You are a network administrator and tasked with securing all switches in the company network. What is the most effective step to prevent unauthorized access through unused switch ports?

• Enable all switch ports for redundancy

• Disable unused ports and place them in a shutdown state

• Set up port forwarding on all open ports

• Enable dynamic port allocation on unused ports

Your organization is implementing 802.1X to improve network security. What primary function does 802.1X provide?

• Encrypts all user data sent over the network

• Authenticates devices before allowing network access

• Assigns VLANs dynamically based on IP address

• Scans all incoming traffic for malware signatures

You're configuring security rules to block access to streaming and social media websites on company computers. Which of the following features should you use?

• MAC address filtering

• Port security

• URL filtering

• ARP filtering

A company wants to ensure that only compliant and authenticated devices are allowed onto the internal network. Which solution best meets this goal?

• Port mirroring

• Network Access Control (NAC)

• Virtual LAN segmentation

• Access Control Lists (ACLs)

Which of the following is a primary concern when managing encryption keys in a secure network?

• Key length must match the password complexity policy

• Keys should be rotated periodically and stored securely

• Keys must be stored in the same location as the encrypted data

• Keys should be shared via email with trusted users

Your organization stores sensitive financial records. Which regulation is most likely to apply?

• HIPAA

• PCI DSS

• FERPA

• GDPR

A hacker exploits an unknown vulnerability in a system before the vendor can issue a patch. What is this called?

• Logic Bomb

• Legacy Attack

• Zero-Day Exploit

• Drive-by Download

A network engineer is tasked with securely connecting the headquarters with three remote branch offices. Each location has its own local network infrastructure. The engineer wants to ensure seamless communication between all locations without requiring end-user intervention. Which VPN configuration is BEST suited for this scenario?

• Client-to-Site VPN

• Clientless VPN

• Site-to-Site VPN

• Full Tunnel VPN

A junior technician suggests using PPTP to set up a new VPN connection due to its simplicity. The senior administrator objects to this plan. What is the MOST likely reason for rejecting PPTP?

• It is considered insecure and deprecated

• It lacks support for mobile devices

• It requires client software installation

• It cannot be used with split tunneling

To improve security, an organization requires administrators to access internal servers only through a designated secure system. This system has limited access and is tightly monitored. What is this type of secure access point called?

• Jump Box

• Bastion Host

• Split Tunnel

• VPN Gateway