Courseiva
Network SecuritymediumMultiple ChoiceObjective-mapped

ISC2 CC Network Security Practice Question

Which security control would best mitigate the risk of network sniffing on a wired LAN segment?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Using encryption protocols (e.g., IPsec, TLS)

Encrypting traffic (e.g., using HTTPS, VPN) makes sniffed data unreadable.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Using encryption protocols (e.g., IPsec, TLS)

    Why this is correct

    Correct. Encryption renders sniffed data confidential.

  • Implementing VLANs

    Why it's wrong here

    VLANs segment traffic but do not encrypt it.

  • Disabling unused ports on the switch

    Why it's wrong here

    Reduces physical access but does not protect against sniffing on active ports.

  • Deploying an intrusion detection system

    Why it's wrong here

    IDS can detect sniffing but does not prevent it.

About these practice questions

This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.