Question 1

What is the primary purpose of network security?

Accepted Answer

To prevent unauthorized access and protect data

Answer

To promote network interoperability

Answer

To enhance network speed

Answer

To increase network complexity

Question 2

Which of the following is NOT a common category of network attacks?

Accepted Answer

Physical intrusion

Answer

Data manipulation/alteration

Answer

Denial-of-Service

Answer

Eavesdropping

Question 3

What is the main characteristic of a Distributed Denial of Service (DDoS) attack?

Accepted Answer

It is coordinated from multiple sources

Answer

It compromises a single host

Answer

It originates from a single source

Answer

It targets specific individuals

Question 4

What is the purpose of reconnaissance attacks in network security?

Accepted Answer

To perform unauthorized discovery and mapping of systems

Answer

To overload target devices with a large quantity of traffic

Answer

To gain unauthorized access to systems

Answer

To modify data packets during transmission

Question 5

What is the primary objective of a buffer overflow attack?

Accepted Answer

To overwhelm system memory and cause it to crash

Answer

To prevent unauthorized access

Answer

To encrypt sensitive data

Answer

To intercept network traffic

Question 6

Which of the following is NOT a type of modern malware?

Accepted Answer

Firewall

Answer

Adware

Answer

Trojan Horse

Answer

Spyware

Question 7

What does PII stand for in the context of threat impact?

Accepted Answer

Personally Identifiable Information

Answer

Personal Internet Interactions

Answer

Public Internet Information

Answer

Protected Information Interface

Question 8

Which term refers to a group of compromised hosts controlled by a master command-and-control server?

Accepted Answer

Botnet

Answer

Zombies

Answer

Handlers

Answer

Bots

Question 9

What is the primary goal of a denial-of-service (DoS) attack?

Accepted Answer

To disrupt normal network operations

Answer

To encrypt sensitive data

Answer

To modify network protocols

Answer

To gain unauthorized access to systems

Question 10

What is the primary purpose of a security policy?

Accepted Answer

To prevent unauthorized access and protect data

Answer

To enhance network interoperability

Answer

To increase network speed

Answer

To promote network complexity

Question 11

Which of the following is NOT a primary component of a security awareness program?

Accepted Answer

Penetration testing

Answer

Incident response training

Answer

Training and education

Answer

Awareness campaigns

Question 12

What is the main role of executive-level management in network security?

Accepted Answer

Overseeing security policy creation

Answer

Ensuring physical security

Answer

Developing security awareness programs

Answer

Creating technical policies

Question 13

Which term refers to the process of gathering forensics data precisely and quickly during a security breach?

Accepted Answer

Data collection

Answer

Data encryption

Answer

Data corruption

Answer

Data manipulation

Question 14

What is the primary purpose of encryption and password protection for sensitive data?

Accepted Answer

To prevent unauthorized access

Answer

To increase network speed

Answer

To promote network complexity

Answer

To enhance network interoperability

Question 15

What is the main objective of access attacks in network security?

Accepted Answer

To gain unauthorized access to systems

Answer

To disrupt network traffic

Answer

To enhance network performance

Answer

To modify network protocols

Question 16

Which of the following is NOT a common social engineering attack?

Accepted Answer

Spoofing

Answer

Phishing

Answer

Pretexting

Answer

Spam

Question 17

What is the primary purpose of a vulnerability scanner?

Accepted Answer

To identify weaknesses in a system or network

Answer

To disrupt normal network operations

Answer

To encrypt sensitive data

Answer

To prevent network intrusion

Question 18

Which of the following is NOT a common response to a security breach?

Accepted Answer

Data encryption

Answer

Incident handling

Answer

Data backups

Answer

Data collection

Question 19

What is the primary objective of a man-in-the-middle attack?

Accepted Answer

To intercept and modify communication between two parties

Answer

To enhance network performance

Answer

To gain unauthorized access to systems

Answer

To disrupt network traffic

Question 20

Which term refers to a subset of Personally Identifiable Information (PII) and involves electronic medical records?

Accepted Answer

Protected Health Information (PHI)

Answer

Privacy Enhancement Protocol

Answer

Personal Data Security

Answer

Sensitive Information System

Question 21

What is the primary purpose of the Defense-in-Depth strategy in network security?

