Timedora
Free Practice Quiz Question List

1 Network Security Foundations and Threats Online Quiz Questions

Use this free practice quiz with 20 questions to review 1 Network Security Foundations and Threats, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

True or false: If an organization has installed a firewall, it no longer needs to monitor activity or test its backups.

  1. A

    True

  2. B

    False

02
Choose one
1 point

An employee receives an unexpected invoice email containing a sign-in link. Which response best reduces the chance of credential theft?

  1. A

    Open the link in a private browser window and sign in if the page looks familiar

  2. B

    Avoid the link, verify the request through a known channel, and report the message

  3. C

    Forward the message to coworkers to ask whether they received it too

  4. D

    Reply to the sender and ask them to confirm the invoice

03
Written response
1 point

A database record remains accessible, but someone changes it without authorization. Which CIA-triad goal is directly compromised? Enter one term.

04
Fill in the blank
1 point

In a clinic's threat model, an employee account has a weak password that an attacker could exploit. The weak password is a .

05
Choose one
1 point

A public website becomes unreachable, preventing legitimate visitors from using it. Which security goal is most directly affected?

  1. A

    Confidentiality

  2. B

    Integrity

  3. C

    Availability

  4. D

    Authenticity

06
Choose all
1 point

A visitor's laptop may be compromised while connected to a business network. Which two design choices directly limit its paths to internal systems? Select all correct choices.

  1. A

    Place guest Wi-Fi in a separate network zone from staff computers and sensitive systems

  2. B

    Give guest devices unrestricted access to staff computers so troubleshooting is easier

  3. C

    Use firewall rules to block unnecessary traffic from the guest zone to internal systems

  4. D

    Rely on encryption alone to prevent a guest device from connecting to internal systems

07
Written response
1 point

A help-desk worker can reset accounts but is not given permission to read customer records. Which access-control principle does this illustrate? Enter the principle's name.

08
True or false
1 point

True or false: Encrypting data does not by itself decide whether a user who has gained access is authorized to use that data.

  1. A

    True

  2. B

    False

09
Fill in the blank
1 point

A system first checks a user's claimed identity, then decides which records the user may view. The identity check is .

10
Choose all
1 point

Which two practices are consistent with a zero-trust approach? Select all correct choices.

  1. A

    Verify identity and authorization for access to the requested resource

  2. B

    Treat every device inside the corporate network as trustworthy

  3. C

    Consider device condition or other context when making access decisions

  4. D

    Grant access to all internal resources after a user signs in once

11
Choose one
1 point

An attacker sends enough traffic to overwhelm a service, preventing legitimate users from accessing it. What type of attack is this?

  1. A

    Eavesdropping

  2. B

    Denial of service

  3. C

    Credential theft

  4. D

    Lateral movement

12
Open ended
1 point

A clinic identifies its patient-record system as critical after an employee password is stolen. Explain which asset is at risk, how the stolen password could threaten security goals, and how at least two suitable controls could reduce the risk or support recovery.

13
Choose one
1 point

An attacker has gained access to one device and then tries to reach other accounts and systems on the network. What is this activity called?

  1. A

    Spoofing

  2. B

    Eavesdropping

  3. C

    Lateral movement

  4. D

    Denial of service

14
Written response
1 point

A company wants to confirm that it can restore its systems and data after an outage. Which recovery measure should it maintain and test? Enter a short phrase.

15
Written response
1 point

A system checks whether an incoming message is genuinely from the sender it claims to be. Which security property is it checking? Enter one term.

16
True or false
1 point

True or false: A successful login proves that the user is authorized to access every resource in the organization.

  1. A

    True

  2. B

    False

17
Choose one
1 point

A company wants authorized staff to keep using a critical service if one component fails. Which plan most directly supports that goal?

  1. A

    Encrypt all stored data, but make no changes to recovery arrangements.

  2. B

    Use redundant services and tested backups so systems and data can be restored.

  3. C

    Remove user accounts whenever there is a service interruption.

  4. D

    Monitor login locations but leave the failed service unrecoverable.

18
Choose one
1 point

A public website becomes unreachable during a traffic surge. Which response best follows the recommended approach?

  1. A

    Immediately shut down the website without investigating the cause.

  2. B

    Determine whether the surge is an attack or legitimate demand, then use appropriate traffic-management protections.

  3. C

    Assume the surge is legitimate and disable monitoring to preserve capacity.

  4. D

    Allow all incoming traffic and wait for demand to return to normal.

19
Choose one
1 point

A visitor's laptop may be infected. Which network design best limits the chance that it can reach staff computers or a records system?

  1. A

    Give guest devices the same access as staff devices so they can reach services more easily.

  2. B

    Separate guest Wi-Fi and allow only the connections guests need, blocking access to internal systems.

  3. C

    Rely on encryption alone to prevent a compromised guest device from reaching staff computers.

  4. D

    Disable monitoring on the guest network because visitors are not employees.

20
Choose one
1 point

A server runs services it does not need and has missed several security updates. Which action best improves its secure configuration?

  1. A

    Remove unneeded services and apply security updates in a timely, tested way.

  2. B

    Keep default credentials so administrators can access systems more easily.

  3. C

    Delay all updates indefinitely to avoid changing system behavior.

  4. D

    Allow every network connection and rely on users to report problems.