CSX CSX Network Security Fundamentals

Question 1

Which protocol operates at the network layer and is commonly exploited in IP spoofing attacks?

Accepted Answer

IP

Answer

IP (Internet Protocol) operates at the network layer and lacks built-in authentication, making it vulnerable to spoofing attacks.

Question 2

What is the primary purpose of a demilitarized zone (DMZ) in network security architecture?

Accepted Answer

To isolate public-facing services from the internal network

Answer

A DMZ is a perimeter network segment that hosts public-facing services, preventing direct access to the internal network.

Question 3

Which type of firewall inspects traffic up to the application layer, including packet payload content?

Accepted Answer

Next-generation firewall (NGFW)

Answer

Next-generation firewalls perform deep packet inspection at the application layer, enabling content-aware filtering.

Question 4

What does the principle of network segmentation primarily help prevent?

Accepted Answer

Lateral movement by attackers within the network

Answer

Network segmentation limits an attacker's ability to move laterally between systems after an initial breach.

Question 5

Which ISACA CSX domain emphasizes the ability to continuously monitor networks for anomalous behavior?

Accepted Answer

Detect

Answer

The Detect domain focuses on continuous monitoring and anomaly detection to identify cybersecurity events.

(CSX) Cybersecurity Nexus Certification Practice Test