Network Security interview questions

1. A.Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS
2. B.fine-grained segmentation enforcing security policy down to individual workloads
3. C.device or software that filters network traffic based on configured allow/deny rules
4. D.Virtual Private Network creating an encrypted tunnel over an untrusted network

Answer + AI explanation with Pro

1. A.NAT
2. B.Firewall
3. C.Port knocking
4. D.Jump host

Answer + AI explanation with Pro

1. A.Firewall — numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS)
2. B.Firewall — decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats
3. C.Firewall — device or software that filters network traffic based on configured allow/deny rules
4. D.Firewall — opening a firewall port only after receiving a predefined sequence of connection attempts

Answer + AI explanation with Pro

1. A.firewall that tracks connection state and allows return traffic for established sessions
2. B.decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats
3. C.Virtual Private Network creating an encrypted tunnel over an untrusted network
4. D.port-based network access control authenticating devices before granting LAN/WLAN access

Answer + AI explanation with Pro

1. A.802.1X
2. B.Port scanning
3. C.DMZ
4. D.VPN

Answer + AI explanation with Pro

1. A.VPN — model that trusts no implicit network location and verifies every request explicitly
2. B.VPN — dividing a network into isolated zones to limit lateral movement and contain breaches
3. C.VPN — Virtual Private Network creating an encrypted tunnel over an untrusted network
4. D.VPN — Secure Access Service Edge converging SD-WAN and cloud-delivered security like SWG, CASB, and ZTNA

Answer + AI explanation with Pro

1. A.layering multiple independent controls so failure of one does not compromise the whole system
2. B.Intrusion Detection System that monitors traffic and alerts on suspicious activity
3. C.Intrusion Prevention System that detects and actively blocks malicious traffic inline
4. D.demilitarized zone, a network segment isolating public-facing services from the internal network

Answer + AI explanation with Pro

1. A.DMZ
2. B.Defense in depth
3. C.Proxy server
4. D.NAT

Answer + AI explanation with Pro

1. A.DMZ — policy enforcement that authenticates and posture-checks devices before allowing network access
2. B.DMZ — fine-grained segmentation enforcing security policy down to individual workloads
3. C.DMZ — demilitarized zone, a network segment isolating public-facing services from the internal network
4. D.DMZ — ordered rule set on a router/switch permitting or denying packets by address, port, or protocol

Answer + AI explanation with Pro

1. A.logical Layer-2 network segment that isolates broadcast domains regardless of physical switch ports
2. B.server that fronts backend services, handling TLS termination, load balancing, and request filtering
3. C.Intrusion Detection System that monitors traffic and alerts on suspicious activity
4. D.firewall that tracks connection state and allows return traffic for established sessions

Answer + AI explanation with Pro

1. A.Firewall
2. B.ZTNA
3. C.DNS over HTTPS (DoH)
4. D.IDS

Answer + AI explanation with Pro

1. A.IDS — Virtual Private Network creating an encrypted tunnel over an untrusted network
2. B.IDS — Intrusion Detection System that monitors traffic and alerts on suspicious activity
3. C.IDS — layering multiple independent controls so failure of one does not compromise the whole system
4. D.IDS — Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS

Answer + AI explanation with Pro

1. A.ordered rule set on a router/switch permitting or denying packets by address, port, or protocol
2. B.Virtual Private Network creating an encrypted tunnel over an untrusted network
3. C.Intrusion Prevention System that detects and actively blocks malicious traffic inline
4. D.probing a host's ports to discover which services are listening and exposed

Answer + AI explanation with Pro

1. A.Proxy server
2. B.IDS
3. C.WAF
4. D.IPS

Answer + AI explanation with Pro

1. A.IPS — device or software that filters network traffic based on configured allow/deny rules
2. B.IPS — probing a host's ports to discover which services are listening and exposed
3. C.IPS — Intrusion Prevention System that detects and actively blocks malicious traffic inline
4. D.IPS — ordered rule set on a router/switch permitting or denying packets by address, port, or protocol

