CISSP Communication and Network Security 4

Question 1

Which firewall architecture places a screened subnet (DMZ) between two firewalls to isolate public-facing servers?

Accepted Answer

Screened subnet (dual-firewall DMZ) architecture

Answer

The screened subnet architecture uses two firewalls creating a DMZ between them, isolating public services from the internal network even if the outer firewall is compromised.

Question 2

An IDS generates an alert for a known attack signature, but investigation reveals no actual attack occurred. This scenario is BEST described as:

Accepted Answer

False positive

Answer

A false positive occurs when an IDS alerts on benign activity that matches an attack signature, incorrectly indicating an attack took place.

Question 3

What is the MAIN security purpose of implementing Private VLANs (PVLANs)?

Accepted Answer

Isolate hosts within the same VLAN from communicating directly with each other

Answer

PVLANs use isolated, community, and promiscuous port types to restrict lateral communication between hosts sharing the same IP subnet.

Question 4

Which wireless authentication protocol is considered the MOST secure option for enterprise WPA3 deployments?

Accepted Answer

WPA3-Enterprise with 192-bit mode (CNSA Suite)

Answer

WPA3-Enterprise in 192-bit mode uses CNSA Suite algorithms (GCMP-256, BIP-GMAC-256, ECDHE) providing the highest security for wireless enterprise authentication.

Question 5

A security architect needs to ensure that a cloud-hosted application's API traffic is protected from volumetric DDoS attacks. Which solution is MOST appropriate?

Accepted Answer

Use a cloud-based DDoS scrubbing service or CDN with DDoS mitigation

Answer

Cloud-based DDoS scrubbing services absorb and filter volumetric attacks upstream, before traffic reaches the application, providing scalable mitigation beyond on-premises capacity.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Communication and Network Security 4