Question 1

Which of the following is an example of a security compliance best practice in the context of auditing network devices?

Options :

A : Configuring strong passwords for device access

B : Disabling all logging on network devices

C : Allowing all traffic to pass through the network devices

D : Using default configurations for network devices

Answer: A

Question 2

What is the purpose of a firewall?

Options :

A : To prevent unauthorized access to a network

B : To optimize network performance

C : To provide secure remote access

D : To detect and respond to security incidents

Answer: A

Question 3

In a security incident response scenario, a security analyst has discovered that a user account has been compromised and used to perform unauthorized activities on the network. Which of the following steps should the analyst take to mitigate the risk and prevent further unauthorized access?

Options :

A : Disable the compromised user account, reset the account password, and enable two-factor authentication for the account. Monitor the account activity for any suspicious behavior.

B : Leave the compromised user account enabled and change the account password. Monitor the account activity for any suspicious behavior.

C : Disable the compromised user account, reset the account password, and implement strict firewall rules to prevent unauthorized access to the network.

D : Leave the compromised user account enabled and implement transaction monitoring to detect any unauthorized activities performed by the account.

Answer: A

Question 4

Which of the following is a feature of a next-generation firewall?

Options :

A : Packet filtering

B : Intrusion detection system

C : Network address translation

D : Stateful inspection

Answer: B

Question 5

Which of the following best describes a common security threat known as phishing?

Options :

A : A type of cyberattack that involves sending fraudulent emails or messages to deceive individuals into revealing sensitive information

B : A method used by hackers to gain unauthorized access to a network by exploiting vulnerabilities in the system

C : A form of malware that spreads through email attachments and is designed to cause damage to computer systems

D : A technique where an attacker intercepts and modifies communications between two parties without their knowledge or consent

Answer: A

Confidently Practice Online with Free 100-160 Exam Cram

Buying Options: