CCNP Cybersecurity Network Architecture

1. Which firewall type performs deep packet inspection and understands application-layer protocols?

Stateless firewall

Stateful firewall

Next-generation firewall (NGFW)

Hardware firewall

2. In network security, what does the principle of 'defense-in-depth' require to be effective?

Relying solely on firewalls

Combining multiple security controls at different network layers

Using only encryption

Trusting user awareness alone

3. What is the primary benefit of network monitoring and logging in secure architecture?

Improve website loading speed

Detect suspicious activity and support incident response

Reduce software licensing costs

Eliminate the need for firewalls

4. Which cryptographic standard is recommended for securing sensitive government communications?

RC4

AES (Advanced Encryption Standard)

Base64

ROT13

5. What is the primary function of a reverse proxy in network security?

Hide client IP addresses from servers

Protect backend servers and filter requests

Increase network bandwidth

Replace firewalls entirely

6. Which authentication method provides the strongest security for network access?

Single-factor authentication

Multi-factor authentication (MFA)

Username and password only

Security questions

7. In secure architecture, what is the purpose of implementing access control lists (ACLs)?

Define who can access specific network resources

Encrypt all data transmissions

Monitor user login attempts

Backup network configurations

8. What does NIST stand for in the context of cybersecurity frameworks?

National Institute of Standards and Technology

Network Information Security Team

National Internet Security Taskforce

Network Infrastructure Security Threshold

9. Which of the following is a key component of secure network design?

Maximizing bandwidth without restrictions

Implementing redundancy and failover mechanisms

Using identical passwords for all accounts

Disabling all logging and monitoring

10. What is the primary goal of intrusion detection and prevention systems (IDS/IPS)?

Encrypt all network traffic

Identify and block malicious network activity

Manage user access credentials

Monitor system performance metrics

11. Which security model emphasizes implementing multiple layers of defense to protect network infrastructure?

Defense-in-depth

Zero-trust architecture

Perimeter security

Single sign-on

12. In network security, what does VPN stand for?

Virtual Private Network

Vital Protocol Network

Virtual Protection Node

Verified Public Network

13. Which protocol is used to securely manage network devices remotely?

Telnet

SSH

HTTP

SNMP

14. What is the purpose of a security policy in network architecture?

Define guidelines, procedures, and controls for protecting assets

Replace the need for technical controls

Eliminate all cyber threats

Reduce IT staffing requirements

15. Which security principle states that users should have only the minimum permissions necessary to perform their job?

Defense-in-depth

Least privilege

Separation of duties

Role-based access control

16. What is the primary advantage of implementing zero-trust architecture?

Eliminates all security threats

Assumes no user or device is trustworthy by default

Reduces network latency

Eliminates the need for firewalls

17. Which of the following best describes a DMZ (demilitarized zone)?

A network segment that isolates public-facing services from internal networks

A firewall rule set

An encryption algorithm

A user authentication protocol

18. In threat modeling, what does the acronym STRIDE represent?

Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege

Security, Tracking, Response, Incident, Detection, Escalation

Segmentation, Threat, Resilience, Infrastructure, Defense, Encryption

Scanning, Testing, Remediation, Identification, Documentation, Enforcement

19. Which encryption protocol is most commonly used to secure data in transit across networks?

MD5

TLS/SSL

WEP

DES

20. What is the primary purpose of network segmentation in a secure architecture?

Increase bandwidth utilization

Isolate critical assets and limit lateral movement

Reduce hardware costs

Simplify network management

CCNP Cybersecurity Secure Network Architecture Quiz