Network & Endpoint Security Controls Quiz

1. Which encryption standard is currently recommended for protecting sensitive data at rest?

DES

MD5

AES-256

RC4

2. Which control prevents unauthorized changes to system files and configurations?

Application whitelisting

File integrity monitoring

Browser caching

Disk defragmentation

3. What is the purpose of security information and event management (SIEM)?

To manage printer queues

To aggregate and analyze security logs from multiple sources

To schedule employee breaks

To adjust monitor settings

4. In SSL/TLS communication, what does the certificate primarily verify?

User email address

Server identity and enable encrypted connection

Employee salary information

Printer model number

5. What does network access control (NAC) enforce?

Email delivery policies

Device compliance before network connection

Printer permissions

Monitor refresh rates

6. Which of the following is a key component of endpoint detection and response (EDR)?

Email spam filtering

Real-time threat monitoring and investigation

Printer management

Screen brightness adjustment

7. What is the primary advantage of using a Zero Trust security model?

It trusts all internal traffic automatically

It verifies every access request regardless of source

It eliminates the need for firewalls

It removes all security controls

8. Which protocol is used for secure email encryption?

SMTP

POP3

S/MIME

IMAP

9. In endpoint hardening, what does disabling unnecessary services accomplish?

It increases system performance only

It reduces the attack surface

It enables all security features

It removes all passwords

10. What is the primary role of a Web Application Firewall (WAF)?

To manage employee email

To protect web applications from Layer 7 attacks

To increase server RAM

To schedule software patches

11. Which network architecture principle divides a network into separate zones to limit lateral movement?

Network segmentation

Port forwarding

Traffic shaping

Load balancing

12. What does a VPN primarily provide for remote users?

Increased download speed

Encrypted tunnel for secure data transmission

Unlimited storage space

Automatic software updates

13. Which authentication method combines something you know with something you have?

Single-factor authentication

Multi-factor authentication

Biometric-only authentication

Token-less authentication

14. What is the main benefit of implementing full-disk encryption on endpoints?

It improves internet speed

It protects data if a device is lost or stolen

It reduces power consumption

It eliminates the need for passwords

15. Which endpoint security control involves monitoring and restricting file access?

Data Loss Prevention (DLP)

BIOS updates

Screen resolution settings

Printer configuration

16. What does an Intrusion Detection System (IDS) primarily do?

Prevents all network traffic

Detects and alerts on suspicious network activity

Encrypts all data in transit

Manages user passwords

17. Which of the following is a function of a next-generation firewall (NGFW)?

Application-layer filtering and intrusion prevention

Email delivery only

Wireless signal amplification

Hard drive encryption

18. In defense-in-depth, what does the principle of least privilege ensure?

Users have maximum access to all resources

Users have only the minimum access needed for their role

All users share the same password

Security policies are optional

19. Which protocol is most commonly used for secure remote access to network devices?

Telnet

SSH

HTTP

FTP

20. What is the primary purpose of a DMZ in network infrastructure?

To store backup data

To isolate public-facing services from internal networks

To increase network bandwidth

To cache DNS queries

Infrastructure Expert Layering Network and Endpoint Controls Quiz