HomeNetwork Security Fundamentals Practice Quiz SeriesNetwork Security FundamentalsFull nameEmail addressGenderSelectMaleFemaleOtherPrefer not to sayCurrent statusSelectSchool studentCollege studentWorking professionalJob seekerTeacher/TrainerOther I agree that my details and score may be stored for quiz administration.Start QuizQuestion 1 of 25Network Security FundamentalsEasy1 mark(s)1. Which are common VPN deployment models?Select all correct answers.Remote-access VPNIPsec-based VPNDNS-only VPNEthernet MAC-learning VPN as the only possible VPN typeSite-to-site VPNNetwork Security FundamentalsEasy1 mark(s)2. Which statements correctly describe network segmentation?Select all correct answers.It divides a network into smaller security or trust zonesIt can help limit the impact of a compromised systemIt requires every device to be placed in one flat broadcast domainIt automatically removes every vulnerabilityIt can restrict unnecessary lateral communicationNetwork Security FundamentalsEasy1 mark(s)3. Which statements correctly describe least privilege?Select all correct answers.Unnecessary permissions should be removedSystems should communicate only with required servicesTemporary access should automatically become permanentEvery administrator should have unrestricted access everywhereUsers should receive only the access needed for their role or taskNetwork Security FundamentalsMedium1 mark(s)4. Which technologies can contribute to network segmentation?Select all correct answers.FirewallsVLANsDisabling all loggingVRFs or routed network separationUsing one shared password for all systemsNetwork Security FundamentalsEasy1 mark(s)5. Which statements correctly compare IDS and IPS?Select all correct answers.An IPS can operate inline and block selected malicious trafficAn IDS can detect suspicious activity and generate alertsAn IPS is a DHCP serverAn IDS must always modify every packetBoth can use signatures or behavioral detection techniquesNetwork Security FundamentalsEasy1 mark(s)6. Which statements correctly describe an ACL?Select all correct answers.An ACL automatically performs malware sandboxingACL processing depends on platform-specific rule order and behaviorAn ACL is a DNS resource recordACLs are commonly applied to network interfaces or logical traffic pathsAn ACL can permit or deny traffic based on matching criteriaNetwork Security FundamentalsMedium1 mark(s)7. Which practices improve firewall rule-base management?Select all correct answers.Keep broad temporary rules permanentlyUse meaningful rule names and descriptionsLog important security events appropriatelyPlace duplicate rules throughout the policy without reviewReview unused or obsolete rulesNetwork Security FundamentalsHard1 mark(s)8. Which checks form a useful network-security troubleshooting workflow?Select all correct answers.Identify the exact source, destination, protocol, and portDetermine which firewall, ACL, VPN, or segmentation policy should applyVerify routing and return-path behavior before blaming security policyInspect logs, session state, counters, and packet captures where appropriateDisable all security controls immediately as the first diagnostic stepNetwork Security FundamentalsMedium1 mark(s)9. Which statements correctly describe a DMZ in network security?Select all correct answers.A DMZ means every service is trustedIt can isolate Internet-facing services from internal networksFirewall policy should restrict traffic between the DMZ and other zonesA DMZ removes the need to patch public-facing serversCompromise of a DMZ server should not automatically provide unrestricted internal accessNetwork Security FundamentalsMedium1 mark(s)10. Which statements correctly describe microsegmentation?Select all correct answers.It can reduce unnecessary east-west communicationIt means placing the entire data center in one unrestricted VLANIt applies fine-grained controls between workloads or endpointsPolicies can be based on workload identity or application requirementsIt is another term for public DNSNetwork Security FundamentalsMedium1 mark(s)11. Which concepts are commonly associated with Zero Trust?Select all correct answers.Permanent trust after the first successful loginAssume breach and limit blast radiusLeast-privilege accessExplicit verificationUnrestricted lateral movementNetwork Security FundamentalsEasy1 mark(s)12. Which statements reflect Zero Trust principles?Select all correct answers.Disable authentication after a user connects to a VPNTrust every internal IP address permanentlyVerify users, devices, and access context as appropriateDo not implicitly trust traffic solely because it originates inside the networkApply least-privilege accessNetwork Security FundamentalsEasy1 mark(s)13. Which