Network Hardening Techniques (Network+) Security Quiz

1. Which type of access control uses attributes like role, department, and resource type?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

2. What is the purpose of certificate pinning in device hardening?

Speed up SSL handshakes

Prevent man-in-the-middle attacks by validating certificates

Reduce encryption overhead

Eliminate certificate expiration

3. Which protocol should replace unencrypted email transmission?

SMTP

SMTP with TLS/SSL

POP3

IMAP unencrypted

4. What is the primary benefit of implementing logging and monitoring in hardened systems?

Improve system speed

Detect and respond to security incidents

Reduce hardware costs

Simplify user management

5. Which hardening practice involves removing or disabling unneeded software?

Patch management

Service minimization

Encryption enforcement

User auditing

6. What does secure boot protect against?

Slow startup times

Malicious firmware and bootkit attacks

Network connectivity issues

User login delays

7. Which configuration hardens a system by running services with minimal permissions?

Full administrative access

Service accounts with least privilege

Universal user accounts

Shared system passwords

8. What is the primary function of a bastion host in network security?

Store all user data

Act as a hardened gateway for external access

Block all internet traffic

Replace firewalls entirely

9. Which hardening technique prevents privilege escalation attacks?

Disabling antivirus software

Running all applications with admin rights

Implementing principle of least privilege

Removing user account controls

10. What is the primary goal of network segmentation?

Increase internet speed

Isolate critical assets and limit lateral movement

Reduce the number of users

Eliminate all firewalls

11. Which security control restricts user access to only the resources necessary for their job function?

Least Privilege

Defense in Depth

Zero Trust

Segmentation

12. What does the principle of Defense in Depth involve?

Using only one security layer

Implementing multiple overlapping security controls

Relying solely on firewalls

Trusting all internal users

13. Which of the following is a best practice for securing physical devices?

Leave devices unlocked for convenience

Enable BIOS/UEFI passwords

Allow anyone to access servers

Disable all security features

14. What is the purpose of keeping systems updated with security patches?

Add new features only

Close known vulnerabilities

Improve user interface

Reduce license costs

15. Which authentication method provides the highest security for user access?

Single-factor authentication

Multi-factor authentication

Biometric only

Password only

16. What does a firewall primarily do in network hardening?

Encrypts all network traffic

Controls inbound and outbound traffic

Monitors user behavior

Backs up system files

17. Which protocol should be used instead of Telnet for secure remote management?

HTTP

SSH

FTP

SNMP

18. What is the primary benefit of implementing strong password policies?

Prevent unauthorized account access

Speed up login processes

Reduce storage requirements

Improve system performance

19. Which encryption standard is recommended for securing wireless networks?

WEP

WPA3

WPA

Open Network

20. What is the primary purpose of disabling unnecessary services and ports on a device?

Reduce the attack surface

Improve processor speed

Increase user bandwidth

Lower energy consumption

Hardening Quiz: Can You Secure Every Device?