Accepted Answer

To slow down an attack's progress through multiple layers of security

Answer

To protect against specific types of attacks

Answer

To implement a single line of defense

Answer

To rely solely on perimeter firewalls for protection

Question 22

What is the key benefit of implementing multiple layers of security measures in Defense-in-Depth?

Accepted Answer

Redundancy in protection

Answer

Greater reliance on a single defense mechanism

Answer

Decreased complexity in security management

Answer

Faster attack detection

Question 23

Which of the following is NOT a component of the CIA triad?

Accepted Answer

Accessibility

Answer

Integrity

Answer

Availability

Answer

Confidentiality

Question 24

What is the primary function of Access Control in network security?

Accepted Answer

To restrict access to authorized entities

Answer

To monitor network traffic

Answer

To prevent system crashes

Answer

To allow unrestricted access to all users

Question 25

Which access control model allows users to control access to their data?

Accepted Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Non-Discretionary Access Control

Answer

Attribute-Based Access Control (ABAC)

Question 26

What does AAA stand for in network security?

Accepted Answer

Authentication, Authorization, and Accounting

Answer

All Access Authorization

Answer

Advanced Authorization Algorithm

Answer

Automated Access Administration

Question 27

Which type of AAA authentication method uses a central server for user authentication?

Accepted Answer

Server-Based AAA Authentication

Answer

Local AAA Authentication

Answer

Remote AAA Authentication

Answer

Secure AAA Authentication

Question 28

What is the primary purpose of AAA Accounting?

Accepted Answer

To keep a log of user activities

Answer

To restrict network access

Answer

To authenticate users

Answer

To authorize user actions

Question 29

Which organization offers detailed threat information and is known for its CERT program?

Accepted Answer

CERT

Answer

SANS

Answer

MITRE

Answer

Cisco

Question 30

What type of information does the Common Vulnerabilities and Exposures (CVE) database contain?

Accepted Answer

Information on network vulnerabilities

Answer

Access control models

Answer

Security policy guidelines

Answer

Threat intelligence reports

Question 31

What analogy is used to describe a layered approach to security in the provided content?

Accepted Answer

Security Onion

Answer

Security Tree

Answer

Security Potato

Answer

Security Apple

Question 32

What is the primary purpose of BYOD policies in organizations?

Accepted Answer

To specify guidelines for employees using their own devices

Answer

To allow unlimited access to company resources

Answer

To restrict employees from using personal devices

Answer

To eliminate the need for network security measures

Question 33

Which type of access control relies on roles and responsibilities for granting access?

Accepted Answer

Non-Discretionary Access Control

Answer

Mandatory Access Control (MAC)

Answer

Discretionary Access Control (DAC)

Answer

Attribute-Based Access Control (ABAC)

Question 34

What is the primary purpose of Security Policies in network security?

Accepted Answer

To define rules for expected behavior

Answer

To eliminate the need for authentication

Answer

To increase network complexity

Answer

To restrict access to authorized users

Question 35

Which type of security policy covers what users are allowed and not allowed to do on system components?

Accepted Answer

Acceptable Use Policy (AUP)

Answer

Business Policy

Answer

Security Policy

Answer

BYOD Policy

Question 36

Which of the following is NOT a component of the CIA triad?

Accepted Answer

Integration

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 37

What is the primary function of Access Control in network security?

Accepted Answer

To restrict access to authorized entities

Answer

To prevent system crashes

Answer

To monitor network traffic

Answer

To allow unrestricted access to all users

Question 38

Which access control model allows users to control access to their data?

Accepted Answer

Discretionary Access Control (DAC)

Answer

Attribute-Based Access Control (ABAC)

Answer

Mandatory Access Control (MAC)

Answer

Non-Discretionary Access Control

Question 39

What does AAA stand for in network security?

Accepted Answer

Authentication, Authorization, and Accounting

Answer

Advanced Authorization Algorithm

Answer

All Access Authorization

Answer

Automated Access Administration

Question 40

Which type of AAA authentication method uses a central server for user authentication?

Accepted Answer

Server-Based AAA Authentication

Answer

Local AAA Authentication

Answer

Remote AAA Authentication

Answer

Secure AAA Authentication