Practice Quiz SeriesNetwork Security FundamentalsFull nameEmail addressGenderSelectMaleFemaleOtherPrefer not to sayCurrent statusSelectSchool studentCollege studentWorking professionalJob seekerTeacher/TrainerOther I agree that my details and score may be stored for quiz administration.Start QuizQuestion 1 of 25Network Security FundamentalsHard1 mark(s)1. Which observations can indicate a firewall policy problem?Select all correct answers.A missing DNS TXT record always means firewall denialTraffic reaches the firewall but is denied by a matching ruleLogs show the flow matching an unintended policyA required application works from one security zone but not anotherEvery packet loss event proves a firewall defectNetwork Security FundamentalsEasy1 mark(s)2. Which statements correctly compare IDS and IPS?Select all correct answers.An IPS can operate inline and block selected malicious trafficBoth can use signatures or behavioral detection techniquesAn IPS is a DHCP serverAn IDS can detect suspicious activity and generate alertsAn IDS must always modify every packetNetwork Security FundamentalsEasy1 mark(s)3. Which statements correctly describe an ACL?Select all correct answers.An ACL is a DNS resource recordAn ACL automatically performs malware sandboxingACLs are commonly applied to network interfaces or logical traffic pathsACL processing depends on platform-specific rule order and behaviorAn ACL can permit or deny traffic based on matching criteriaNetwork Security FundamentalsEasy1 mark(s)4. Which are common VPN deployment models?Select all correct answers.IPsec-based VPNDNS-only VPNRemote-access VPNSite-to-site VPNEthernet MAC-learning VPN as the only possible VPN typeNetwork Security FundamentalsMedium1 mark(s)5. Which principles are useful when designing firewall or ACL policies?Select all correct answers.Keep obsolete rules foreverAllow any source to any destination by default for conveniencePermit only traffic that has a valid business or technical requirementDocument important rules and their purposeApply least privilegeNetwork Security FundamentalsMedium1 mark(s)6. Which statements about default-deny security policy are correct?Select all correct answers.Traffic not explicitly permitted is deniedIt removes the need to review firewall rulesRequired flows must be deliberately identified and allowedIt means all legitimate business traffic must remain permanently blockedIt can reduce unintended network exposureNetwork Security FundamentalsMedium1 mark(s)7. Which statements correctly describe microsegmentation?Select all correct answers.It means placing the entire data center in one unrestricted VLANIt is another term for public DNSIt can reduce unnecessary east-west communicationIt applies fine-grained controls between workloads or endpointsPolicies can be based on workload identity or application requirementsNetwork Security FundamentalsMedium1 mark(s)8. Which are potential IDS/IPS detection methods?Select all correct answers.Changing the user's desktop wallpaperDHCP lease renewal onlyProtocol analysisAnomaly or behavior-based detectionSignature-based detectionNetwork Security FundamentalsEasy1 mark(s)9. Which information can commonly be used in a firewall rule?Select all correct answers.Keyboard languageSource and destination IP addressesProtocol and destination portSource and destination security zonesMonitor screen resolutionNetwork Security FundamentalsEasy1 mark(s)10. Which statements reflect Zero Trust principles?Select all correct answers.Verify users, devices, and access context as appropriateTrust every internal IP address permanentlyDo not implicitly trust traffic solely because it originates inside the networkDisable authentication after a user connects to a VPNApply least-privilege accessNetwork Security FundamentalsEasy1 mark(s)11. Which statements correctly describe a VPN?Select all correct answers.VPNs can provide integrity and peer authentication depending on the designA VPN automatically makes every endpoint trustworthyVPN technologies can provide encryptionA VPN can protect traffic across an untrusted networkA VPN eliminates the need for access controlNetwork Security FundamentalsMedium1 mark(s)12. Which security properties can IPsec provide?Select all correct answers.Peer authenticationIntegrity protectionAutomatic physical cable protectionGuaranteed application availabilityConfidentiality through encryptionNetwork Security FundamentalsMedium1 mark(s)13. Which statements correctly describe a stateful firewall?Select all correct answers.It is the same thing as a DNS resolverIt forgets every packet immediately by definitionIt can associate return traffic with an established sessionIt tracks connection stateIt can make decisions using more context than independent packet filteringNetwork Security