1. What is Firewall ? Junior A. Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS B. fine-grained segmentation enforcing security policy down to individual workloads C. device or software that filters network traffic based on configured allow/deny rules D. Virtual Private Network creating an encrypted tunnel over an untrusted network
2. Which term means: "device or software that filters network traffic based on configured allow/deny rules"? Junior A. NAT B. Firewall C. Port knocking D. Jump host
3. Which statement is correct? Junior A. Firewall — numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS) B. Firewall — decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats C. Firewall — device or software that filters network traffic based on configured allow/deny rules D. Firewall — opening a firewall port only after receiving a predefined sequence of connection attempts
4. What is VPN ? Junior A. firewall that tracks connection state and allows return traffic for established sessions B. decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats C. Virtual Private Network creating an encrypted tunnel over an untrusted network D. port-based network access control authenticating devices before granting LAN/WLAN access
5. Which term means: "Virtual Private Network creating an encrypted tunnel over an untrusted network"? Junior A. 802.1X B. Port scanning C. DMZ D. VPN
6. Which statement is correct? Junior A. VPN — model that trusts no implicit network location and verifies every request explicitly B. VPN — dividing a network into isolated zones to limit lateral movement and contain breaches C. VPN — Virtual Private Network creating an encrypted tunnel over an untrusted network D. VPN — Secure Access Service Edge converging SD-WAN and cloud-delivered security like SWG, CASB, and ZTNA
7. What is DMZ ? Junior A. layering multiple independent controls so failure of one does not compromise the whole system B. Intrusion Detection System that monitors traffic and alerts on suspicious activity C. Intrusion Prevention System that detects and actively blocks malicious traffic inline D. demilitarized zone, a network segment isolating public-facing services from the internal network
8. Which term means: "demilitarized zone, a network segment isolating public-facing services from the internal network"? Junior A. DMZ B. Defense in depth C. Proxy server D. NAT
9. Which statement is correct? Junior A. DMZ — policy enforcement that authenticates and posture-checks devices before allowing network access B. DMZ — fine-grained segmentation enforcing security policy down to individual workloads C. DMZ — demilitarized zone, a network segment isolating public-facing services from the internal network D. DMZ — ordered rule set on a router/switch permitting or denying packets by address, port, or protocol
10. What is IDS ? Junior A. logical Layer-2 network segment that isolates broadcast domains regardless of physical switch ports B. server that fronts backend services, handling TLS termination, load balancing, and request filtering C. Intrusion Detection System that monitors traffic and alerts on suspicious activity D. firewall that tracks connection state and allows return traffic for established sessions
11. Which term means: "Intrusion Detection System that monitors traffic and alerts on suspicious activity"? Junior A. Firewall B. ZTNA C. DNS over HTTPS (DoH) D. IDS
12. Which statement is correct? Junior A. IDS — Virtual Private Network creating an encrypted tunnel over an untrusted network B. IDS — Intrusion Detection System that monitors traffic and alerts on suspicious activity C. IDS — layering multiple independent controls so failure of one does not compromise the whole system D. IDS — Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS
13. What is IPS ? Junior A. ordered rule set on a router/switch permitting or denying packets by address, port, or protocol B. Virtual Private Network creating an encrypted tunnel over an untrusted network C. Intrusion Prevention System that detects and actively blocks malicious traffic inline D. probing a host's ports to discover which services are listening and exposed
14. Which term means: "Intrusion Prevention System that detects and actively blocks malicious traffic inline"? Junior A. Proxy server B. IDS C. WAF D. IPS
15. Which statement is correct? Junior A. IPS — device or software that filters network traffic based on configured allow/deny rules B. IPS — probing a host's ports to discover which services are listening and exposed C. IPS — Intrusion Prevention System that detects and actively blocks malicious traffic inline D. IPS — ordered rule set on a router/switch permitting or denying packets by address, port, or protocol
