Network Security Engineer Redesign Documentation Quiz

1. A redesigned network implements IDS/IPS. Which statement best describes their difference?

IDS blocks threats; IPS only detects them

IDS detects threats; IPS blocks them

They are identical technologies

IDS works on wireless; IPS works on wired

2. In network redesign documentation, which layer handles end-to-end communication and error checking?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 5 (Session)

3. When redesigning for high availability, what is the purpose of load balancing?

Distribute traffic across multiple servers

Increase security encryption

Reduce employee workload

Replace backup systems

4. A network redesign documentation should include a risk assessment. What is the formula for risk?

Threat + Vulnerability

Threat × Vulnerability × Impact

Impact ÷ Probability

Asset Value - Cost

5. In a network redesign, which protocol is used to securely manage network devices remotely?

HTTP

SNMP v1

SSH

Telnet

6. When documenting network redesign security, what does the principle of least privilege require?

Grant all users full administrative access

Give users only the minimum permissions needed

Remove all access controls

Use only one password for all systems

7. A redesigned network implements MFA for administrative access. Which is NOT a common MFA factor?

Something you know (password)

Something you have (token)

Something you like (preference)

Something you are (biometric)

8. In network redesign documentation, what is the primary purpose of traffic shaping?

Increase total bandwidth

Control data flow and prevent congestion

Encrypt all traffic

Replace routers

9. A network redesign requires redundancy. Which technology provides automatic failover for critical servers?

DHCP

VRRP (Virtual Router Redundancy Protocol)

DNS

NAT

10. When documenting a network redesign, which subnet mask is used for a /24 network?

255.255.255.0

255.255.0.0

255.0.0.0

255.255.255.255

11. When redesigning a network, which layer of the OSI model is most critical for implementing access control lists (ACLs)?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 7 (Application)

12. In network redesign documentation, what is the primary function of a proxy server?

Increase bandwidth usage

Filter traffic and mask internal IP addresses

Eliminate the need for firewalls

Provide wireless connectivity

13. When redesigning for compliance, which framework is most relevant for healthcare networks?

PCI DSS

HIPAA

GDPR

SOC 2

14. A network redesign incorporates 802.1X authentication. What does this protocol primarily provide?

Port-based network access control

Wireless signal amplification

Data compression

IP address assignment

15. Which of the following should be included in network redesign documentation for disaster recovery?

Employee phone numbers only

RTO, RPO, and backup procedures

Only hardware vendor contacts

Social media login credentials

16. In a network redesign, what is the primary advantage of implementing a zero-trust architecture?

Eliminates all firewalls

Requires verification for every access request regardless of location

Reduces network latency

Removes the need for passwords

17. When documenting network segmentation in a redesign, which technology creates isolated broadcast domains?

Hubs

Bridges

VLANs

Repeaters

18. A network redesign requires implementing a VPN. Which encryption standard is most commonly recommended for modern security?

WEP

AES-256

MD5

DES

19. In network redesign documentation, what does DMZ stand for and what is its primary function?

Data Management Zone; stores user files

Demilitarized Zone; isolates public-facing servers from internal networks

Distributed Memory Zone; improves network speed

Digital Monitoring Zone; logs all traffic

20. Which protocol should be prioritized in a network redesign to replace unencrypted remote access methods?