Question 1

Which tunneling protocol is best suited for encrypting traffic over the internet while supporting site-to-site and remote access VPNs with strong authentication features?

Options :

A : GRE (Generic Routing Encapsulation)

B : OpenVPN

C : PPTP (Point-to-Point Tunneling Protocol)

D : L2TP/IPsec (Layer 2 Tunneling Protocol with Internet Protocol Security)

Answer: D

Question 2

Which of the following is the most accurate example of a "security event" in a typical network environment?

Options :

A : A firewall detects and blocks a brute-force attack attempt on a login portal.

B : An attacker exfiltrates sensitive data from a database using a SQL injection vulnerability.

C : A Distributed Denial of Service (DDoS) attack disrupts a company-s public-facing website.

D : A user accesses their email account using valid credentials.

Answer: D

Question 3

A cybersecurity team deploys an Intrusion Prevention System (IPS) to enhance their threat prevention capabilities. Soon after deployment, they notice that legitimate traffic is being blocked. What is the most likely cause of this issue?

Options :

A : Lack of encryption on the network

B : Incorrect user access permissions

C : Overly strict IPS signature rules

D : Firewall misconfigurations

Answer: C

Question 4

Which of the following is an example of a service commonly hosted in a demilitarized zone (DMZ)?

Options :

A : A database server storing sensitive customer information.

B : A web server hosting the company’s public website.

C : A backup server used for storing disaster recovery data.

D : An internal file-sharing server accessible only to employees.

Answer: B

Question 5

During an investigation, a cybersecurity analyst discovers that an attacker intercepted and modified data transmitted between two employees. The attacker was able to alter the contents of an email in transit without either party noticing. Which of the following best describes the type of attack observed?

Options :

A : Buffer overflow attack

B : Phishing attack

C : Man-in-the-Middle (MITM) attack

D : Distributed Denial of Service (DDoS)

Answer: C