CCISO Core IT Security 3

Question 1

Which network security device inspects traffic at the application layer and can make forwarding decisions based on the content of HTTP requests?

Accepted Answer

Web Application Firewall (WAF)

Answer

A WAF operates at Layer 7 and inspects HTTP/HTTPS content to detect and block application-layer attacks like SQL injection and XSS.

Question 2

An IDS generates an alert for traffic that is actually legitimate business activity. This is an example of which type of IDS error?

Accepted Answer

False positive

Answer

A false positive occurs when an IDS incorrectly identifies benign traffic as malicious, triggering an unnecessary alert.

Question 3

A CISO wants to test the organization's security posture by simulating a real-world attack with full knowledge of internal systems. Which assessment type should be used?

Accepted Answer

White-box penetration test

Answer

A white-box test gives the tester full knowledge of internal architecture, source code, and configurations to conduct a thorough assessment.

Question 4

Which secure network architecture places public-facing servers in an isolated segment that is separate from both the internal network and the internet?

Accepted Answer

DMZ (Demilitarized Zone)

Answer

A DMZ isolates public-facing servers so that if compromised, attackers cannot directly reach the internal corporate network.

Question 5

An organization implements PKI to manage digital certificates. Which entity is responsible for issuing and revoking certificates within the PKI hierarchy?

Accepted Answer

Certificate Authority (CA)

Answer

The CA is the trusted entity that issues digital certificates and maintains revocation records within the PKI trust hierarchy.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Core IT Security 3