Timedora
Free Practice Quiz Question List

5 Network Defenses and Security Practice Online Quiz Questions

Use this free practice quiz with 20 questions to review 5 Network Defenses and Security Practice, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

An intrusion detection system (IDS) automatically blocks suspicious traffic as its primary function.

  1. A

    True

  2. B

    False

02
Choose one
1 point

A team wants to restrict network traffic by destination and port. Which defense is designed to enforce that policy?

  1. A

    To collect events and assign alert investigators

  2. B

    To allow or block traffic according to rules

  3. C

    To authenticate remote users and devices

  4. D

    To detect suspicious activity and automatically block it in every case

03
Written response
1 point

Which three-letter system can detect suspicious activity and attempt to block it?

04
Fill in the blank
1 point

A company places its public website in a separate network area, away from employee devices and sensitive databases. This area is commonly called a .

05
Choose one
1 point

Which statement correctly distinguishes an intrusion prevention system (IPS) from an intrusion detection system (IDS)?

  1. A

    An IDS enforces traffic rules, while a firewall investigates alerts.

  2. B

    A firewall detects suspicious patterns and always blocks them.

  3. C

    An IPS can attempt to block suspicious activity, while an IDS primarily alerts.

  4. D

    Security monitoring replaces the need for firewalls and intrusion detection.

06
Choose all
1 point

A company is improving remote access for employees. Which measures should it adopt? Select all that apply.

  1. A

    Require multifactor authentication for remote connections.

  2. B

    Give every authenticated remote user access to the entire internal network.

  3. C

    Restrict each user to resources required by their role.

  4. D

    Monitor remote-access activity.

07
True or false
1 point

A user connects through a VPN, so the user should automatically receive access to every system on the internal network.

  1. A

    True

  2. B

    False

08
Fill in the blank
1 point

When events from multiple systems are sent to a central monitoring system, consistent help staff correlate them.

09
Written response
1 point

What should an organization establish so it is clear who is responsible for investigating monitoring alerts?

10
Choose all
1 point

An employee laptop may be compromised. Which measures can help limit the damage and support detection? Select all that apply.

  1. A

    Separate employee devices from sensitive systems and allow only necessary connections.

  2. B

    Allow all employee devices unrestricted access to the finance database.

  3. C

    Use detection to identify suspicious activity at relevant boundaries or on hosts.

  4. D

    Centralize useful events and define how alerts will be investigated.

11
Choose one
1 point

An outside IT vendor needs occasional remote access to an organization's systems. Which access arrangement best follows the recommended practices?

  1. A

    Use a shared vendor account with access to all internal systems.

  2. B

    Give the vendor a named account with narrowly scoped, time-limited access to designated systems.

  3. C

    Allow the vendor to connect from any device without monitoring.

  4. D

    Give the vendor permanent access to the entire network once authenticated.

12
Open ended
1 point

A small company has remote staff, a public website, and a sensitive finance database. Its remote users can currently reach most internal systems after signing in. Propose at least three concrete changes that combine network defenses to reduce risk while supporting legitimate remote work.

13
Choose one
1 point

A firewall allows a connection because it matches an approved rule. Which limitation should defenders still consider?

  1. A

    A permitted connection is guaranteed to be safe.

  2. B

    A permitted connection may still carry malicious activity.

  3. C

    A perimeter firewall prevents all attacks inside a network.

  4. D

    Firewalls investigate every alert and isolate compromised devices.

14
Written response
1 point

A public website needs to be separated from an organization's internal systems. What is the standard acronym for the network area where the public-facing server is placed? Enter the three-letter acronym.

15
Written response
1 point

An organization requires remote users to verify their identity using more than one authentication factor. What standard abbreviation names this control? Enter the abbreviation.

16
True or false
1 point

True or false: In a zero-trust approach, being connected from inside the organization's network is by itself enough to establish trust.

  1. A

    True

  2. B

    False

17
Choose one
1 point

A firewall permits a connection because it matches an approved rule, but defenders still want to be alerted if the activity over that connection looks suspicious. Which control best fits that need without necessarily interrupting the traffic?

  1. A

    A firewall, because it enforces traffic rules at network boundaries

  2. B

    An IDS, because it can alert on suspicious activity without interrupting traffic

  3. C

    An IPS, because it attempts to block suspicious activity

  4. D

    A VPN, because it protects remote connections

18
Choose one
1 point

A company wants a control that can automatically block some suspicious traffic, but it must avoid unnecessarily disrupting legitimate work. Which approach best addresses both goals?

  1. A

    Use an IDS with no alert review, because it automatically blocks detected activity

  2. B

    Use a perimeter firewall alone, because it prevents all malicious activity inside the network

  3. C

    Use an IPS with carefully tuned and monitored prevention rules

  4. D

    Disable prevention rules so legitimate traffic cannot be blocked

19
Choose one
1 point

An employee laptop may have been compromised. Which network design change would best limit the attacker's ability to move from that laptop to sensitive systems?

  1. A

    Separate employee devices from sensitive systems and permit only necessary connections between segments

  2. B

    Allow broad connectivity so administrators can respond more quickly

  3. C

    Rely on a perimeter firewall while leaving internal systems on a single network

  4. D

    Move the sensitive systems to the same segment as employee devices

20
Choose one
1 point

An outside IT vendor needs temporary access to perform work on designated systems. Which access arrangement best limits the risk if the vendor's account or device is compromised?

  1. A

    Give the vendor a shared account that can reach every internal system

  2. B

    Allow unrestricted network access as long as the vendor uses a VPN

  3. C

    Give the vendor a named account with narrowly scoped, time-limited access to designated systems

  4. D

    Allow access from any device and review it only after the contract ends