Answer + AI explanation with Pro

1. A.firewall that tracks connection state and allows return traffic for established sessions
2. B.numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS)
3. C.Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS
4. D.Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts

Answer + AI explanation with Pro

1. A.Port
2. B.VPN
3. C.Microsegmentation
4. D.Port scanning

Answer + AI explanation with Pro

1. A.Port — Intrusion Detection System that monitors traffic and alerts on suspicious activity
2. B.Port — numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS)
3. C.Port — port-based network access control authenticating devices before granting LAN/WLAN access
4. D.Port — opening a firewall port only after receiving a predefined sequence of connection attempts

Answer + AI explanation with Pro

1. A.dividing a network into isolated zones to limit lateral movement and contain breaches
2. B.intermediary that forwards client requests, optionally filtering, caching, or anonymizing traffic
3. C.decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats
4. D.opening a firewall port only after receiving a predefined sequence of connection attempts

Answer + AI explanation with Pro

1. A.VPN
2. B.IDS
3. C.Network segmentation
4. D.ACL (network)

Answer + AI explanation with Pro

1. A.Network segmentation — dividing a network into isolated zones to limit lateral movement and contain breaches
2. B.Network segmentation — ordered rule set on a router/switch permitting or denying packets by address, port, or protocol
3. C.Network segmentation — intermediary that forwards client requests, optionally filtering, caching, or anonymizing traffic
4. D.Network segmentation — layering multiple independent controls so failure of one does not compromise the whole system

Answer + AI explanation with Pro

1. A.Virtual Private Network creating an encrypted tunnel over an untrusted network
2. B.probing a host's ports to discover which services are listening and exposed
3. C.policy enforcement that authenticates and posture-checks devices before allowing network access
4. D.firewall that tracks connection state and allows return traffic for established sessions

Answer + AI explanation with Pro

1. A.VLAN
2. B.WAF
3. C.ACL (network)
4. D.Stateful firewall

Answer + AI explanation with Pro

1. A.Stateful firewall — decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats
2. B.Stateful firewall — dividing a network into isolated zones to limit lateral movement and contain breaches
3. C.Stateful firewall — fine-grained segmentation enforcing security policy down to individual workloads
4. D.Stateful firewall — firewall that tracks connection state and allows return traffic for established sessions

Answer + AI explanation with Pro

1. A.Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts
2. B.Intrusion Prevention System that detects and actively blocks malicious traffic inline
3. C.fine-grained segmentation enforcing security policy down to individual workloads
4. D.Secure Access Service Edge converging SD-WAN and cloud-delivered security like SWG, CASB, and ZTNA

Answer + AI explanation with Pro

1. A.NAT
2. B.Reverse proxy
3. C.Port knocking
4. D.WAF

Answer + AI explanation with Pro

1. A.NAT — Intrusion Detection System that monitors traffic and alerts on suspicious activity
2. B.NAT — policy enforcement that authenticates and posture-checks devices before allowing network access
3. C.NAT — Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts
4. D.NAT — numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS)

Answer + AI explanation with Pro

1. A.demilitarized zone, a network segment isolating public-facing services from the internal network
2. B.Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS
3. C.server that fronts backend services, handling TLS termination, load balancing, and request filtering
4. D.Zero Trust Network Access granting per-application access after identity and device checks, replacing VPN

Answer + AI explanation with Pro

1. A.802.1X
2. B.Stateful firewall
3. C.ACL (network)
4. D.WAF

Answer + AI explanation with Pro

1. A.WAF — dividing a network into isolated zones to limit lateral movement and contain breaches
2. B.WAF — demilitarized zone, a network segment isolating public-facing services from the internal network
3. C.WAF — Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS
4. D.WAF — logical Layer-2 network segment that isolates broadcast domains regardless of physical switch ports

Answer + AI explanation with Pro