Cybersecurity Plus Bootcamp Module 5 Quiz

A company’s network contains client workstations and database servers in the same subnet. Attackers have breached database servers via compromised workstations. The company improved phishing training and antivirus. What additional change will improve network security?

A company must store archived data with very high confidentiality and integrity requirements on the same site as production network systems. Which architecture provides the best protection?

An air-gapped host has no network connection, preventing remote access and significantly reducing attack risk.

A company wants switches to enforce device authentication. Which standard must the switches support?

Two companies merge but cannot fit 100 new desktops into the current on-premises networks. Which architectural consideration was overlooked?

Scalability ensures that the network can grow to accommodate additional users, devices, or workloads.

A proxy server must stop all access if compromised. Which fail mode should be configured?

You want to deploy a WAF appliance without changing layer 3 addressing. Which attribute must it support?

Which IPS mechanism can block violating traffic without blocking the source?

Resetting connections stops prohibited activity while allowing legitimate traffic from the same source to continue.

In load balancing, what does “scheduling” refer to?

True or False: A TLS VPN can only provide access to web-based resources.

Which IPsec mode should be used for confidentiality on a private network?

What is the main advantage of IKEv2 over IKEv1?

What value confirms an SSH server’s identity to a client?

Server A forwards SSH commands to a pool of database servers that accept SSH only from Server A. What is this configuration called?