Network Security Segmentation & Design Quiz

1. A network has separate segments for finance, HR, and general users. What security principle does this follow?

Defense in depth

Least privilege

Network segmentation

Zero trust

2. A segmented network requires secure communication between segments. Which encryption method is most commonly used for this purpose?

SSL/TLS for encrypted tunnels

ROT13 encoding

Base64 encoding

Unencrypted HTTP

3. When implementing a zero-trust network model, what is the core principle regarding trust?

Trust all internal users and devices

Never trust any user or device by default; verify always

Trust only external networks

Trust devices based on IP address alone

4. What is the primary function of network monitoring and logging in a segmented architecture?

Detect and respond to unauthorized access attempts

Increase network speed

Replace firewalls

Reduce the number of VLANs

5. In network segmentation, what is the purpose of a proxy server placed in the DMZ?

Replace internal routers

Inspect and filter traffic between internal and external networks

Increase bandwidth

Store user passwords

6. A network engineer implements a guest VLAN separate from employee VLANs. What primary security goal does this achieve?

Prevents guest devices from accessing sensitive company resources

Improves internet speed for guests

Eliminates the need for passwords

Automatically detects malware

7. Which of the following is a critical security consideration when designing segment-to-segment traffic flow?

All traffic should be allowed by default

Only necessary traffic should be permitted

Segments should never communicate

Traffic should bypass firewalls for speed

8. In a segmented network architecture, what does 'microsegmentation' primarily achieve?

Reduces IP addresses needed

Isolates individual workloads or users for granular control

Increases network speed

Eliminates the need for monitoring

9. What is the key advantage of using 802.1X in network segmentation?

Increases wireless range

Authenticates devices before network access

Encrypts all wireless traffic automatically

Replaces VPNs

10. When designing a segmented network, what is the primary purpose of a jump host or bastion host?

Increase bandwidth

Provide controlled access to sensitive systems

Replace firewalls

Cache DNS requests

11. Which network design principle isolates critical servers from general user traffic?

Network segmentation

Load balancing

Bandwidth throttling

Packet filtering

12. Which protocol is commonly used to authenticate and authorize users in a segmented network?

DHCP

RADIUS or TACACS+

SNMP

HTTP

13. In network segmentation, what does an ACL (Access Control List) primarily control?

Physical server locations

Traffic flow between network segments

User password complexity

Disk encryption standards

14. What is the primary benefit of implementing network access control (NAC) in a segmented environment?

Enforces device compliance before network access

Eliminates the need for firewalls

Automatically encrypts all traffic

Provides IP address management only

15. A segmented network uses multiple security zones. Which zone typically contains web servers and email servers?

Internal network

DMZ

Guest network

Management network

16. Which access control model is most suitable for enforcing least privilege in a segmented network?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

17. In a segmented network, what is the primary function of a firewall between zones?

Encrypt all traffic

Enforce access policies between segments

Increase network bandwidth

Replace routers

18. A network engineer wants to separate IoT devices from corporate workstations. What technology best achieves this?

VLANs and access control lists

Port forwarding

MAC address filtering only

DNS blocking

19. Which OSI layer do VLANs primarily operate on?

Layer 1 (Physical)

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

20. What does a DMZ (demilitarized zone) primarily protect in a segmented network?

Internal servers from external threats

Wireless networks from interference

User endpoints from malware

Backup systems from data loss

Network Security Engineer Designing a Segmented Network Quiz