ISC2 CC Network Security Concepts

1. What does a firewall primarily do?

Encrypts all network traffic

Monitors and controls incoming and outgoing network traffic

Prevents all malware infections

Authenticates user credentials

2. Which authentication method requires something you have and something you know?

Single-factor authentication

Multi-factor authentication

Biometric authentication only

Password-only authentication

3. What is the primary purpose of a demilitarized zone (DMZ)?

Store sensitive company data

Isolate external-facing services from internal networks

Speed up internet connections

Eliminate the need for firewalls

4. Which of the following is a defense against SQL injection?

Using parameterized queries

Disabling all databases

Removing encryption

Allowing all user inputs

5. What does the principle of least privilege require?

All users have admin access

Users receive only necessary permissions for their role

Network access is completely unrestricted

Passwords are shared among team members

6. Which encryption standard is considered cryptographically broken?

AES-256

RSA-2048

WEP

TLS 1.3

7. What is a zero-day vulnerability?

A vulnerability known for zero days

An unpatched vulnerability unknown to vendors

A vulnerability that affects only legacy systems

A vulnerability with a patch available

Submit

9. Which protocol is used for secure remote administration?

Telnet

SSH

FTP

SNMP

10. What is the primary goal of network segmentation?

Increase network speed

Limit lateral movement and contain breaches

Reduce hardware costs

Simplify network administration

11. Which access control model grants permissions based on a user's role?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

Submit

13. What does HTTPS add to HTTP?

Faster data transmission

Encryption and authentication

More bandwidth

Better caching

14. What is the primary purpose of a VPN?

Increase internet speed

Create an encrypted tunnel for secure remote access

Replace firewalls entirely

Eliminate the need for authentication

Submit

16. Which protocol is used for secure email transmission?

HTTP

SMTP

TLS/SSL

DNS

17. Which OSI layer is responsible for routing and logical addressing?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 5 (Session)

18. Which of the following is a Layer 4 protocol?

IP

TCP

Ethernet

ARP

Submit

ISC2 CC Network Security Concepts Quiz

1. What does a firewall primarily do?

2.

What first name or nickname would you like us to use?

2. Which authentication method requires something you have and something you know?

3. What is the primary purpose of a demilitarized zone (DMZ)?

4. Which of the following is a defense against SQL injection?

5. What does the principle of least privilege require?

6. Which encryption standard is considered cryptographically broken?

7. What is a zero-day vulnerability?

8. A ____ is a security system that monitors and analyzes network traffic for malicious activity.

9. Which protocol is used for secure remote administration?

10. What is the primary goal of network segmentation?

11. Which access control model grants permissions based on a user's role?

12. A ____ attack floods a network with traffic to make services unavailable.

13. What does HTTPS add to HTTP?

14. What is the primary purpose of a VPN?

15. A ____ is a network security system that monitors traffic between your network and external networks.

16. Which protocol is used for secure email transmission?

17. Which OSI layer is responsible for routing and logical addressing?

18. Which of the following is a Layer 4 protocol?

19. A ____ is a network device that translates private IP addresses to public IP addresses.

20. A ____ is a technique where attackers impersonate a trusted entity to deceive users.