Network Security mcq questions with answer – Set 1

Important Instructions:

• Total Number Of Questions : 10
• Passing Marks : 7
• Each Question Carry 1 Mark, No Negative Marking.
• Do Not Refresh The Page.
• This Is A FREE Online Test, DO NOT Pay Money To Anyone To Attend This Test.
• Best Of Luck…

Results

-

Congratulation…
You Have Passed The Test, You Should Try To The Next One…!!

Rate this post

You May Also Like :   Network Security mcq questions with answer - Set 4

Unfortunately…
You Did Not Pass. Why Not Try It Again?

Rate this post

You May Also Like :   Network Security mcq questions with answer - Set 2

#1. What do load balancers use to determine if a host is operational?

Logixn

Logixn

Request count

Request count

Health checking

Health checking

Time To Live (TTL)

Time To Live (TTL)

#2. What is meant by the word “stateful” with respect to firewalls?

The firewall tracks what country requests are from.

The firewall tracks what country requests are from.

Only packets matching an active connection are allowed through.

Only packets matching an active connection are allowed through.

Only packets that are addressed to the internal server are allowed through.

Only packets that are addressed to the internal server are allowed through.

The firewall keeps a list of all addresses to prevent spoofing of an internal IP address.

The firewall keeps a list of all addresses to prevent spoofing of an internal IP address.

#3. What is the primary difference between a proxy and a firewall?

A proxy allows access, while a firewall denies access.

A proxy allows access, while a firewall denies access.

A firewall uses a hardened operating system, while a proxy does not.

A firewall uses a hardened operating system, while a proxy does not.

A proxy makes application-level requests on behalf of internal users, while a firewall typically just passes through authorized traffic.

A proxy makes application-level requests on behalf of internal users, while a firewall typically just passes through authorized traffic.

A firewall is capable of successfully performing Network Address Translation for internal clients, while a proxy is forced to reveal internal addressing schemes.

A firewall is capable of successfully performing Network Address Translation for internal clients, while a proxy is forced to reveal internal addressing schemes.

#4. Why is it important for a web application firewall to perform SSL inspection?

A lack of SSL inspection would allow a channel of threats past the firewall.

A lack of SSL inspection would allow a channel of threats past the firewall.

SSL inspection is only used when you know you are under attack.

SSL inspection is only used when you know you are under attack.

Inspecting the SSL traffic assists with load balancing.

Inspecting the SSL traffic assists with load balancing.

None of the above.

None of the above.

#5. An anomaly-based NIPS will alert in which case?

When the network traffic matches a known attack pattern

When the network traffic matches a known attack pattern

When the network traffic deviates from a predefined traffic profile

When the network traffic deviates from a predefined traffic profile

When attack traffic alerts on a host-based intrusion detection system, forwarding a network cookie to allow the intrusion prevention system to block the traffic

When attack traffic alerts on a host-based intrusion detection system, forwarding a network cookie to allow the intrusion prevention system to block the traffic

When the network traffic changes from a configured traffic baseline

When the network traffic changes from a configured traffic baseline

#6. What is the best policy to use when administrating a firewall?

Quality of service (QoS)

Quality of service (QoS)

Least access

Least access

First-in, first-out (FIFO)

First-in, first-out (FIFO)

Comprehensive

Comprehensive

#7. Why does a network protocol analyzer need to be in promiscuous mode?

To avoid network ACLs

To avoid network ACLs

To tell the switch to forward all packets to a workstation

To tell the switch to forward all packets to a workstation

To force the network card to process all packets

To force the network card to process all packets

Promiscuous mode is not required.

Promiscuous mode is not required.

#8. Which protocol can create a security vulnerability in switches, firewalls, and routers because it authenticates using a cleartext password?

SNMP

SNMP

SSH

SSH

SMTP

SMTP

NAT

NAT

#9. Why should most organizations use a content-filtering proxy?

To allow users to browse the Internet anonymously

To allow users to browse the Internet anonymously

To provide a secure tunnel to the Internet

To provide a secure tunnel to the Internet

To enforce a network acceptable use policy

To enforce a network acceptable use policy

To reduce bandwidth usage with local copies of popular content

To reduce bandwidth usage with local copies of popular content

#10. Why is delay-based filtering effective against spam?

Spam generators will not send spam if they cannot do it immediately.

Spam generators will not send spam if they cannot do it immediately.

Spam generators do not wait for the SMTP banner.

Spam generators do not wait for the SMTP banner.

Spam generators are poorly behaved and will quickly move on to the next server.

Spam generators are poorly behaved and will quickly move on to the next server.

Spam has a very short TTL value.

Spam has a very short TTL value.

CHECK ANSWER