WorksheetsNetwork Security Appliances
Total questions: 12
Worksheet time: 7mins
The security policies in a manufacturing company prohibit the transmission of customer information. However, a security administrator has received an alert that credit card numbers were transmitted as an email attachment. Which of the following MOST accurately describes the source of this alert message?
IPS
DLP
SMTP
IPsec
A shipping company stores information in small regional warehouses around the country. The company keeps an IPS online at each warehouse to watch for suspicious traffic patterns. Which of the following would BEST describe the security control used at the warehouse?
Preventive
Compensating
Physical
Detective
A security administrator is reviewing a report that shows a number of devices on internal networks attempting to connect with servers in the data center network. Which of the following security controls should the administrator add to prevent internal systems from accessing data center devices?
VPN
IPS
NAT
ACL
All firewalls contain this feature
Packet filtering
Intrusion prevention
Stateful inspection
Deep packet inspection
There was a concern from the senior management that company employees were wasting too much time on entertainment websites instead of focusing on their work. The senior management requested IT to enable web content filtering. What should the IT team consider before enabling DPI? (select all that apply)
Potential of high hardware utilization, test to see if it will impact network performance
If the NGFW supports SSL inspection to filter HTTPS requests
If their ISP supports the routing of packets that have been previously altered by the NGFW
All of the above
True or false: A NIDS provides passive protection against security threats.
True
False
What is commonly found in a UTM firewall?
Intrusion detection or prevention
Packet filtering
Access control
All of the above
What are cons of using a signature-based malware detection versus heuristic? (select all that apply)
Many attacks do not conform to specific signatures
Signatures require more system resources than heuristic learning
There are more false positives
Signatures must be updated often
You deployed a web proxy that enables client computers on the LAN to connect to websites and secure websites on the Internet.
What type of proxy is this?
Reverse
Non-transparent
Forward
Routing
What BEST describes implicy/implicit deny?
Block everything except what I allow
Block everything and queue packets for manual inspection
Allow everything but block traffic if it trips an IPS
Allow everything except what I block
What does the O in SOAR stand for?
Orchestration
Organizational
Omnimous
Operation
A SIEM + ..... what? = Next-gen SIEM
SOAR
UTM
NGFW
VPN
