy-based detection that blocks all traffic not explicitly allowed.
   • CHeuristic analysis that examines packet headers for known malicious IP addresses.
   • DBehavioral analysis that establishes a baseline and flags deviations from normal traffic patterns.
   Reveal Solution Discussion Select an answer first