Cyber Security Jobs Network Security Fundamentals 2 — Questions and Answers
Question 1: What is a man-in-the-middle (MITM) attack?
- An attacker secretly intercepts and relays communication between two parties (Correct answer)
- A brute-force password guessing attack
- A denial-of-service flood
- A social engineering phone call
Correct answer: An attacker secretly intercepts and relays communication between two parties
In a MITM attack, an adversary secretly positions themselves between two communicating parties to eavesdrop or alter data.
Question 2: What does the acronym ACL stand for in network security?
- Access Control List (Correct answer)
- Authenticated Connection Layer
- Automatic Certificate Loader
- