Network Security MCQ Quiz and Online Test

Important Instructions:

Total Number Of Questions : 10
Passing Marks : 7
Each Question Carry 1 Mark, No Negative Marking.
Do Not Refresh The Page.
This Is A FREE Online Test, DO NOT Pay Money To Anyone To Attend This Test.
Best Of Luck…

Results

Congratulation…
You Have Passed The Test, You Should Try To The Next One…!!

Rate this post

Unfortunately…
You Did Not Pass. Why Not Try It Again?

Rate this post

#1. You need to set up a DMZ but want to keep the servers inside the DMZ on a private address space. You have plenty of public IP address space and just want to map each server’s private address to a unique public address. What type of NAT would be most appropriate?

Static NAT

Full-cone NAT

Port Address Translation

Dynamic NAT

#2. Your organization is looking to redesign its network perimeter. Your boss wants to purchase a new “all in one” device and put everything behind that device on a flat network. Others in the meeting argue that it would be better to have a primary firewall, a DMZ for public services, a secondary firewall, and a firewall separating the server farm from the rest of the network. What security principle is your boss overlooking that the others in the meeting are not?

Network separation

Defense in depth

Loop prevention

Network access control

#3. You are starting a sensitive application development project with another organization. Both organizations would like to share the same development platform, but neither organization wants to allow the other organization to access its internal networks. What is the most appropriate type of cloud service to use in this scenario?

Private cloud

Hybrid cloud

Community cloud

Public cloud

#4. When would disabling SSID broadcasting make the most sense?

When near an airport with a large, free Wi-Fi infrastructure

When unable to encrypt the Wi-Fi signal due to noncompliant client machines

When running a hotel network and you are concerned about access from the parking lot

When providing guest wireless outside of the firewall that is not intended to be public

#5. Why is a site survey important to wireless security?

Higher-strength wireless increases the effectiveness of Wi-Fi encryption keys.

Minimizing the strength of the signal sent outside of the physical walls of the building can reduce the risk of attacks.

Configuring the fewest access points needed to provide adequate coverage offers the fewest possible targets for an attacker to compromise.

The Wi-Fi signal can be restricted from external users when proper antennas are used.

#6. What does LEAP do?

Modernizes Wi-Fi with a new encryption cipher

Provides TLS support for Wi-Fi authentication under Windows

Provides a lightweight mutual authentication protocol for clients and uses dynamic WEP keys

Forces Cisco devices to use WPA2

#7. What is a threat to VPN over open wireless?

Hackers can sniff all the VPN packets and decrypt them.

The user must connect to the open wireless before starting VPN, allowing an attacker a potential window of time to compromise the machine.

A certificate could be faked, allowing access into the corporate server.

All of the above.

#8. Which security practice(s) will be best for the networks that are used for guests? (Choose Two.)

Select all that apply:

MAC address filtering

WPA2

Captive portal

LEAP

#9. Which security practice(s) will be best for the networks that are used for employees? (Choose Three)

Select all that apply:

MAC address filtering

WPA2

Site survey

Disable SSID broadcast

#10. Your boss asks you to reconfigure the network to also support a bring your own device (BYOD) initiative. Which security measure on the corporate network would not be compatible?

WPA2

Captive portal

Site survey

MAC address filter

CHECK ANSWER

Rate this post