CSX CSX Network Security Fundamentals 1 — Questions and Answers
Question 1: Which protocol operates at the network layer and is commonly exploited in IP spoofing attacks?
- TCP
- IP (Correct answer)
- HTTP
- FTP
Correct answer: IP
IP (Internet Protocol) operates at the network layer and lacks built-in authentication, making it vulnerable to spoofing attacks.
Question 2: What is the primary purpose of a demilitarized zone (DMZ) in network security architecture?
- To store encrypted backups
- To isolate public-facing services from the internal network (Correct answer)
- To run antivirus scans on traffic
- To monitor user authentication logs
Correct answer: To isolate public-facing services from the internal network
A DMZ is a perimeter network segment that hosts public-facing services, preventing direct access to the internal network.
Question 3: Which type of firewall inspects traffic up to the application layer, including packet payload content?
- Packet-filtering firewall
- Stateless firewall
- Next-generation firewall (NGFW) (Correct answer)
- Circuit-level gateway
Correct answer: Next-generation firewall (NGFW)
Next-generation firewalls perform deep packet inspection at the application layer, enabling content-aware filtering.
Question 4: What does the principle of network segmentation primarily help prevent?
- Phishing attacks
- Lateral movement by attackers within the network (Correct answer)
- Password brute-forcing
- Denial-of-service amplification
Correct answer: Lateral movement by attackers within the network
Network segmentation limits an attacker's ability to move laterally between systems after an initial breach.
Question 5: Which ISACA CSX domain emphasizes the ability to continuously monitor networks for anomalous behavior?
- Protect
- Recover
- Detect (Correct answer)
- Respond
Correct answer: Detect
The Detect domain focuses on continuous monitoring and anomaly detection to identify cybersecurity events.
Question 6: What is a key security advantage of using VLANs in enterprise network design?
- They encrypt all inter-VLAN traffic by default
- They logically separate broadcast domains to limit exposure (Correct answer)
- They replace the need for firewalls
- They eliminate the need for authentication protocols
Correct answer: They logically separate broadcast domains to limit exposure
VLANs create logical network segments that contain broadcast traffic and reduce the attack surface between different user groups.
CSX CSX Network Security Fundamentals 1
Which protocol operates at the network layer and is commonly exploited in IP spoofing attacks?