CSX CSX Network Security Fundamentals

Question 1

Which protocol operates at the network layer and is commonly exploited in IP spoofing attacks?

Accepted Answer

IP

Answer

TCP

Answer

HTTP

Answer

FTP

Question 2

What is the primary purpose of a demilitarized zone (DMZ) in network security architecture?

Accepted Answer

To isolate public-facing services from the internal network

Answer

To store encrypted backups

Answer

To run antivirus scans on traffic

Answer

To monitor user authentication logs

Question 3

Which type of firewall inspects traffic up to the application layer, including packet payload content?

Accepted Answer

Next-generation firewall (NGFW)

Answer

Packet-filtering firewall

Answer

Stateless firewall

Answer

Circuit-level gateway

Question 4

What does the principle of network segmentation primarily help prevent?

Accepted Answer

Lateral movement by attackers within the network

Answer

Phishing attacks

Answer

Password brute-forcing

Answer

Denial-of-service amplification

Question 5

Which ISACA CSX domain emphasizes the ability to continuously monitor networks for anomalous behavior?

Accepted Answer

Detect

Answer

Protect

Answer

Recover

Answer

Respond

Question 6

What is a key security advantage of using VLANs in enterprise network design?

Accepted Answer

They logically separate broadcast domains to limit exposure

Answer

They encrypt all inter-VLAN traffic by default

Answer

They replace the need for firewalls

Answer

They eliminate the need for authentication protocols