01
True or false
1 point
A company creates a guest VLAN. Is that VLAN alone enough to ensure guest devices cannot reach internal networks?
Free Practice Quiz Question List
7 Network Security Essentials Online Quiz Questions
Use this free practice quiz with 20 questions to review 7 Network Security Essentials, test your knowledge, and prepare for your next test or exam.
20 questions
02
Choose one
1 point
A network team needs a way to manage equipment when production links fail. Which approach best meets that need while keeping management separate?
- A
Expose the device-management interface directly to the internet
- B
Allow any workstation on the company LAN to administer the equipment
- C
Use a separate, physically isolated out-of-band management network
- D
Enable Telnet so administrators can connect if encrypted protocols fail
03
Fill in the blank
1 point
To avoid giving public-facing services direct access to internal systems, place them in a .
04
Written response
1 point
Which protocol and version should an administrator prefer for protected remote command-line management of network equipment?
05
Choose all
1 point
A small office wants guests to use Wi-Fi without reaching internal resources. Select all measures that support that goal.
- A
Restrict guest access to the internet and enable client isolation when available
- B
Allow guest devices to reach employee computers so users can share files
- C
Block guest connections to file servers and management interfaces
- D
Place guest devices alongside sensitive workstations on the same unrestricted network
06
True or false
1 point
Compared with individual user or device authentication, a shared wireless passphrase is harder to control.
- A
True
- B
False
07
Choose one
1 point
A company has separated employee and guest devices into different VLANs. What should it do to control traffic that crosses between them?
- A
No additional control is needed because VLANs automatically block all cross-segment traffic
- B
Use routing rules, access-control lists, or firewalls to govern cross-segment traffic
- C
Allow all cross-segment traffic and rely only on endpoint passwords
- D
Hide the VLAN name from users
08
Choose all
1 point
Select all practices that help protect a wireless network after its access points have been deployed.
- A
Restrict guest access to the internet
- B
Treat wireless security as complete once the access point is first installed
- C
Disable unused features such as Wi-Fi Protected Setup
- D
Leave access-point firmware unchanged after deployment
09
Written response
1 point
What three-letter abbreviation names the centralized service model for authentication, authorization, and accounting?
10
Fill in the blank
1 point
To keep switch administration away from ordinary company workstations, allow access only from trusted administrator devices on a dedicated .
11
Choose one
1 point
A small office must use a shared Wi-Fi passphrase. Which policy best reduces the risk associated with that credential?
- A
Use a short passphrase and keep it unchanged for convenience
- B
Choose a long, unique passphrase and change it if exposed
- C
Hide the network name instead of using a strong passphrase
- D
Use WEP so older devices can connect
12
Choose one
1 point
An office wants to reduce the risk that a compromised printer can be used to reach other systems. Which design best applies segmentation?
- A
Put printers on the employee workstation network and allow unrestricted communication
- B
Place printers in a separate segment and permit only necessary connections
- C
Put printers on the guest network and allow access to all internal systems
- D
Connect printers directly to the management network
13
Open ended
1 point
A small office has employee laptops, guest phones, printers, and network equipment. Propose a network design that limits the damage a compromised guest device or printer could cause while still allowing necessary business use. Include how you would restrict switch administration and maintain the protections.
14
True or false
1 point
True or false: A physically isolated out-of-band management network can provide administrative access when production links fail.
- A
True
- B
False
15
Choose one
1 point
An administrator is hardening an access point and does not use Wi-Fi Protected Setup. Which action best follows the recommended access-point practices?
- A
Hide the network name
- B
Disable Wi-Fi Protected Setup (WPS) if it is unused
- C
Filter devices by MAC address instead of using encryption
- D
Leave the feature enabled but change the network name
16
Choose one
1 point
A small network uses one shared Wi-Fi passphrase, and that passphrase has been exposed. What should the administrator do?
- A
Hide the network name and keep the passphrase
- B
Filter devices by MAC address and keep the passphrase
- C
Change the passphrase
- D
Move the access point to the management network
17
Choose one
1 point
A company is deploying a public-facing service. Where should it place the service to avoid giving it direct access to internal systems?
- A
The network-management segment
- B
The employee workstation segment
- C
A demilitarized zone (DMZ)
- D
The guest segment with direct access to internal systems
18
Choose one
1 point
A managed organizational Wi-Fi network supports current security standards. Which configuration best matches the recommended approach?
- A
WEP with a long shared passphrase
- B
WPA3-Enterprise with EAP-TLS
- C
The original WPA with MAC address filtering
- D
TKIP with a hidden network name
19
Written response
1 point
Which version of SSH should administrators prefer for protected remote management of network devices?
20
Written response
1 point
In network-device administration, what does the acronym AAA stand for?