16. What is Port ? Junior A. firewall that tracks connection state and allows return traffic for established sessions B. numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS) C. Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS D. Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts
17. Which term means: "numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS)"? Junior A. Port B. VPN C. Microsegmentation D. Port scanning
18. Which statement is correct? Junior A. Port — Intrusion Detection System that monitors traffic and alerts on suspicious activity B. Port — numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS) C. Port — port-based network access control authenticating devices before granting LAN/WLAN access D. Port — opening a firewall port only after receiving a predefined sequence of connection attempts
19. What is Network segmentation ? Mid A. dividing a network into isolated zones to limit lateral movement and contain breaches B. intermediary that forwards client requests, optionally filtering, caching, or anonymizing traffic C. decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats D. opening a firewall port only after receiving a predefined sequence of connection attempts
20. Which term means: "dividing a network into isolated zones to limit lateral movement and contain breaches"? Mid A. VPN B. IDS C. Network segmentation D. ACL (network)
21. Which statement is correct? Mid A. Network segmentation — dividing a network into isolated zones to limit lateral movement and contain breaches B. Network segmentation — ordered rule set on a router/switch permitting or denying packets by address, port, or protocol C. Network segmentation — intermediary that forwards client requests, optionally filtering, caching, or anonymizing traffic D. Network segmentation — layering multiple independent controls so failure of one does not compromise the whole system
22. What is Stateful firewall ? Mid A. Virtual Private Network creating an encrypted tunnel over an untrusted network B. probing a host's ports to discover which services are listening and exposed C. policy enforcement that authenticates and posture-checks devices before allowing network access D. firewall that tracks connection state and allows return traffic for established sessions
23. Which term means: "firewall that tracks connection state and allows return traffic for established sessions"? Mid A. VLAN B. WAF C. ACL (network) D. Stateful firewall
24. Which statement is correct? Mid A. Stateful firewall — decrypting and re-encrypting TLS at a proxy to inspect otherwise-encrypted traffic for threats B. Stateful firewall — dividing a network into isolated zones to limit lateral movement and contain breaches C. Stateful firewall — fine-grained segmentation enforcing security policy down to individual workloads D. Stateful firewall — firewall that tracks connection state and allows return traffic for established sessions
25. What is NAT ? Mid A. Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts B. Intrusion Prevention System that detects and actively blocks malicious traffic inline C. fine-grained segmentation enforcing security policy down to individual workloads D. Secure Access Service Edge converging SD-WAN and cloud-delivered security like SWG, CASB, and ZTNA
26. Which term means: "Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts"? Mid A. NAT B. Reverse proxy C. Port knocking D. WAF
27. Which statement is correct? Mid A. NAT — Intrusion Detection System that monitors traffic and alerts on suspicious activity B. NAT — policy enforcement that authenticates and posture-checks devices before allowing network access C. NAT — Network Address Translation, mapping private addresses to public ones, incidentally hiding internal hosts D. NAT — numbered endpoint on a host identifying a specific network service (e.g. 443 for HTTPS)
28. What is WAF ? Mid A. demilitarized zone, a network segment isolating public-facing services from the internal network B. Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS C. server that fronts backend services, handling TLS termination, load balancing, and request filtering D. Zero Trust Network Access granting per-application access after identity and device checks, replacing VPN
29. Which term means: "Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS"? Mid A. 802.1X B. Stateful firewall C. ACL (network) D. WAF
30. Which statement is correct? Mid A. WAF — dividing a network into isolated zones to limit lateral movement and contain breaches B. WAF — demilitarized zone, a network segment isolating public-facing services from the internal network C. WAF — Web Application Firewall filtering HTTP traffic to block attacks like SQLi and XSS D. WAF — logical Layer-2 network segment that isolates broadcast domains regardless of physical switch ports Showing 30 of 78 Network Security questions — the full set, with answers, explanations and an AI tutor on every question, is inside.