Legacy System Network Segmentation Quiz

1. How should authentication be handled when segmenting legacy systems that don't support modern SSO?

Use a centralized gateway or proxy for credential management

Allow each system to maintain independent user accounts

Disable authentication entirely for performance

Require manual password updates hourly

2. What is the primary goal of applying the principle of least privilege in segmented legacy networks?

Granting only the minimum access necessary for systems to function

Providing all users with administrative rights

Eliminating all password requirements

Allowing unrestricted network access to legacy systems

3. Which documentation is critical when segmenting legacy networks?

Network diagrams, asset inventory, and data flow mappings

Marketing materials for the IT department

Employee phone directories

Vendor pricing agreements

4. What is a common method to ensure legacy systems can communicate across segments securely?

Whitelist specific IP addresses and ports in firewall rules

Remove all firewall restrictions between segments

Use broadcast traffic for all communications

Disable encryption to improve performance

5. When implementing segmentation, legacy systems should be placed in which type of network zone?

A restricted zone with strict inbound and outbound controls

The public DMZ alongside web servers

The same zone as development systems

An unmonitored isolated segment

6. What is the advantage of using network flow analysis in segmented legacy environments?

Detects abnormal traffic patterns and potential lateral movement attempts

Automatically patches all legacy systems

Eliminates the need for firewalls

Increases network bandwidth for all users

7. Which tool is commonly used to create a hardened jump host for accessing segmented legacy systems?

Bastion host or jump server

Network hub

Wireless repeater

Load balancer

8. What should be the default action for traffic between segmented legacy networks?

Deny unless explicitly allowed

Allow unless explicitly blocked

Log and forward all packets

Encrypt and compress all data

9. In network segmentation, what is a trust boundary?

A demarcation point where security policies change between network zones

A cable connecting two switches

A user account with administrative privileges

A backup power supply for servers

10. What monitoring approach is essential for segmented legacy networks?

Continuous logging and analysis of traffic between segments

Manual packet inspection every hour

Blocking all outbound traffic by default

Disabling all alerts to reduce false positives

11. What is the primary security benefit of network segmentation in legacy systems?

Isolates compromised systems and limits lateral movement

Increases overall network bandwidth

Reduces the cost of hardware upgrades

Simplifies password management across devices

12. What is the risk of connecting legacy systems directly to the internet without segmentation?

Direct exposure to threats and potential compromise of critical systems

Slower network speeds for other users

Increased licensing fees for operating systems

Automatic data loss on all connected devices

13. Which protocol is commonly used to manage VLAN traffic between switches?

802.1Q

ARP

IGMP

STP

14. What is the purpose of implementing micro-segmentation in a legacy network?

Creating smaller isolated zones to contain breaches within specific systems

Reducing the number of physical network cables

Increasing the speed of legacy database queries

Eliminating the need for firewalls

15. When segmenting legacy systems, what is a key challenge with older equipment?

Limited support for modern security protocols and standards

Excessive network bandwidth consumption

Inability to process encrypted traffic

Automatic incompatibility with firewalls

16. What does a network access control (NAC) solution help enforce in segmented networks?

Device compliance and policy adherence before network access

Encryption of all email traffic

Automatic firmware updates on all devices

Real-time video monitoring of server rooms

17. Which access control model is most appropriate for legacy systems with fixed roles?

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Zero Trust Model

Discretionary Access Control (DAC)

18. What is a demilitarized zone (DMZ) used for in network segmentation?

Hosting public-facing services while protecting internal networks

Storing backup data for disaster recovery

Isolating wireless access points

Managing user authentication credentials

19. In a segmented network, what should sit between legacy systems and modern networks?

A firewall with strict access control lists

A hub for packet forwarding

A repeater for signal amplification

A bridge for MAC learning

20. Which technology allows you to logically separate legacy systems on the same physical switch?

VLANs

DNS servers

MAC addresses

DHCP pools

Infrastructure Expert Segmenting a Legacy System Network Quiz