Timedora
Free Practice Quiz Question List

2 Network Segmentation Online Quiz Questions

Use this free practice quiz with 20 questions to review 2 Network Segmentation, test your knowledge, and prepare for your next test or exam.

20 questions
01
Choose one
1 point

When planning network zones, which approach best supports security and the systems’ needs?

  1. A

    Group systems according to the building they occupy.

  2. B

    Group systems according to similar purposes and security requirements.

  3. C

    Put all systems owned by one department in the same zone.

  4. D

    Group systems according to their operating system.

02
True or false
1 point

True or false: Assigning systems to different subnets automatically prevents them from communicating with one another.

  1. A

    True

  2. B

    False

03
Fill in the blank
1 point

Untrusted visitor devices should be placed in the , isolated from internal resources.

04
Written response
1 point

What zone is intended for administrative workstations and interfaces used to manage infrastructure?

05
Choose one
1 point

An organization wants to apply communication policies more precisely than at the zone or subnet level. Which approach is designed for this?

  1. A

    Assigning one subnet to every department

  2. B

    Allowing all internal subnets to communicate

  3. C

    Applying policy to individual workloads or services

  4. D

    Moving all servers into a single application zone

06
True or false
1 point

True or false: A device located on an internal network should be treated as trustworthy without separately authorizing its access to resources.

  1. A

    True

  2. B

    False

07
Fill in the blank
1 point

A segmentation policy should permit necessary traffic and other inter-zone traffic by default.

08
Written response
1 point

What is the name of the approach that applies network policy to individual workloads or services?

09
Choose all
1 point

Select all the controls that can enforce boundaries between network zones.

  1. A

    Network firewalls

  2. B

    Router access-control lists

  3. C

    Host firewalls

  4. D

    Separate subnet ranges without traffic controls

  5. E

    Cloud security controls

10
Choose one
1 point

Employees need to use company data, but the design specifies that they access it through an internal application. Which policy best follows that design?

  1. A

    Allow user-zone devices to reach any database service.

  2. B

    Allow all internal networks to communicate with the database.

  3. C

    Allow guest devices to reach the database if they use HTTPS.

  4. D

    Deny direct user-zone access to the database and route data access through the application.

11
Choose all
1 point

Select all the details a segmentation policy should specify for each required flow.

  1. A

    Source

  2. B

    System owner’s name

  3. C

    Destination

  4. D

    Service or protocol

  5. E

    Direction

  6. F

    Business reason

12
Choose one
1 point

Why should an organization restrict outbound traffic where practical?

  1. A

    It automatically prevents all lateral movement between internal zones.

  2. B

    Unrestricted outbound traffic can allow compromised systems to communicate with external services.

  3. C

    It ensures that all application dependencies are documented.

  4. D

    It removes the need to monitor boundary traffic.

13
Open ended
1 point

A company is adding guest Wi-Fi. Describe how to segment visitor devices from internal resources, including a traffic-policy decision and one way to verify that the boundary works.

14
Choose one
1 point

Which plan best balances necessary business communication with limiting unnecessary paths between zones?

  1. A

    Allow every zone to communicate freely so business work is not disrupted.

  2. B

    Allow documented necessary flows, deny other inter-zone traffic by default, and test both permitted and prohibited paths.

  3. C

    Put all assets in one subnet and rely on monitoring to identify unwanted access.

  4. D

    Block all network traffic, including flows required by the business.

15
True or false
1 point

True or false: Network segmentation makes authentication, patching, endpoint protection, and monitoring unnecessary.

  1. A

    True

  2. B

    False

16
Choose one
1 point

When planning subnet boundaries, what should an organization document for each assigned range?

  1. A

    Only the exact IP addresses assigned to devices in the range

  2. B

    The range’s purpose, owner, and routing and enforcement points

  3. C

    The names of every employee who can connect to the range

  4. D

    A list of all websites employees visit from the range

17
Choose one
1 point

A company needs to place a public-facing service that must accept connections from outside. Which zone is the best fit?

  1. A

    Management zone

  2. B

    Guest zone

  3. C

    DMZ

  4. D

    Data zone

18
Choose one
1 point

Administrators use dedicated workstations and interfaces to manage network infrastructure. Which zone should contain these systems?

  1. A

    A management zone

  2. B

    A guest zone

  3. C

    A user zone

  4. D

    A DMZ

19
Written response
1 point

What action should a segmentation policy take by default for inter-zone traffic that is not explicitly required? Enter one policy action.

20
Written response
1 point

After one device is compromised, what attacker activity is network segmentation intended to make harder? Enter the two-word term used in the material.