CND CND Network Defense Infrastructure

Question 1

Which type of firewall inspects the state of active connections and uses this information to determine which network packets to allow through?

Accepted Answer

Stateful inspection firewall

Answer

Packet filtering firewall

Answer

Application-layer firewall

Answer

Circuit-level gateway

Question 2

What is the primary purpose of a DMZ (Demilitarized Zone) in network architecture?

Accepted Answer

To isolate public-facing servers from the internal network

Answer

To encrypt internal traffic

Answer

To monitor user activity logs

Answer

To provide redundant routing paths

Question 3

Which VPN protocol is widely considered the most secure for site-to-site enterprise VPN connections due to its robust authentication and encryption?

Accepted Answer

IPSec IKEv2

Answer

PPTP

Answer

L2TP/IPSec

Answer

SSTP

Question 4

What network segmentation technique uses logical partitioning within a single physical network to separate traffic by function or department?

Accepted Answer

VLAN

Answer

NAT

Answer

Proxy

Answer

Load balancing

Question 5

An IDS placed in-line with network traffic that can actively block detected threats is best described as:

Accepted Answer

IPS

Answer

NIDS

Answer

HIDS

Answer

SIEM

Question 6

Which proxy server type hides the identity of internal clients by substituting its own IP address in outbound requests?

Accepted Answer

Forward proxy

Answer

Transparent proxy

Answer

Reverse proxy

Answer

SOCKS proxy