CSS CSS Network Security & Architecture 2

Question 1

Which VPN technology is commonly recommended for modern enterprise deployments due to its simplicity and performance?

Accepted Answer

WireGuard

Answer

PPTP

Answer

L2TP without IPsec

Answer

SLIP

Question 2

What does the term 'east-west traffic' refer to in data center network security?

Accepted Answer

Lateral traffic between servers within the same data center

Answer

Traffic flowing from users to the internet

Answer

Encrypted traffic exiting the perimeter

Answer

Traffic between two geographically separated sites

Question 3

Which security mechanism prevents a compromised VLAN from accessing other VLANs through switch exploitation?

Accepted Answer

Disabling trunk negotiation and using dedicated native VLANs

Answer

Enabling spanning tree protocol

Answer

Using dynamic ARP inspection only

Answer

Increasing VLAN ID numbers

Question 4

What is the primary role of an intrusion prevention system (IPS) compared to an IDS?

Accepted Answer

An IPS can actively block malicious traffic, while an IDS only detects and alerts

Answer

An IPS only monitors encrypted traffic

Answer

An IDS blocks traffic while an IPS only logs

Answer

An IPS operates at Layer 7 only

Question 5

Which technique do security teams use to capture and analyze network packets for forensic investigation?

Accepted Answer

Packet capture (PCAP) analysis

Answer

Sandboxing

Answer

Fuzzing

Answer

Tokenization

Question 6

What network security control is designed to detect and prevent unauthorized wireless access points?

Accepted Answer

Wireless intrusion prevention system (WIPS)

Answer

WPA2 encryption

Answer

MAC address filtering

Answer

SSID broadcasting