Network Security Fundamentals

1. What does an 'intrusion detection system' (IDS) do?

• A. Monitors network traffic for suspicious activity and potential threats ✓
• B. Blocks all network traffic automatically
• C. Encrypts all network data
• D. Increases network speed

💡 An intrusion detection system monitors network traffic for suspicious activity, alerting administrators to potential threats.

2. What is the purpose of 'network monitoring'?

• A. Continuously observing network activity to detect and respond to security issues ✓
• B. Increasing internet speed only
• C. Encrypting all network data
• D. Blocking all network traffic

💡 Network monitoring continuously observes network activity, helping detect and respond to potential security issues in real time.

3. What does 'VLAN' stand for?

• A. Virtual Local Area Network ✓
• B. Virtual Long Area Network
• C. Verified Local Area Network
• D. Virtual Limited Area Network

💡 VLAN stands for Virtual Local Area Network, allowing logical segmentation of a network without physical separation.

4. What is 'packet sniffing'?

• A. Intercepting and analyzing data packets traveling across a network ✓
• B. Increasing network speed
• C. Encrypting network data
• D. Blocking network traffic

💡 Packet sniffing intercepts and analyzes data packets as they travel across a network, which can be used for legitimate or malicious purposes.

5. What does 'MAC address filtering' do in network security?

• A. Restricts network access based on the unique hardware address of devices ✓
• B. Encrypts network data
• C. Increases network speed
• D. Blocks all internet traffic

💡 MAC address filtering restricts which devices can access a network based on their unique hardware identifier.

6. What is 'network redundancy' primarily used for?

• A. Ensuring network availability by providing backup systems in case of failure ✓
• B. Increasing internet speed only
• C. Encrypting network data
• D. Blocking unauthorized users only

💡 Network redundancy provides backup systems and pathways to ensure continued availability in case of a failure.

7. What is a 'firewall' designed to do in network security?

• A. Monitor and control incoming and outgoing network traffic based on security rules ✓
• B. Increase internet speed
• C. Store data permanently
• D. Provide antivirus protection only

💡 A firewall monitors and controls network traffic, allowing or blocking it based on predefined security rules.

8. What is 'network access control' (NAC)?

• A. A security approach that regulates which devices can access a network ✓
• B. A type of encryption
• C. A type of antivirus software
• D. A type of firewall rule only

💡 Network access control regulates which devices are permitted to connect to and access a network, based on defined policies.

9. What does a 'honeypot' refer to in network security?

• A. A decoy system designed to attract and detect attackers ✓
• B. A type of encryption
• C. A type of antivirus software
• D. A type of firewall rule only

💡 A honeypot is a decoy system deliberately set up to attract attackers, helping security teams study and detect malicious activity.

10. What does a 'VPN' primarily provide for network security?

• A. An encrypted, secure connection over a public network ✓
• B. Faster internet speeds only
• C. Unlimited data storage
• D. A type of antivirus software

💡 A VPN provides an encrypted, secure tunnel for data even when using a public or untrusted network.

11. What does 'WPA3' refer to in wireless network security?

• A. A security protocol for protecting Wi-Fi networks ✓
• B. A type of antivirus software
• C. A type of firewall
• D. A type of encryption algorithm for email only

💡 WPA3 is a security protocol used to protect wireless (Wi-Fi) networks, offering improved encryption over earlier standards.

12. What is a 'DMZ' (Demilitarized Zone) in network architecture?

• A. A subnetwork that separates an internal network from untrusted external networks ✓
• B. A type of encryption
• C. A type of antivirus software
• D. A type of firewall rule only

💡 A DMZ is a subnetwork placed between an internal network and untrusted external networks, adding a layer of security separation.

13. What does 'SSID' refer to in wireless networking?

• A. Service Set Identifier, the name of a wireless network ✓
• B. A type of encryption
• C. A type of firewall
• D. A type of antivirus software

💡 SSID stands for Service Set Identifier, essentially the name that identifies a specific wireless network.

14. What is 'network segmentation'?

• A. Dividing a network into smaller parts to improve security and limit the spread of potential breaches ✓
• B. Combining multiple networks into one
• C. A type of encryption
• D. A type of firewall only

💡 Network segmentation divides a larger network into smaller, isolated parts, limiting how far a breach can spread.

15. What does 'port scanning' involve?

• A. Probing a network for open ports that could be potential entry points for attacks ✓
• B. Increasing network speed
• C. Encrypting network data
• D. Blocking all network traffic

💡 Port scanning probes a network to identify open ports, which can reveal potential entry points for attacks.