CISA Network and Infrastructure Security 2

Question 1

Which of the following BEST reduces the risk of unauthorized wireless network access?

Accepted Answer

Using WPA3 with strong pre-shared keys and 802.1X authentication

Answer

Enabling WEP encryption on all access points

Answer

Broadcasting the SSID to help users locate the network

Answer

Placing access points near exterior walls for better signal

Question 2

When auditing a VPN implementation, an IS auditor should FIRST verify that:

Accepted Answer

Strong encryption algorithms and multi-factor authentication are enforced

Answer

VPN software licenses are current

Answer

All employees are required to use VPN regardless of location

Answer

VPN connection logs are deleted after 30 days

Question 3

A penetration test differs from a vulnerability assessment primarily because a penetration test:

Accepted Answer

Actively attempts to exploit discovered vulnerabilities

Answer

Only scans for known CVEs using automated tools

Answer

Generates a compliance report for auditors

Answer

Is conducted exclusively by internal staff

Question 4

Which firewall rule principle states that anything not explicitly permitted should be denied?

Accepted Answer

Default deny (implicit deny)

Answer

Default permit

Answer

Least privilege

Answer

Defense in depth

Question 5

An IS auditor reviewing network diagrams notices that production and development environments share the same network segment. The MAIN risk is:

Accepted Answer

Potential for development activity to compromise production systems

Answer

Slower network performance in production

Answer

Higher infrastructure costs for the organization

Answer

Difficulty in assigning IP addresses to new devices

Question 6

Which of the following is the BEST control for preventing DNS spoofing attacks?

Accepted Answer

Implementing DNSSEC to cryptographically sign DNS records

Answer

Disabling all external DNS queries

Answer

Using SNMP to monitor DNS traffic

Answer

Configuring DNS servers on the DMZ only