Network Hardening Quiz: Can You Secure The Edge?

1. Which hardening technique involves disabling unused network services on a device?

Port forwarding

Service minimization

Load balancing

Traffic shaping

2. Which of the following is a best practice for hardening wireless networks?

Broadcast the SSID openly for easy access

Use WEP encryption for maximum compatibility

Enable WPA3 or WPA2 encryption with strong passphrases

Disable authentication to simplify user connections

3. What is the primary advantage of using a proxy server in network hardening?

Increases network bandwidth

Caches content and masks internal IP addresses from external traffic

Eliminates the need for firewalls

Automatically encrypts all data

4. Which protocol should be disabled on network devices to prevent credential interception?

HTTPS

SSH

Telnet

SFTP

5. A default-deny firewall rule means:

All traffic is allowed unless explicitly blocked

All traffic is blocked unless explicitly permitted

Incoming traffic is allowed but outgoing is denied

Only HTTPS traffic is permitted

6. What does VLAN tagging (802.1Q) enable in a network?

Encryption of all VLAN traffic automatically

Multiple logical networks on a single physical network

Increased bandwidth on trunk ports

Elimination of the need for routing

7. Which authentication method provides multi-factor verification for network access?

Username and password only

MAC address filtering

Biometric scanning combined with a PIN

IP address whitelisting

8. What is the purpose of disabling unnecessary ports on a switch as part of hardening?

Reduce power consumption slightly

Prevent unauthorized device connections on unused ports

Increase network latency

Simplify cable management

9. Which of the following best describes network hardening?

Increasing network speed and performance

Implementing security measures to reduce vulnerabilities and attack surface

Replacing old network hardware with newer equipment

Consolidating all servers into a single data center

10. An IDS (Intrusion Detection System) differs from an IPS (Intrusion Prevention System) in that an IDS:

Only detects threats without actively blocking them

Blocks all incoming traffic automatically

Encrypts network traffic by default

Requires manual configuration for each rule

11. Which of the following is the primary purpose of network segmentation in hardening a network infrastructure?

Reduce bandwidth consumption across switches

Isolate critical assets and limit lateral movement of threats

Increase the number of routers in the network

Simplify IP address allocation

12. What does RADIUS provide in terms of network security?

Encryption of all network traffic

Centralized authentication and authorization for network access

Automatic malware detection

Real-time packet inspection

13. Which of the following is a key benefit of implementing VLANs in a network hardening strategy?

Increases network bandwidth automatically

Isolates traffic between departments and reduces broadcast domains

Eliminates the need for firewalls

Allows all devices to communicate without restrictions

14. What is port security primarily designed to prevent?

Unauthorized devices connecting to switch ports

DNS spoofing attacks

BGP hijacking

Man-in-the-middle attacks on wireless networks

15. Which protocol is used to securely transmit network management information and replace SNMP v1/v2?

SNMPv3

RADIUS

TACACS+

Kerberos

16. A DMZ (Demilitarized Zone) is typically used to:

Host all internal company data and user workstations

Isolate public-facing servers from internal networks

Store backup copies of critical files

Manage wireless access points

17. Which of the following best describes the principle of least privilege in network security?

Grant all users full network access to ensure productivity

Grant users only the minimum access required for their role

Deny all traffic by default without exceptions

Allow guest access on all network segments

18. What is the primary function of an ACL (Access Control List) in network hardening?

Monitor all network traffic in real-time

Define which traffic is permitted or denied based on rules

Encrypt all data transmitted across the network

Balance load across multiple servers

19. Which encryption protocol is most commonly used to secure remote administrative access to network devices?

HTTP

SSH