Communication and Network Security — CISSP Practice Questions

Your organization is planning to deploy a secure video conferencing system for highly sensitive remote meetings involving classified information. What is the BEST approach to ensuring the security and integrity of these video conferencing sessions?

• A.A. Implementing end-to-end encryption using public key infrastructure to ensure that only authorized parties can access the content of the sessions
• B.B. Using a cloud-based video conferencing service with configurable security features that can be tailored to meet specific security requirements
• C.C. Deploying a proprietary video conferencing solution with encryption that has been thoroughly tested and validated by independent security experts
• D.D. Configuring access controls, authentication mechanisms, and network segmentation to restrict access to the video conferencing system

Why: Ensuring the security and integrity of video conferencing sessions Implementing end-to-end encryption using public key infrastructure ensures the confidentiality and integrity of the video conferencing sessions, protecting against unauthorized access and tampering.

Your organization relies heavily on its online services and has experienced significant revenue loss due to recent denial-of-service (DoS) attacks. When evaluating the effectiveness of a DoS mitigation strategy, what is the MOST critical factor to consider in order to minimize the impact on business operations and ensure continuity of service?

• A.A. The ability to detect and block malicious traffic in real-time, ensuring legitimate traffic is not disrupted
• B.B. The total cost of ownership of the mitigation solution, including implementation and maintenance expenses
• C.C. The mitigation strategy's compatibility with existing network infrastructure and security systems
• D.D. The provider's reputation and the number of industry awards received for their mitigation services

Why: Evaluating the effectiveness of a DoS mitigation strategy requires careful consideration of network performance The impact of the mitigation strategy on network performance and latency is critical, as it can affect the usability and availability of network resources

You are designing a new network for a sensitive research facility that handles highly classified information and requires robust security to protect against advanced threats. What should be done FIRST to ensure the security of the network?

• A.Implement a robust intrusion detection and prevention system to monitor all network traffic
• B.Conduct a thorough threat analysis to identify potential security risks and vulnerabilities
• C.Install motion-sensitive cameras and alarms to secure the physical perimeter of the facility
• D.Implement a secure authentication and authorization system to control access to the network

Why: Identify potential security risks and vulnerabilities through threat analysis Conducting a thorough threat analysis is the first step in ensuring the security of the network because it allows for the identification of potential security risks and vulnerabilities, which can then be mitigated through design and implementation choices.

An organization is upgrading its network infrastructure. What should be done FIRST to ensure the security of the new network?

• A.Implement a firewall to block incoming traffic
• B.Conduct a risk assessment to identify potential vulnerabilities
• C.Install an intrusion detection system to monitor network traffic
• D.Configure access controls to restrict user access to the network

Why: Conduct risk assessments before implementing new network infrastructure Conducting a risk assessment first helps identify potential vulnerabilities and informs the implementation of security controls.

A company is deploying a new network. What should be done FIRST to ensure the network is secure?

• A.Implement a firewall
• B.Conduct a risk assessment
• C.Install intrusion detection systems
• D.Configure virtual private networks

Why: Conduct risk assessments before implementing security controls Conducting a risk assessment first allows the company to identify potential security threats and prioritize mitigation efforts.

A security engineer is designing a secure network architecture. What is the MOST important consideration when selecting network protocols?

• A.Choosing protocols that support encryption, such as TLS or IPsec
• B.Selecting protocols that are widely supported and have a large user base
• C.Opting for protocols that are highly customizable and flexible
• D.Picking protocols that have a simple and easy-to-understand configuration

Why: Choosing secure protocols is crucial for network security Choosing protocols that support encryption, such as TLS or IPsec, ensures that data in transit is protected from interception and eavesdropping.

A security manager is tasked with securing a network against denial-of-service (DoS) attacks. What is the BEST approach to take?

• A.Implementing a combination of firewall rules and intrusion prevention systems (IPS) to detect and block DoS attacks
• B.Configuring access controls to restrict user permissions
• C.Implementing a network segmentation strategy to limit the attack surface
• D.Conducting regular network traffic monitoring to identify potential DoS attacks

Why: Implementing an IPS is an effective way to detect and block DoS attacks Implementing an IPS is the best approach to take, as it can detect and block DoS attacks in real-time, preventing network downtime and data loss

A security manager is tasked with securing a network that includes several cloud-based services. What is the MOST important consideration when securing these services?

• A.Ensuring that the cloud-based services are compliant with relevant regulatory requirements
• B.Implementing a secure authentication and authorization mechanism to control access to the cloud-based services
• C.Conducting regular vulnerability scans and penetration testing to identify and remediate vulnerabilities
• D.Developing a comprehensive cloud security governance framework that includes policies and procedures

Why: Implementing a secure authentication and authorization mechanism is essential to control access to the cloud-based services Implementing a secure authentication and authorization mechanism is the most important consideration when securing cloud-based services. This mechanism will help to control access to the cloud-based services and prevent unauthorized access.

When initially implementing a software-defined wide area network (SD-WAN), what is the most critical consideration to ensure a smooth rollout and minimize disruption to existing services?

• A.Ensuring that the SD-WAN solution is compatible with the organization's existing network infrastructure
• B.Implementing a secure authentication and authorization mechanism to control access to the SD-WAN
• C.Conducting a thorough risk assessment to identify potential security threats associated with the SD-WAN
• D.Developing a comprehensive network segmentation strategy to isolate different parts of the network

Why: Conducting a thorough risk assessment is essential to identify potential security threats associated with the SD-WAN Conducting a thorough risk assessment is the most important consideration when implementing SD-WAN. This assessment will help the organization to identify potential security threats associated with the SD-WAN and develop strategies to mitigate them.

A security engineer is designing a network for a new office building. The network must support both wired and wireless connections. What should be done FIRST to ensure the security of the network?

• A.Implement a Network Access Control (NAC) system to regulate device connections
• B.Conduct a thorough risk assessment to identify potential vulnerabilities
• C.Install a firewall to control incoming and outgoing network traffic
• D.Deploy intrusion detection and prevention systems (IDPS) to monitor network activity

Why: Conducting a risk assessment is crucial before designing a secure network Conducting a thorough risk assessment helps identify potential vulnerabilities and informs the design of the network, ensuring that security controls are proportionate to the risks.

A security manager discovers that a network device has been configured with a weak password. What is the BEST course of action to take?

• A.Immediately change the password to a strong one and notify the network administrator
• B.Conduct a vulnerability scan to identify other potential weaknesses
• C.Isolate the device from the network until it can be fully patched and configured
• D.Notify the incident response team to investigate the issue

Why: Identifying and addressing weaknesses requires a thorough vulnerability scan Conducting a vulnerability scan helps identify other potential weaknesses in the network, ensuring that all issues are addressed, not just the weak password.

An organization is implementing a new network architecture. What should be done FIRST to ensure the security of the network?

• A.Implement a firewall to block incoming traffic
• B.Conduct a risk assessment to identify potential vulnerabilities
• C.Install intrusion detection systems to monitor network activity
• D.Configure access controls to restrict user permissions

Why: Conducting a risk assessment is essential to identify potential security threats and vulnerabilities in a network Conducting a risk assessment is the first step in ensuring the security of a network, as it helps to identify potential vulnerabilities and threats, allowing for targeted security measures to be implemented