(Why is GNS3 considered superior for advanced network emulation compared to simpler simulators?)

• A. It provides a pre-configured environment for basic networking tasks.
• B. It requires minimal system resources for complex scenarios.
• C. It supports real operating systems for realistic network behavior.
• D. It focuses on simulating Cisco devices.

(Scenario: A multinational corporation faces an issue where employees working remotely often connect to corporate resources using unsecured devices. Despite enforcing strong password policies, they still encounter breaches due to compromised endpoints. The security team needs a strategy to ensure only compliant devices can access sensitive resources while minimizing user disruption.
Question: What approach should the corporation adopt to resolve this issue?)

• A. Enforce stricter password policies to enhance user authentication security.
• B. Implement Zero Trust Architecture to verify user and device compliance.
• C. Restrict remote access entirely to prevent breaches from unsecured devices.
• D. Deploy network segmentation to isolate critical resources from remote access.

(What makes behavioral analysis effective against unknown cyber threats?)

• A. It focuses on analyzing static features like file metadata.
• B. It uses manual investigation to identify suspicious activities.
• C. It relies on predefined signatures to identify specific malware.
• D. It detects threats by monitoring deviations from normal activity.

(Which tool would best assist a company in proactively identifying vulnerabilities in their network infrastructure?)

• A. PentestGPT, offering automated penetration testing for threat mitigation.
• B. Nebula, designed for ethical hacking to secure networks.
• C. Azure Sentinel, a cloud-native SIEM for AI-driven threat detection.
• D. Open-AppSec, focused on protecting web applications and APIs.

(Which feature of Zero Trust Architecture best addresses insider threats by enforcing dynamic and continuous access controls?)

• A. Role-Based Access Control (RBAC)
• B. Static IP-based rules
• C. Firewalls to block unverified internal traffic
• D. Network perimeter segmentation