Free Practice Quiz Question List

5 Network Device Security Online Quiz Questions

Use this free practice quiz with 20 questions to review 5 Network Device Security, test your knowledge, and prepare for your next test or exam.

20 questions

True or false

1 point

True or false: It is good practice to expose a network device’s administration interface directly to the public internet if administrators use strong passwords.

A
True
B
False

True or false

1 point

True or false: A local emergency account for use during a centralized AAA outage should be shared among administrators and given unrestricted access.

A
True
B
False

Written response

1 point

Which AAA function determines which commands or actions an administrator is allowed to perform?

Written response

1 point

What type of service should receive device logs centrally so the records remain available if the device is damaged or compromised?

Fill in the blank

1 point

Accurate and timestamps help correlate events across devices.

Fill in the blank

1 point

To identify what changed and when in a device configuration, maintain .

Choose one

1 point

An organization wants to restrict access to its network devices’ management planes. Which policy best meets that goal?

A
Allow management connections from any address, but permit only one service.
B
Allow management connections only from approved sources and permit only necessary services.
C
Allow any service from approved sources so administrators can choose their own tools.
D
Expose management services publicly but limit access to read-only accounts.

Choose one

1 point

An administrator needs encrypted remote command-line access, web management, and file transfer. Which protocol set best fits those needs?

A
Telnet for administration, HTTP for web management, and FTP for file transfer.
B
SSH for administration, HTTPS for web management, and SFTP for file transfer.
C
Telnet for administration, HTTPS for web management, and TFTP for file transfer.
D
SSH for administration, HTTP for web management, and FTP for file transfer.

Choose one

1 point

A team is setting up a configuration-backup process. Which approach makes those backups a dependable recovery resource while protecting them?

A
Keep the only backup on the device so it is easy to retrieve during an outage.
B
Store backups in a shared location with broad access and test them only after an incident.
C
Keep backups separately in a protected location, encrypt sensitive backups, restrict access, and test restoration periodically.
D
Store backups separately but leave them unprotected because configuration files are not sensitive.

Choose all

1 point

Select all statements that correctly describe the three functions of AAA for network-device administration.

A
Authentication verifies an administrator’s identity.
B
Authorization determines which commands or actions an administrator may perform.
C
Accounting records access and administrative activity.
D
Accounting decides which commands an administrator is permitted to run.

Choose all

1 point

A team is deciding what activity to record for later review. Select all categories that should be included in device administrative logging.

A
Successful and failed logins
B
Privilege changes
C
Configuration changes
D
Relevant system events
E
Only successful logins, because failed attempts are not administrative activity

True or false

1 point

True or false: Sending device logs to a centralized, access-controlled syslog service can preserve records if the device itself is damaged or compromised.

A
True
B
False

Choose one

1 point

A team is configuring device monitoring. Which plan best follows secure monitoring practice?

A
Use SNMPv3 with authentication and privacy, restrict access to approved management stations, and use read-only permissions unless a specific need requires more.
B
Use an older SNMP version from any network because monitoring does not affect device security.
C
Use SNMPv3 without access restrictions and grant configuration permissions to every monitoring station.
D
Disable authentication and privacy so monitoring requests are easier to troubleshoot.

Open ended

1 point

An organization’s administrators perform both routine monitoring and configuration changes. Describe how it should organize their accounts and privileges to limit unnecessary access.

Choose one

1 point

A network team discovers that device administration is reachable from the public internet. Which change best follows secure management-access practice?

A
Allow administration from any internet address, but require a strong password.
B
Restrict management connections to approved administrator workstations or jump hosts using management-plane controls.
C
Keep all management services enabled so administrators can choose whichever is convenient.
D
Permit administration from the public internet and rely on centralized logging to detect misuse.

Written response

1 point

Which AAA component records an administrator's access and activity? Enter the component name.

Choose one

1 point

An organization wants staff to monitor device status without giving them the ability to change configurations. Which account design best meets that goal?

A
Give every administrator full configuration privileges to simplify account management.
B
Use one shared account for all administrators and rely on logs to distinguish their actions.
C
Keep routine monitoring read-only and grant configuration-changing access only to roles that need it.
D
Allow monitoring accounts to change configurations, but disable their ability to view device status.

Choose one

1 point

A security team needs to investigate administrative activity even if a network device is later damaged or compromised. Which logging setup best supports that objective?

A
Send administrative and relevant system logs to an access-controlled central syslog service and synchronize timestamps.
B
Keep all logs only on the device so they can be reviewed from its local console.
C
Record configuration changes but omit successful and failed login events.
D
Send logs to a shared, unrestricted server and allow each device to use its own unsynchronized clock.

Written response

1 point

Which SNMP version should an administrator prefer for monitoring when using authentication and privacy (authPriv)? Enter the protocol version label.

Choose one

1 point

An administrator must choose a remote command-line protocol for managing a device. Which choice follows the recommended secure-protocol practice?

A
Use Telnet because it is designed specifically for remote administration.
B
Use SSH instead of Telnet for remote administration.
C
Use FTP instead of SSH because file-transfer protocols encrypt administrative sessions by default.
D
Keep both Telnet and SSH enabled and allow connections from any source.