Network Hardening Best Practices

1. Which access control model denies access by default?

Allow-all model

Implicit deny

Guest access

Public network model

2. What is the purpose of network access control (NAC)?

Increase bandwidth allocation

Verify device compliance before network access

Replace antivirus software

Speed up DNS resolution

3. Which practice helps prevent unauthorized access to network devices?

Publishing IP addresses publicly

Disabling unused services and ports

Using default vendor credentials

Allowing remote access from anywhere

4. What does a Web Application Firewall (WAF) protect against?

Physical server theft

Application-layer attacks

Power outages

Network latency

5. Which of the following is a best practice for firewall configuration?

Allow all traffic by default

Document all rules and review regularly

Use only inbound rules

Disable logging to improve performance

6. What is the primary goal of network hardening?

Increase network speed

Reduce security vulnerabilities

Expand network coverage

Lower hardware costs

7. Which protocol is used for secure DNS queries?

DNS over UDP only

DNS over HTTPS (DoH)

HTTP DNS

Unencrypted DNS

8. What does NIST recommend regarding default credentials?

Keep them for convenience

Change them immediately

Use them only internally

Share them with administrators

9. Which of the following represents a strong authentication method?

Username only

Password only

Multi-factor authentication

Security questions

10. What is port security primarily used to prevent?

Unauthorized network access via switch ports

DNS resolution failures

Email spam

Printer connectivity issues

11. Which of the following is the primary purpose of network segmentation?

Increase network bandwidth

Isolate critical assets and limit lateral movement

Reduce the number of IP addresses needed

Simplify network documentation

12. What does TLS/SSL encryption primarily protect?

Network hardware from physical damage

Data in transit from eavesdropping

Hard drives from unauthorized access

Router firmware from updates

13. Which protocol should be disabled on network devices for security?

HTTPS

SSH

Telnet

DNS over HTTPS

14. What is the primary function of a VPN?

Increase bandwidth capacity

Create encrypted tunnel for secure communication

Block all external traffic

Replace firewall functionality

15. Which of the following is a best practice for password policy?

Require passwords to be written down

Enforce minimum length and complexity

Use the same password for all accounts

Change passwords every month without exception

16. What does a stateful firewall examine?

Only source and destination IP addresses

Connection state and packet context

Only destination port numbers

Physical media types

17. Which encryption standard is currently recommended for securing wireless networks?

WEP

WPA

WPA3

Open Network

18. What is the main advantage of implementing role-based access control (RBAC)?

Eliminates all security breaches

Grants permissions based on job responsibilities

Increases network speed

Reduces the need for firewalls

19. Which protocol is used for secure remote administration of network devices?