Domain 1/Objective 3.3: Secure Network Designs

A company wants to ensure secure remote access to its internal network while maintaining control over user authentication and network traffic. Which VPN concept would be MOST suitable for this scenario?

• Always On VPN

• Split Tunneling

• Site-to-Site VPN

• IPSec

An organization is concerned about preventing broadcast storms and ensuring loop prevention in its network. What technology or feature should be implemented?

• VLANs

• HSM Devices

• BPDU Guards

• Quality of Service (QoS)

A network administrator is tasked with implementing load balancing to distribute traffic efficiently across multiple servers. Which load balancing methodology provides optimal resource utilization?

• Active/Active

• Active/Passive

• Virtual IP

• Persistence

Scenario: An organization is implementing a network segmentation strategy to enhance security. What technology is commonly used to divide a network into isolated segments?

• Quality of Service (QoS)

• Virtual Local Area Networks (VLANs)

• Unified Threat Management (UTM)

• Network Address Translation (NAT) Gateways

A company wants to monitor network traffic for potential security threats using a system that analyzes patterns and behaviors. Which network appliance would be suitable for this purpose?

• Proxy Server

• NIDS (Network-Based Intrusion Detection System)

• HSM Device

• Quality of Service (QoS)

An organization is implementing network appliances to secure its web applications from various attacks. Which appliance specifically focuses on protecting web applications?

• NGFW (Next-Generation Firewall)

• NIPS (Network-Based Intrusion Prevention System)

• WAF (Web Application Firewall)

• UTM (Unified Threat Management)

An administrator wants to ensure secure file transfers between remote offices over the internet. Which VPN concept would be MOST suitable for this scenario?

• Always On VPN

• Split Tunneling

• Site-to-Site VPN

• IPSec

A network administrator is concerned about ensuring the integrity of files on critical servers. Which network appliance would be effective in monitoring and maintaining file integrity?

• Port TAP

• File Integrity Monitor

• Quality of Service (QoS)

• HSM Device

An organization wants to implement secure and encrypted communication between its internal network and remote users. What technology or protocol is commonly used for this purpose?

• Quality of Service (QoS)

• SSH (Secure Shell)

• RADIUS (Remote Authentication Dial-In User Service)

• SSL/TLS (Secure Sockets Layer/Transport Layer Security)

A company wants to enforce policies that restrict certain websites and content accessed by its employees. Which network appliance would be suitable for implementing content filtering?

• Proxy Server

• IPSec

• Quality of Service (QoS)

• Port Security