01
True or false
1 point
An ACL can filter traffic by matching rules, but it does not encrypt that traffic or track a connection’s state by itself. True or false?
Free Practice Quiz Question List
5 Network Security Fundamentals Online Quiz Questions
Use this free practice quiz with 20 questions to review 5 Network Security Fundamentals, test your knowledge, and prepare for your next test or exam.
20 questions
02
Choose one
1 point
An administrator needs an IPv4 ACL that makes its decision using only who sent the traffic. Which field can a standard ACL match?
- A
The packet’s source IPv4 address
- B
The packet’s destination IPv4 address and TCP port
- C
The packet’s source and destination addresses and protocol
- D
The application data in the packet
03
Written response
1 point
In AAA, what does the second A stand for? Enter the term.
04
Fill in the blank
1 point
On Layer 2 ports, the feature that filters unauthorized IPv6 Router Advertisement messages is .
05
True or false
1 point
When port security is configured with the restrict violation action, a violation always shuts down the switch port. True or false?
- A
True
- B
False
06
Choose one
1 point
A statically addressed host is connected to an untrusted interface where Dynamic ARP Inspection (DAI) is enabled. Its valid ARP traffic lacks a DHCP snooping binding. What is an appropriate way to support this host while retaining DAI protection?
- A
Disable DAI on every interface in the VLAN.
- B
Provide an ARP ACL or another supported binding method for the static host.
- C
Change the host to use a different MAC address.
- D
Trust every endpoint port so its ARP messages bypass validation.
07
Written response
1 point
Which IPsec mode protects an entire original IP packet by encapsulating it in a new IP packet? Enter the mode name.
08
Choose all
1 point
Which capabilities can a VPN provide? Select all correct choices.
- A
Tunneling across an untrusted network
- B
Peer authentication
- C
Confidentiality protection
- D
Integrity protection
- E
Automatic security for every endpoint connected to the network
09
Fill in the blank
1 point
In common IPsec deployments, negotiates security parameters and authenticates peers.
10
Choose all
1 point
Which statements correctly distinguish common VPN deployment patterns? Select all correct choices.
- A
A site-to-site VPN can connect two branch-office networks through VPN gateways.
- B
A site-to-site VPN requires each host to run VPN client software.
- C
A remote-access VPN connects an individual user’s device to an organization’s network.
- D
A remote-access VPN is used only to connect two networks through dedicated gateways.
11
Choose one
1 point
An administrator is placing an extended ACL to block unwanted traffic as early as practical. Which placement is the usual rule of thumb?
- A
Place it near the destination because extended ACLs can match only source addresses.
- B
Place it near the traffic source to stop unwanted traffic from crossing the network.
- C
Place it only on the outbound direction of the destination interface.
- D
Place it at the network center because ACL direction does not affect filtering.
12
Choose one
1 point
An access port should allow up to two learned source MAC addresses and use a restrictive response to violations. Which configuration matches that policy?
- A
Set the maximum to one MAC address and use the shutdown violation action.
- B
Set the maximum to two MAC addresses and use the restrict violation action.
- C
Set the maximum to two MAC addresses and use the protect violation action.
- D
Set the maximum to an unlimited number of MAC addresses and use the restrict violation action.
13
Open ended
1 point
A switch connects end devices to an authorized DHCP server through one uplink. Describe how to configure DHCP snooping trust so that rogue DHCP server messages from an end-device port can be blocked without disrupting the authorized DHCP service.
14
True or false
1 point
An administrator must allow traffic from a subnet only when it is destined for one particular server. A standard IPv4 ACL alone can enforce this policy. True or false?
- A
True
- B
False
15
Written response
1 point
A network administrator needs encrypted remote command-line access to a router. Which protocol should be used instead of Telnet?
16
Choose one
1 point
A user has successfully logged in, and the device now checks whether that user may change routing settings. Which AAA function is being applied?
- A
Authentication
- B
Authorization
- C
Accounting
- D
Encryption
17
Choose one
1 point
A company wants two branch-office LANs to communicate through VPN gateways. The branch hosts should send traffic through the tunnel without running VPN software themselves. Which design best fits this requirement?
- A
Remote-access VPN, because each user device must establish an individual connection
- B
Transport-mode IPsec, because it replaces the need for VPN gateways
- C
Site-to-site VPN, because gateways connect the two networks
- D
RA Guard, because it creates a protected connection between networks
18
Choose one
1 point
A switch uses DHCP snooping to block rogue DHCP server messages. Which trust configuration best supports this goal when one uplink leads to the authorized DHCP server and the other ports connect to end devices?
- A
Trust the switch port leading to the authorized DHCP server or relay; leave end-device ports untrusted
- B
Trust all end-device ports so clients can request addresses
- C
Trust every port in the VLAN to avoid dropping DHCP messages
- D
Trust only ports connected to clients that use static IP addresses
19
Choose one
1 point
An access port connects an IP phone and a computer behind that phone. The policy allows these two devices but should reject a third source MAC address. What port-security maximum should be configured?
- A
Set the maximum to one MAC address
- B
Set the maximum to two MAC addresses
- C
Disable port security on the port
- D
Set the maximum to an unlimited number of MAC addresses
20
Written response
1 point
A switch should filter unauthorized IPv6 Router Advertisement messages arriving on endpoint ports. What Layer 2 feature is designed for this purpose?
Related study packs and tools
- Quiz
1 Networking Fundamentals
A medium-difficulty quiz on networking fundamentals, including communication roles, protocol layers, data units, and network models.
CompTIA A+ NetworkingUpdated - Study guide
2 Professionalism in IT Practice
Learn how integrity, communication, confidentiality, and structured judgment guide responsible conduct in IT work.
- Flashcards
2 Protocols and Ports
Review how TCP and UDP work, what common network ports indicate, and how to interpret port clues cautiously.
CompTIA A+ NetworkingUpdated - Quiz
2 Protocols and Ports
A medium-difficulty quiz on interpreting network protocols, ports, and common traffic patterns.
CompTIA A+ NetworkingUpdated - Quiz
4 Wi-Fi Networks
A 14-question quiz on Wi-Fi networks, moving from core concepts to applied troubleshooting and explanation.
CompTIA A+ NetworkingUpdated - Quiz
5 Network Operations and Reliability
A medium-difficulty quiz on network operations, monitoring, configuration management, resilience, and recovery planning.
- Quiz
5 Other AWS Compute Options
A medium-difficulty quiz on choosing AWS compute services by workload pattern, deployment needs, and level of infrastructure control.
AWS Compute ServicesUpdated - Study guide
6 Security Operations and Incident Response
Learn how security teams monitor activity, manage vulnerabilities, respond to incidents, preserve digital evidence, and restore services safely.
- Quiz
6 SOHO Network Setup and Troubleshooting
A medium-difficulty quiz on setting up, securing, and troubleshooting a small-office/home-office network.
CompTIA A+ NetworkingUpdated - Study guide
7 Integrated Troubleshooting Practice
A practical workflow for isolating mixed hardware, display, storage, mobile-device, and network problems, protecting data, and verifying repairs.
- Study guide
8 Comprehensive Security+ Practice and Review
A scenario-focused guide to Security+ SY0-701 concepts, emphasizing evidence-based incident response, access control, cryptography, vulnerability handling, recovery objectives, and risk governance.
- Study guide
8 Security Operations and Incident Response
Learn how to recognize and assess security incidents, preserve evidence, contain and remove threats, restore trustworthy services, and improve security through lessons learned.