CNDA Network Security Architecture 3

Question 1

Which network topology provides the highest redundancy but is also the most expensive to implement?

Accepted Answer

Full mesh topology

Answer

A full mesh topology connects every node to every other node, eliminating single points of failure but requiring the most links.

Question 2

What is the primary security benefit of network time protocol (NTP) synchronization across all devices?

Accepted Answer

Ensures consistent timestamps for log correlation and forensic analysis

Answer

Synchronized time across devices ensures log entries can be accurately correlated during incident investigation.

Question 3

A CNDA wants to protect against unauthorized wireless access points. Which control is MOST appropriate?

Accepted Answer

Deploying a wireless intrusion prevention system (WIPS)

Answer

A WIPS actively detects and can contain rogue access points that appear on the network.

Question 4

Which protocol should be disabled on managed switches to prevent VLAN hopping attacks?

Accepted Answer

DTP (Dynamic Trunking Protocol)

Answer

Disabling DTP prevents an attacker from negotiating a trunk port and gaining access to multiple VLANs.

Question 5

In network architecture, what does 'East-West traffic' refer to?

Accepted Answer

Traffic between servers within the same data center or cloud environment

Answer

East-West traffic is server-to-server communication within a data center, which is the primary path for lateral movement after a breach.

CNDA - Certified Network Defense Architect Practice Test