CCD Network Security 2 — Questions and Answers
Question 1: Which protocol uses TCP port 443 and provides encryption for web traffic?
- HTTP
- HTTPS (Correct answer)
- FTP
- SMTP
Correct answer: HTTPS
HTTPS uses TLS/SSL encryption over TCP port 443 to secure web communications.
Question 2: What type of attack involves an adversary intercepting and potentially altering communications between two parties without their knowledge?
- Replay attack
- Man-in-the-Middle (MitM) attack (Correct answer)
- Denial of Service attack
- SQL injection attack
Correct answer: Man-in-the-Middle (MitM) attack
A Man-in-the-Middle attack positions the attacker between two communicating parties to intercept or modify data in transit.
Question 3: Which network device operates at Layer 3 of the OSI model and makes forwarding decisions based on IP addresses?
- Hub
- Switch
- Router (Correct answer)
- Repeater
Correct answer: Router
Routers operate at the Network layer (Layer 3) and use IP addresses to determine the best path for forwarding packets.
Question 4: What is the purpose of a DMZ (Demilitarized Zone) in network architecture?
- To block all external traffic
- To host internal databases
- To provide a buffer zone for publicly accessible services (Correct answer)
- To replace the need for a firewall
Correct answer: To provide a buffer zone for publicly accessible services
A DMZ is a network segment that isolates publicly accessible services (like web servers) from the internal network, reducing attack surface.
Question 5: Which attack floods a network with ICMP echo requests to overwhelm a target?
- SYN flood
- Ping flood (ICMP flood) (Correct answer)
- ARP spoofing
- DNS poisoning
Correct answer: Ping flood (ICMP flood)
A ping flood (ICMP flood) sends a large volume of ICMP echo requests to exhaust the target's resources and bandwidth.
Question 6: What does the principle of 'defense in depth' mean in network security?
- Using a single strong firewall
- Encrypting all data at rest
- Implementing multiple layered security controls (Correct answer)
- Blocking all inbound traffic
Correct answer: Implementing multiple layered security controls
Defense in depth employs multiple overlapping security layers so that if one control fails, others still protect the network.
Question 7: Which technology creates an encrypted tunnel over a public network to securely connect remote users to a corporate network?
- NAT
- VPN (Correct answer)
- DNS
- DHCP
Correct answer: VPN
A Virtual Private Network (VPN) encrypts traffic and tunnels it over public infrastructure, enabling secure remote access.
CCD Network Security 2
Which protocol uses TCP port 443 and provides encryption for web traffic?