Network Security Engineer Redesign Documentation Quiz

1. In network redesign documentation, what does DMZ stand for and what is its primary function?

Data Management Zone; stores user files

Demilitarized Zone; isolates public-facing servers from internal networks

Distributed Memory Zone; improves network speed

Digital Monitoring Zone; logs all traffic

2. A network redesign requires implementing a VPN. Which encryption standard is most commonly recommended for modern security?

WEP

AES-256

MD5

DES

3. When documenting network segmentation in a redesign, which technology creates isolated broadcast domains?

Hubs

Bridges

VLANs

Repeaters

4. In a network redesign, what is the primary advantage of implementing a zero-trust architecture?

Eliminates all firewalls

Requires verification for every access request regardless of location

Reduces network latency

Removes the need for passwords

5. Which of the following should be included in network redesign documentation for disaster recovery?

Employee phone numbers only

RTO, RPO, and backup procedures

Only hardware vendor contacts

Social media login credentials

6. A network redesign incorporates 802.1X authentication. What does this protocol primarily provide?

Port-based network access control

Wireless signal amplification

Data compression

IP address assignment

7. When redesigning for high availability, what is the purpose of load balancing?

Distribute traffic across multiple servers

Increase security encryption

Reduce employee workload

Replace backup systems

8. In network redesign documentation, what is the primary function of a proxy server?

Increase bandwidth usage

Filter traffic and mask internal IP addresses

Eliminate the need for firewalls

Provide wireless connectivity

9. When redesigning a network, which layer of the OSI model is most critical for implementing access control lists (ACLs)?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 7 (Application)

10. When documenting a network redesign, which subnet mask is used for a /24 network?

255.255.255.0

255.255.0.0

255.0.0.0

255.255.255.255

11. A network redesign requires redundancy. Which technology provides automatic failover for critical servers?

DHCP

VRRP (Virtual Router Redundancy Protocol)

DNS

NAT

12. In network redesign documentation, what is the primary purpose of traffic shaping?

Increase total bandwidth

Control data flow and prevent congestion

Encrypt all traffic

Replace routers

13. A network redesign documentation should include a risk assessment. What is the formula for risk?

Threat + Vulnerability

Threat × Vulnerability × Impact

Impact ÷ Probability

Asset Value - Cost

14. When documenting network redesign security, what does the principle of least privilege require?

Grant all users full administrative access

Give users only the minimum permissions needed

Remove all access controls

Use only one password for all systems

15. A redesigned network implements IDS/IPS. Which statement best describes their difference?

IDS blocks threats; IPS only detects them

IDS detects threats; IPS blocks them

They are identical technologies

IDS works on wireless; IPS works on wired

16. In network redesign documentation, which layer handles end-to-end communication and error checking?

Layer 2 (Data Link)

Layer 3 (Network)

Layer 4 (Transport)

Layer 5 (Session)

17. In a network redesign, which protocol is used to securely manage network devices remotely?

HTTP

SNMP v1

SSH

Telnet

18. A redesigned network implements MFA for administrative access. Which is NOT a common MFA factor?

Something you know (password)

Something you have (token)

Something you like (preference)

Something you are (biometric)

19. When redesigning for compliance, which framework is most relevant for healthcare networks?

PCI DSS

HIPAA

GDPR

SOC 2

20. Which protocol should be prioritized in a network redesign to replace unencrypted remote access methods?