FundamentalsEasy1 mark(s)14. Which statements correctly describe network segmentation?Select all correct answers.It can help limit the impact of a compromised systemIt divides a network into smaller security or trust zonesIt can restrict unnecessary lateral communicationIt requires every device to be placed in one flat broadcast domainIt automatically removes every vulnerabilityNetwork Security FundamentalsHard1 mark(s)15. Which checks form a useful network-security troubleshooting workflow?Select all correct answers.Identify the exact source, destination, protocol, and portDetermine which firewall, ACL, VPN, or segmentation policy should applyVerify routing and return-path behavior before blaming security policyDisable all security controls immediately as the first diagnostic stepInspect logs, session state, counters, and packet captures where appropriateNetwork Security FundamentalsHard1 mark(s)16. Which checks are useful when troubleshooting a site-to-site VPN?Select all correct answers.Verify interesting traffic, routes, and security policiesAssume the tunnel is healthy merely because DNS worksVerify peer reachability and VPN negotiation statusCheck encryption, authentication, and proposal parametersCheck packet counters or logs for encrypted and decrypted trafficNetwork Security FundamentalsMedium1 mark(s)17. Which controls can help reduce lateral movement after an endpoint is compromised?Select all correct answers.Allowing unrestricted east-west connectivityNetwork segmentationLeast-privilege firewall rulesStrong identity and access controlsUsing one administrator account on every systemNetwork Security FundamentalsHard1 mark(s)18. A user can ping a server but TCP 443 is blocked. Which conclusions are reasonable?Select all correct answers.A firewall or ACL may permit ICMP while denying TCP 443ICMP and HTTPS can be governed by different security rulesThe HTTPS service or its listener should also be checkedSuccessful ping proves every firewall rule is correctThe problem must be DNS if the server was tested by IPNetwork Security FundamentalsEasy1 mark(s)19. Which statements correctly describe a network firewall?Select all correct answers.Modern firewalls can inspect connection stateIt replaces all endpoint security controlsIt automatically encrypts every permitted connectionIt can permit or deny traffic based on defined rulesIt can enforce security policy between network zonesNetwork Security FundamentalsEasy1 mark(s)20. Which statements correctly describe security zones on a firewall?Select all correct answers.Zones can group interfaces or networks by trust or functionPolicies can control traffic between zonesZones automatically encrypt traffic between themselvesExamples can include user, server, DMZ, and Internet zonesEvery zone must have identical security policyNetwork Security FundamentalsEasy1 mark(s)21. Which statements correctly describe least privilege?Select all correct answers.Every administrator should have unrestricted access everywhereTemporary access should automatically become permanentUsers should receive only the access needed for their role or taskSystems should communicate only with required servicesUnnecessary permissions should be removedNetwork Security FundamentalsMedium1 mark(s)22. Which statements correctly describe a DMZ in network security?Select all correct answers.It can isolate Internet-facing services from internal networksCompromise of a DMZ server should not automatically provide unrestricted internal accessA DMZ removes the need to patch public-facing serversFirewall policy should restrict traffic between the DMZ and other zonesA DMZ means every service is trustedNetwork Security FundamentalsMedium1 mark(s)23. Which concepts are commonly associated with Zero Trust?Select all correct answers.Least-privilege accessExplicit verificationPermanent trust after the first successful loginUnrestricted lateral movementAssume breach and limit blast radiusNetwork Security FundamentalsMedium1 mark(s)24. Which technologies can contribute to network segmentation?Select all correct answers.VLANsUsing one shared password for all systemsDisabling all loggingFirewallsVRFs or routed network separationNetwork Security FundamentalsMedium1 mark(s)25. Which practices improve firewall rule-base management?Select all correct answers.Place duplicate rules throughout the policy without reviewKeep broad temporary rules permanentlyLog important security events appropriatelyReview unused or obsolete rulesUse meaningful rule names and descriptionsPreviousNextSubmit Quiz Related Discover more from SanchitGurukul Subscribe to get the latest posts sent to your email. Type your email… Subscribe Previous article ☟Network TroubleshootingRead the guideNext article ☟Basic Networking Troubleshooting ScenariosRead the guide
