A remote employee connects to the company network securely using their laptop from home. Which VPN model describes this connection?

A company VPN uses IPSec with ESP enabled. What benefit does ESP provide compared to AH?

A technician configures IPSec in tunnel mode. What happens in this mode?

A network administrator sets up VPN authentication using usernames and passwords stored on a central server. Which protocol supports this?

A remote worker uses RDP to access their office computer. What type of remote access method is this?

A company’s VPN encrypts all user internet traffic, not just corporate access. What is this configuration called?

An administrator uses SSH to manage routers over the internal LAN. What type of management is this?

A technician connects directly to a router’s console port using a serial cable to perform configurations. What kind of management method is this?

A remote worker connects to a VPN that only encrypts corporate traffic while local internet browsing bypasses the tunnel. What setup is this?

A network team deploys a DMVPN between multiple branches using IPSec. What routing protocol supports dynamic peer discovery in this setup?

Which tunneling protocol encapsulates IP packets within other IP packets and is often used with IPSec for VPNs?

An administrator enables IPSec transport mode between two hosts on the same LAN. Why is transport mode suitable here?

A company uses SSTP for remote access VPN connections. What is a key advantage of SSTP?

An engineer configures a management port on a router that uses HTTPS for configuration. What is this access type?

A remote user connects to the corporate VPN but cannot access internal resources. Logs show a mismatch in IPSec policies. What’s the fix?

An engineer sets up GRE tunnels between multiple branch routers, but traffic isn’t encrypted. Why?

A network manager wants to connect multiple branch offices via one central VPN hub. What topology is this?

A technician uses Telnet to manage a router remotely, but security policies forbid plaintext protocols. What protocol should replace it?

A data centre administrator wants to configure remote devices even if the primary network is down. Which access method ensures this?

A network administrator needs to ensure all changes to network devices are properly requested, approved, and documented before implementation. Which process enforces this control?

A system audit reveals outdated firmware on multiple switches. The administrator refers to a document listing the original configuration and software versions. What is this document called?

An IT manager reviews a report detailing the steps to be taken when a critical system becomes unavailable. What type of document is this?

During a security review, the team needs a diagram showing all switches, routers, and cabling between racks. What kind of diagram should they use?

A technician is organizing server racks and needs to confirm equipment height in “U” units. What is the standard height for one rack unit?

After a cyberattack, the company must determine whether to prioritize restoring operations or preserving forensic evidence. Which two plans address these needs?

A business performs a risk analysis to determine which systems are most critical to daily operations and require redundancy. Which process is this?

The HR department introduces a policy requiring new employees to complete cybersecurity training. What type of policy is this?

A company policy specifies that employees must not install unapproved applications on work devices. What kind of policy is this?

An employee stores sensitive files on a personal USB device, risking data leakage. Which control helps prevent this?

A company allows employees to use personal phones for work email. What policy should define acceptable usage and security requirements?

A remote worker connects to the corporate network using their laptop. Which policy ensures the remote device is up-to-date and secure?

Two companies share confidential data and sign an agreement prohibiting disclosure to third parties. What type of agreement is this?

A security officer designs a system that requires employees to swipe a badge before entering the server room. What is this an example of?

To prevent tailgating, a company installs a vestibule that allows only one person to enter at a time. What is this feature called?

A data centre uses cabinets that require smart card access for opening and have sensors to detect tampering. What type of control is this?

A warehouse installs cameras that automatically record activity when motion is detected. What system is being used?

An IT department tags equipment with RFID chips linked to the asset database. What advantage does this provide?

A company wants to detect if someone opens a network rack without authorization. Which system would help?

When disposing of old servers, the IT team performs a “secure erase” to remove data. What does this process ensure?

Before selling old storage drives, a company uses physical destruction instead of wiping. What is one advantage of this?

A company introduces mandatory security awareness sessions covering phishing and social engineering. What is the primary goal?

A water treatment plant uses programmable logic controllers (PLCs) and sensors to manage processes. What type of system is this?

An engineer connects industrial machines using a low-latency network designed for predictable communication. What network type is this?