NE NE Network Security

Question 1

Which firewall type inspects traffic at the application layer and can filter based on application-specific data?

Accepted Answer

Next-generation firewall (NGFW)

Answer

Packet filter firewall

Answer

Stateful inspection firewall

Answer

Circuit-level gateway

Question 2

What is the primary purpose of a demilitarized zone (DMZ) in network security?

Accepted Answer

To host public-facing servers while protecting the internal network

Answer

To isolate internal users from each other

Answer

To provide VPN termination points

Answer

To segment wireless networks from wired networks

Question 3

Which attack floods a target with SYN packets without completing the TCP three-way handshake?

Accepted Answer

SYN flood

Answer

Ping flood

Answer

Smurf attack

Answer

Teardrop attack

Question 4

What does the 802.1X standard provide in a network environment?

Accepted Answer

Port-based Network Access Control (NAC)

Answer

VLAN tagging

Answer

Spanning Tree Protocol

Answer

Link aggregation

Question 5

Which encryption protocol replaced WEP and is considered insecure due to its use of RC4?

Accepted Answer

TKIP (WPA)

Answer

WPA2

Answer

WPA3

Answer

AES-CCMP

Question 6

What is the function of an Intrusion Prevention System (IPS) compared to an IDS?

Accepted Answer

IPS actively blocks malicious traffic; IDS only detects and alerts

Answer

IPS only logs threats; IDS blocks them

Answer

IPS operates out-of-band; IDS is inline

Answer

IPS requires manual intervention; IDS is automated