CSS Security Products & Solutions Knowledge 2

Question 1

Which type of intrusion detection system (IDS) analyzes network traffic patterns to identify anomalies rather than matching known attack signatures?

Accepted Answer

Anomaly-based IDS

Answer

Anomaly-based IDS establishes a baseline of normal behavior and flags deviations, making it effective against zero-day attacks.

Question 2

A customer wants to consolidate firewall, VPN, and intrusion prevention into a single appliance. Which product category best fits their need?

Accepted Answer

Unified Threat Management (UTM)

Answer

UTM appliances combine multiple security functions—firewall, VPN, IPS, antivirus, and more—into one device, ideal for SMBs seeking simplified management.

Question 3

Which access control model grants permissions based on a user's organizational role rather than individual identity?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions to roles (e.g., 'manager,' 'employee'), and users inherit those permissions when assigned to a role.

Question 4

What is the primary purpose of a Web Application Firewall (WAF)?

Accepted Answer

Protecting web applications from attacks like SQL injection and XSS

Answer

A WAF inspects HTTP/HTTPS traffic and blocks application-layer attacks targeting web applications, such as SQL injection and cross-site scripting.

Question 5

A healthcare organization needs to prevent patient records from being emailed outside the network. Which security solution addresses this requirement?

Accepted Answer

Data Loss Prevention (DLP)

Answer

DLP solutions monitor and control data transfers, preventing sensitive information like PHI from leaving the organization via email or other channels.

(CSS) Certified Security Salesperson Practice Test

(CSS) Certified Security Salesperson Practice Test

CSS Security Products & Solutions Knowledge 2