Question 1

Which of the following statements best describes the role of a host-based firewall in endpoint security?

Options :

A : A host-based firewall only protects against malware infections on the endpoint by scanning downloaded files.

B : A host-based firewall protects the entire network by analyzing and blocking malicious traffic at the network perimeter.

C : A host-based firewall is only effective if paired with an intrusion prevention system (IPS).

D : A host-based firewall filters traffic entering and leaving an individual endpoint based on predefined security rules.

Answer: D

Question 2

Which of the following are accurate examples of types of area networks, based on their scope and functionality? (Choose two)

Options :

A : Local Area Network (LAN)

B : Global Area Network (GAN)

C : Public Area Network (PuAN)

D : National Area Network (NAN)

E : Personal Area Network (PAN)

Answer: A,E

Question 3

Which of the following devices primarily operates at Layer 2 of the OSI model and is responsible for forwarding data based on MAC addresses?

Options :

A : Switch

B : Firewall

C : Hub

D : Router

Answer: A

Question 4

Which characteristic best demonstrates a critical aspect of the "people" pillar in effective security operations?

Options :

A : Expertise in interpreting and analyzing security alerts generated by automated tools

B : Focus on reducing mean time to detect (MTTD) through automated systems

C : Procurement of cutting-edge cybersecurity tools and platforms

D : Outsourcing all security operations to third-party vendors

Answer: A

Question 5

An organization is configuring an IPsec VPN to connect two branch offices. During the setup, they must choose a tunneling protocol for negotiating encryption keys. Which phase of IKE and protocol combination is best suited for this task?

Options :

A : IKE Phase 2 using aggressive mode to negotiate encryption keys.

B : IKE Phase 1 using quick mode to manage key exchanges.

C : IKE Phase 2 using quick mode to negotiate encryption parameters for the data tunnel.

D : IKE Phase 1 using main mode to establish a secure channel.

Answer: C