8 Network Security Basics Online Quiz Questions

A small business discovers malicious software that has locked its files and is preventing staff from accessing them. What type of malware could cause this?

An attacker exploits a known weakness in an unpatched server to gain access. The attacker is a threat, and the unpatched weakness is a vulnerability. Is this statement true or false?

A clinic wants its staff to be able to use patient scheduling systems whenever needed. Which security principle is most directly concerned with this goal?

A support account needs to reset passwords but does not need permission to change network-wide security settings. Which principle calls for giving that account only the access required for its task?

A company configures a firewall to allow required web traffic. Which limitation should its security team still account for?

A team is hardening a newly deployed server. Select all actions that align with the recommended secure configuration and access practices.

A laptop is encrypted, so a staff member assumes that a stolen account used to access it cannot pose a security risk. Is this assumption correct?

A browser exchanges sensitive information with a website over a network. Which kind of encryption is TLS intended to help provide for that exchange?

After a suspected intrusion, a team wants to investigate what happened and restore important data if necessary. Select all measures that directly support these two goals.

A small office uses a firewall but is concerned that a single safeguard may not be enough. Describe how it could apply defense in depth, naming at least two complementary safeguards and explaining what each contributes.

A business finds that malicious software has locked its files and is preventing staff from accessing them. What type of malware could cause this?

An employee receives a deceptive message directing them to a fake sign-in page that collects their password. Which threat best describes this tactic?

A team keeps tested backups and redundant systems so employees can continue using important services if one system fails. Which security goal are these measures primarily supporting?

An attacker exploits a server that has not received a security update. Which statement correctly distinguishes the threat from the vulnerability?

True or false: A firewall alone guarantees that a system cannot be attacked through a connection its rules allow.

An organization gives each employee account only the permissions needed to perform that employee's tasks. What security principle does this apply?

A small organization hosts a public web server and has staff workstations on its network. Which firewall policy best follows the principle of permitting only necessary traffic?

A company encrypts sensitive files on employee laptops. Which statement best describes a remaining security limitation?