Network Hardening Best Practices

1. What does a Web Application Firewall (WAF) protect against?

Physical server theft

Application-layer attacks

Power outages

Network latency

2. What is the primary function of a VPN?

Increase bandwidth capacity

Create encrypted tunnel for secure communication

Block all external traffic

Replace firewall functionality

3. What is port security primarily used to prevent?

Unauthorized network access via switch ports

DNS resolution failures

Email spam

Printer connectivity issues

4. Which of the following represents a strong authentication method?

Username only

Password only

Multi-factor authentication

Security questions

5. What is the purpose of network access control (NAC)?

Increase bandwidth allocation

Verify device compliance before network access

Replace antivirus software

Speed up DNS resolution

6. Which protocol is used for secure remote administration of network devices?

Telnet

SSH

HTTP

FTP

7. Which practice helps prevent unauthorized access to network devices?

Publishing IP addresses publicly

Disabling unused services and ports

Using default vendor credentials

Allowing remote access from anywhere

8. Which encryption standard is currently recommended for securing wireless networks?

WEP

WPA

WPA3

Open Network

9. Which of the following is a best practice for firewall configuration?

Allow all traffic by default

Document all rules and review regularly

Use only inbound rules

Disable logging to improve performance

10. Which protocol should be disabled on network devices for security?

HTTPS

SSH

Telnet

DNS over HTTPS

11. What does TLS/SSL encryption primarily protect?

Network hardware from physical damage

Data in transit from eavesdropping

Hard drives from unauthorized access

Router firmware from updates

12. What is the primary goal of network hardening?

Increase network speed

Reduce security vulnerabilities

Expand network coverage

Lower hardware costs

13. Which protocol is used for secure DNS queries?

DNS over UDP only

DNS over HTTPS (DoH)

HTTP DNS

Unencrypted DNS

14. Which access control model denies access by default?

Allow-all model

Implicit deny

Guest access

Public network model

15. What does NIST recommend regarding default credentials?

Keep them for convenience

Change them immediately

Use them only internally

Share them with administrators

16. Which of the following is a best practice for password policy?

Require passwords to be written down

Enforce minimum length and complexity

Use the same password for all accounts

Change passwords every month without exception

17. What does a stateful firewall examine?

Only source and destination IP addresses

Connection state and packet context

Only destination port numbers

Physical media types

18. What is the main advantage of implementing role-based access control (RBAC)?

Eliminates all security breaches

Grants permissions based on job responsibilities

Increases network speed

Reduces the need for firewalls

19. What does a DMZ (demilitarized zone) protect?

Internal network from external threats

Wireless networks from wired networks

DNS servers from DHCP servers

VPN connections from SSL encryption

20. Which of the following is the primary purpose of network segmentation?

Increase network bandwidth

Isolate critical assets and limit lateral movement

Reduce the number of IP addresses needed

Simplify network documentation

Network+ Network Hardening Best Practices Quiz