Network Security Architecture Flashcards
6 cards from real CNDA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Network Security Architecture flashcards as text
Which network topology provides the highest redundancy but is also the most expensive to implement?
Answer: Full mesh topology
A full mesh topology connects every node to every other node, eliminating single points of failure but requiring the most links.
What is the primary security benefit of network time protocol (NTP) synchronization across all devices?
Answer: Ensures consistent timestamps for log correlation and forensic analysis
Synchronized time across devices ensures log entries can be accurately correlated during incident investigation.
A CNDA wants to protect against unauthorized wireless access points. Which control is MOST appropriate?
Answer: Deploying a wireless intrusion prevention system (WIPS)
A WIPS actively detects and can contain rogue access points that appear on the network.
Which protocol should be disabled on managed switches to prevent VLAN hopping attacks?
Answer: DTP (Dynamic Trunking Protocol)
Disabling DTP prevents an attacker from negotiating a trunk port and gaining access to multiple VLANs.
In network architecture, what does 'East-West traffic' refer to?
Answer: Traffic between servers within the same data center or cloud environment
East-West traffic is server-to-server communication within a data center, which is the primary path for lateral movement after a breach.
What is the purpose of a honeypot in a network defense architecture?
Answer: To lure and study attacker behavior in a controlled environment
A honeypot is a decoy system that attracts attackers, allowing defenders to observe techniques without risk to production assets.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- cert.eccouncil.org — Test delivery, eligibility, fees, renewal, score validity · verified Oct 2026