Question 1

A computer in a local network is configured with an IP address of 192.168.1.10 and a subnet mask of 255.255.255.0. It attempts to communicate with a web server at 203.0.113.5. What role does the default gateway play in this communication?

Options :

A : The default gateway blocks packets that are not explicitly permitted by a local firewall rule.

B : The default gateway assigns a new IP address to the computer for external communication.

C : The default gateway forwards packets destined for IP addresses outside the local subnet.

D : The default gateway resolves the domain name of the web server into its IP address.

Answer: C

Question 2

Which of the following best describes how a Security Information and Event Management (SIEM) system improves security operations?

Options :

A : SIEM tools detect malware and automatically remove infected files from endpoints.

B : SIEM tools provide log aggregation, correlation, and alerting to identify threats in real time.

C : SIEM tools replace the need for manual threat hunting by automating all security tasks.

D : SIEM tools passively collect logs without analyzing them, ensuring compliance.

Answer: B

Question 3

An organization is implementing endpoint security for its remote workforce. The solution must include encryption, device compliance checks, and protection against phishing. Which solution best meets these requirements?

Options :

A : Endpoint Protection Platform (EPP)

B : Next-Generation Firewall (NGFW)

C : Security Information and Event Management (SIEM)

D : Unified Threat Management (UTM)

Answer: A

Question 4

An organization implements a new cloud-based collaboration platform. The SOC team notices a lack of visibility into activities on the platform, increasing the risk of data breaches. What should the SOC team prioritize to improve visibility in this context?

Options :

A : Use native security features of the collaboration platform, such as logging and monitoring APIs.

B : Increase the number of access controls to limit platform usage.

C : Rely on employee reports to detect suspicious activity on the platform.

D : Monitor only administrative accounts to save on resource usage.

Answer: A

Question 5

Which of the following best describes the primary function of a Data Loss Prevention (DLP) system in network security?

Options :

A : Encrypting data at rest and in transit to protect it from unauthorized access.

B : Detecting and blocking unauthorized attempts to transmit sensitive data outside the organization.

C : Blocking malicious incoming traffic from reaching the organization-s internal network.

D : Monitoring user activity to identify suspicious behavior based on login patterns.

Answer: B

Confidently Practice Online with Free Cybersecurity-Apprentice Exam Cram

Buying Options: