M1 NETWORK DEFENSE

Which security management function is concerned with the inventory and control of hardware and software configurations of systems?

• configuration management

• vulnerability management

• risk management

• asset management

In a defense-in-depth approach, which three options must be identified to effectively defend a network against attacks? (Choose three.)

• threats to assets

• total number of devices that attach to the wired and wireless network

• past security breaches

• vulnerabilities in the system

• assets that need protection

Which device is usually the first line of defense in a layered defense-in-depth approach?

• access layer switch

• firewall

• edge router

• internal router

Which device in a layered defense-in-depth approach denies connections initiated from untrusted networks to internal networks, but allows internal users within an organization to connect to untrusted networks?

• IPS

• firewall

• access layer switch

• internal router

With the evolution of borderless networks, which vegetable is now used to describe a defense-in-depth approach?

• onion

• lettuce

• artichoke

• cabbage

What is the benefit of a defense-in-depth approach?

• The effectiveness of other security measures is not impacted when a security mechanism fails.

• Only a single layer of security at the network core is required.

• The need for firewalls is eliminated.

• All network vulnerabilities are mitigated.

Which tool can be used to gather information about the different types of traffic that exist in a network?

• RTP

• protocol analyzer

• application server

• QoS

What component of a security policy explicitly defines the type of traffic allowed on a network and what users are allowed and not allowed to do?

• remote access policies

• acceptable use policies

• identification and authentication policies

• password policies

Which section of a security policy is used to specify that only authorized individuals should have access to enterprise data?

• statement of scope

• statement of authority

• acceptable use policy

• campus access policy

• identification and authentication policy

An administrator discovers that a user is accessing a newly established website that may be detrimental to company security. What action should the administrator take first in terms of the security policy?

• Ask the user to stop immediately and inform the user that this constitutes grounds for dismissal.

• Immediately suspend the network privileges of the user.

• Create a firewall rule blocking the respective website.

• Revise the AUP immediately and get all users to sign the updated AUP.