Module 9. Network Security Appliances
and Technologies
You want to configure your firewall in a way that incoming traffic from a trusted source
address gets through at the fastest possible rate. Which rule action should you choose?
- answer Bypass
Which of the following correctly describes the related monitoring methodology? - answer
Anomaly monitoring is susceptible to false positives by relying on normal behaviors.
You are asked to install an enterprise network firewall that does not allow packets to get
through unless the internal endpoint made the initial request for the information. Which
firewall should you choose? - answer Stateful packet filtering firewall
As a cybersecurity expert, you were assigned to interview prospective employees. The
following statements are made by an interviewee on various network security
technologies. Which of the following should you accept as a correct statement? -
answer File integrity monitors are also used for detecting malware.
What does the spanning-tree protocol use to recognize the best path? - answerBPDU
In an interview, you were asked to analyze the following statements regarding secure
network designs and choose the correct one. Which of the following should you
choose? - answerA NAC examines an endpoint before it can connect to the network,
denying access to any device that does not meet specific criteria.
You are a cybersecurity trainer tutoring students who will be taking a cybersecurity
exam. A student has listed the following features of a honeypot on a practice test.
Which of the following will you consider as a correct statement? - answerUsing a
honeypot allows one to identify threat actor techniques and divert them from legitimate
servers.
Which of the following ensures alerts are generated when existing log data is changed?
- answerFile integrity monitor
What is a firewall? - answerA firewall is a network security system that monitors and
controls all incoming and outgoing traffic.
Which of the following is a specialized network security appliance? - answerHoneypot
and Technologies
You want to configure your firewall in a way that incoming traffic from a trusted source
address gets through at the fastest possible rate. Which rule action should you choose?
- answer Bypass
Which of the following correctly describes the related monitoring methodology? - answer
Anomaly monitoring is susceptible to false positives by relying on normal behaviors.
You are asked to install an enterprise network firewall that does not allow packets to get
through unless the internal endpoint made the initial request for the information. Which
firewall should you choose? - answer Stateful packet filtering firewall
As a cybersecurity expert, you were assigned to interview prospective employees. The
following statements are made by an interviewee on various network security
technologies. Which of the following should you accept as a correct statement? -
answer File integrity monitors are also used for detecting malware.
What does the spanning-tree protocol use to recognize the best path? - answerBPDU
In an interview, you were asked to analyze the following statements regarding secure
network designs and choose the correct one. Which of the following should you
choose? - answerA NAC examines an endpoint before it can connect to the network,
denying access to any device that does not meet specific criteria.
You are a cybersecurity trainer tutoring students who will be taking a cybersecurity
exam. A student has listed the following features of a honeypot on a practice test.
Which of the following will you consider as a correct statement? - answerUsing a
honeypot allows one to identify threat actor techniques and divert them from legitimate
servers.
Which of the following ensures alerts are generated when existing log data is changed?
- answerFile integrity monitor
What is a firewall? - answerA firewall is a network security system that monitors and
controls all incoming and outgoing traffic.
Which of the following is a specialized network security appliance? - answerHoneypot