information can commonly be used in a firewall rule?Select all correct answers.Source and destination IP addressesKeyboard languageMonitor screen resolutionProtocol and destination portSource and destination security zonesNetwork Security FundamentalsMedium1 mark(s)14. Which are potential IDS/IPS detection methods?Select all correct answers.Protocol analysisAnomaly or behavior-based detectionDHCP lease renewal onlySignature-based detectionChanging the user's desktop wallpaperNetwork Security FundamentalsMedium1 mark(s)15. Which statements about default-deny security policy are correct?Select all correct answers.It means all legitimate business traffic must remain permanently blockedTraffic not explicitly permitted is deniedRequired flows must be deliberately identified and allowedIt can reduce unintended network exposureIt removes the need to review firewall rulesNetwork Security FundamentalsHard1 mark(s)16. Which checks are useful when troubleshooting a site-to-site VPN?Select all correct answers.Check encryption, authentication, and proposal parametersCheck packet counters or logs for encrypted and decrypted trafficVerify interesting traffic, routes, and security policiesAssume the tunnel is healthy merely because DNS worksVerify peer reachability and VPN negotiation statusNetwork Security FundamentalsEasy1 mark(s)17. Which statements correctly describe security zones on a firewall?Select all correct answers.Zones can group interfaces or networks by trust or functionPolicies can control traffic between zonesEvery zone must have identical security policyZones automatically encrypt traffic between themselvesExamples can include user, server, DMZ, and Internet zonesNetwork Security FundamentalsMedium1 mark(s)18. Which statements correctly describe a stateful firewall?Select all correct answers.It tracks connection stateIt forgets every packet immediately by definitionIt can make decisions using more context than independent packet filteringIt can associate return traffic with an established sessionIt is the same thing as a DNS resolverNetwork Security FundamentalsHard1 mark(s)19. Which observations can indicate a firewall policy problem?Select all correct answers.A required application works from one security zone but not anotherTraffic reaches the firewall but is denied by a matching ruleA missing DNS TXT record always means firewall denialLogs show the flow matching an unintended policyEvery packet loss event proves a firewall defectNetwork Security FundamentalsMedium1 mark(s)20. Which controls can help reduce lateral movement after an endpoint is compromised?Select all correct answers.Network segmentationStrong identity and access controlsAllowing unrestricted east-west connectivityUsing one administrator account on every systemLeast-privilege firewall rulesNetwork Security FundamentalsMedium1 mark(s)21. Which security properties can IPsec provide?Select all correct answers.Confidentiality through encryptionIntegrity protectionPeer authenticationAutomatic physical cable protectionGuaranteed application availabilityNetwork Security FundamentalsEasy1 mark(s)22. Which statements correctly describe a VPN?Select all correct answers.A VPN automatically makes every endpoint trustworthyA VPN can protect traffic across an untrusted networkA VPN eliminates the need for access controlVPN technologies can provide encryptionVPNs can provide integrity and peer authentication depending on the designNetwork Security FundamentalsEasy1 mark(s)23. Which statements correctly describe a network firewall?Select all correct answers.It automatically encrypts every permitted connectionModern firewalls can inspect connection stateIt can permit or deny traffic based on defined rulesIt replaces all endpoint security controlsIt can enforce security policy between network zonesNetwork Security FundamentalsHard1 mark(s)24. A user can ping a server but TCP 443 is blocked. Which conclusions are reasonable?Select all correct answers.The HTTPS service or its listener should also be checkedICMP and HTTPS can be governed by different security rulesThe problem must be DNS if the server was tested by IPSuccessful ping proves every firewall rule is correctA firewall or ACL may permit ICMP while denying TCP 443Network Security FundamentalsMedium1 mark(s)25. Which principles are useful when designing firewall or ACL policies?Select all correct answers.Document important rules and their purposeAllow any source to any destination by default for convenienceKeep obsolete rules foreverPermit only traffic that has a valid business or technical requirementApply least privilegePreviousNextSubmit Quiz Related Discover more from SanchitGurukul Subscribe to get the latest posts sent to your email. Type your email… Subscribe
