CCE Network Security & Architecture — Questions and Answers
Question 1: What is the primary function of a firewall in network security?
- To monitor and control incoming and outgoing network traffic based on security rules (Correct answer)
- To increase network speed
- To store network data backups
- To manage email distribution
Correct answer: To monitor and control incoming and outgoing network traffic based on security rules
A firewall monitors and controls network traffic based on predetermined security rules, acting as a barrier between trusted and untrusted networks.
Question 2: What is network segmentation and why is it important?
- Dividing a network into smaller segments to contain breaches and control access (Correct answer)
- Increasing the number of network devices
- Removing old network equipment
- Upgrading all network cables simultaneously
Correct answer: Dividing a network into smaller segments to contain breaches and control access
Network segmentation divides a network into isolated segments, limiting the spread of security breaches and providing granular access control.
Question 3: What does a VPN provide in terms of network security?
- Encrypted communication tunnels over public networks (Correct answer)
- Faster internet connection speeds
- Free internet access worldwide
- Automatic virus removal
Correct answer: Encrypted communication tunnels over public networks
A VPN (Virtual Private Network) creates encrypted communication tunnels over public networks, protecting data confidentiality during transmission.
Question 4: What is the purpose of intrusion detection systems (IDS)?
- To monitor network traffic for suspicious activity and known threats (Correct answer)
- To prevent all unauthorized access automatically
- To speed up network performance
- To manage network IP addresses
Correct answer: To monitor network traffic for suspicious activity and known threats
IDS monitors network traffic for suspicious activity, known attack patterns, and policy violations, alerting administrators to potential security threats.
Question 5: What is the principle of least privilege in network security?
- Users should have only the minimum access needed to perform their job functions (Correct answer)
- All users should have administrator access for convenience
- Access permissions should be updated annually
- New users should receive the same access as their managers
Correct answer: Users should have only the minimum access needed to perform their job functions
The principle of least privilege restricts user access to only the resources and permissions necessary for their specific job functions, minimizing potential damage from compromised accounts.
Question 6: What is a DMZ (Demilitarized Zone) in network architecture?
- A network segment between internal and external networks that hosts public-facing services (Correct answer)
- A restricted area where damaged equipment is stored
- A backup data center in a remote location
- A meeting room for discussing network security
Correct answer: A network segment between internal and external networks that hosts public-facing services
A DMZ is a network segment that sits between the internal network and external networks, hosting public-facing services while protecting the internal network from direct exposure.
CCE Network Security & Architecture
What is the primary function of a firewall in network security?