CISA Network and Infrastructure Security

Question 1

Which network security device inspects packet headers and filters traffic based on predefined rules without examining packet content?

Accepted Answer

Packet-filtering firewall

Answer

A packet-filtering firewall examines IP headers, ports, and protocols but does not inspect the actual content of packets.

Question 2

A CISA auditor reviewing network segmentation should PRIMARILY verify that:

Accepted Answer

Critical systems are isolated in separate network zones

Answer

Proper network segmentation places critical systems in isolated zones to limit the blast radius of a breach.

Question 3

Which protocol provides encrypted remote administration of network devices and is preferred over Telnet?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts the entire session, whereas Telnet transmits credentials and data in plaintext.

Question 4

An Intrusion Prevention System (IPS) differs from an IDS primarily because an IPS can:

Accepted Answer

Actively block or drop malicious traffic in real time

Answer

An IPS sits inline with traffic and can actively block threats, whereas an IDS only monitors and alerts.

Question 5

During a network audit, an IS auditor finds that SNMP v1 is still in use. The PRIMARY concern is:

Accepted Answer

SNMP v1 community strings are transmitted in plaintext

Answer

SNMP v1 community strings (essentially passwords) are sent in cleartext, making them vulnerable to interception.

CISA - Certified Information Systems Auditor Practice Test