SE Network Security 3

Question 1

A security engineer wants to prevent email spoofing for a domain. Which combination of DNS records is most effective?

Accepted Answer

SPF + DKIM + DMARC

Answer

A + MX records

Answer

DNSSEC + MX records

Answer

PTR + TXT records

Question 2

Which network security control is specifically designed to deceive attackers by mimicking real systems and logging their activity?

Accepted Answer

Honeypot

Answer

IPS

Answer

WAF

Answer

SIEM

Question 3

What is the main advantage of using out-of-band management networks for network devices?

Accepted Answer

Management access remains available even if the production network is compromised or down

Answer

Higher bandwidth

Answer

Lower latency

Answer

Simpler configuration

Question 4

Which technology aggregates logs from firewalls, IDS, and other network devices to correlate security events?

Accepted Answer

SIEM

Answer

NAC

Answer

WAF

Answer

DLP

Question 5

What is the purpose of egress filtering on a network perimeter firewall?

Accepted Answer

Prevent internal hosts from sending unauthorized outbound traffic

Answer

Block inbound attack traffic

Answer

Encrypt outbound packets

Answer

Balance outbound load

Question 6

Which protocol is used by network devices to send log messages to a centralized logging server?

Accepted Answer

Syslog

Answer

SNMP

Answer

NetFlow

Answer

TFTP