Secure Design Quiz: Can You Build It Right?

1. Which access control model determines permissions based on user identity?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Attribute-Based Access Control (ABAC)

Rule-Based Access Control

Submit

3. What does VLAN segmentation primarily accomplish in secure network design?

Increases network speed

Isolates traffic between logical network segments

Reduces encryption overhead

Eliminates the need for firewalls

4. True or False: Network Address Translation (NAT) alone provides sufficient security against external attacks.

True

False

5. Which security principle ensures that no single person has complete control over critical functions?

Separation of duties

Need-to-know

Mandatory access control

Implicit deny

Submit

7. What is the primary function of a reverse proxy in network security?

Block all external traffic

Hide internal servers and filter requests

Encrypt user passwords

Manage user authentication only

8. True or False: TLS 1.2 is obsolete and should not be used in modern networks.

True

False

9. Which of the following best describes zero trust architecture?

Trust all internal users without verification

Never trust, always verify every access request

Trust users only on corporate networks

Trust all authenticated users automatically

Submit

11. Which security model uses the principle of 'deny by default'?

Whitelist approach

Blacklist approach

Gray-list approach

Open-list approach

12. What is the purpose of an intrusion detection system (IDS)?

Encrypt all network traffic

Monitor and detect unauthorized access attempts

Assign IP addresses to devices

Manage user authentication

13. True or False: A bastion host is a hardened system exposed to untrusted networks.

True

False

14. Which protocol is used for secure remote access to network devices?

Telnet

SSH

HTTP

FTP

Submit

16. Which of the following is a key component of defense-in-depth strategy?

Single firewall protection

Multiple layers of security controls

Reliance on user passwords only

No network segmentation

17. What does the principle of least privilege require?

Users have maximum access to all resources

Users receive only the minimum access needed for their role

All users have identical permissions

Administrators grant access without restrictions

Submit

19. Which encryption standard is considered secure for long-term data protection?

WEP

DES

AES-256

MD5

20. What is the primary purpose of network segmentation in secure design?

Increase bandwidth usage

Isolate critical systems and limit lateral movement

Reduce the cost of network equipment

Simplify IP addressing schemes

Secure Design Quiz: Can You Build It Right?

1. Which access control model determines permissions based on user identity?

2.

What first name or nickname would you like us to use?

2. A ______ is a network access control method that verifies device compliance before allowing connection.

3. What does VLAN segmentation primarily accomplish in secure network design?

4. True or False: Network Address Translation (NAT) alone provides sufficient security against external attacks.

5. Which security principle ensures that no single person has complete control over critical functions?

6. A ______ is a cryptographic protocol that establishes secure communication over an insecure channel.

7. What is the primary function of a reverse proxy in network security?

8. True or False: TLS 1.2 is obsolete and should not be used in modern networks.

9. Which of the following best describes zero trust architecture?

10. A ______ is a network that sits between internal and external networks to host public-facing services.

11. Which security model uses the principle of 'deny by default'?

12. What is the purpose of an intrusion detection system (IDS)?

13. True or False: A bastion host is a hardened system exposed to untrusted networks.

14. Which protocol is used for secure remote access to network devices?

15. A ______ is a network device that inspects traffic and blocks unauthorized communications.

16. Which of the following is a key component of defense-in-depth strategy?

17. What does the principle of least privilege require?

18. A ______ is a boundary that separates trusted internal networks from untrusted external networks.

19. Which encryption standard is considered secure for long-term data protection?

20. What is the primary purpose of network segmentation in secure design?