TOC Network Security & Protocols 2

Question 1

Which firewall type inspects the state of active connections and uses this context to make filtering decisions?

Accepted Answer

Stateful inspection firewall

Answer

A stateful inspection firewall tracks the state of network connections and uses that context to determine whether packets are part of a legitimate session.

Question 2

A company wants to ensure all remote workers' traffic is encrypted before it reaches the corporate network. Which protocol is MOST appropriate?

Accepted Answer

IPsec VPN

Answer

IPsec VPN encrypts all IP traffic between the remote device and the corporate network, making it the standard solution for secure remote access.

Question 3

What does the principle of 'defense in depth' mean in network security?

Accepted Answer

Layering multiple security controls so that failure of one doesn't compromise the whole system

Answer

Defense in depth means implementing multiple overlapping security layers so that an attacker must bypass each one independently, reducing the risk of a single point of failure.

Question 4

Which protocol provides secure, encrypted remote command-line access to a network device?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts the entire session including authentication, replacing plaintext protocols like Telnet for remote administration.

Question 5

An organization notices unusual outbound traffic spikes at 3 AM daily. What type of threat does this MOST likely indicate?

Accepted Answer

Data exfiltration by malware or a compromised host

Answer

Regular, off-hours outbound traffic spikes are a classic indicator of malware performing scheduled data exfiltration to a command-and-control server.

(TOC) Talent Optimization Consultant Practice Test

(TOC) Talent Optimization Consultant Practice Test

TOC Network Security & Protocols 2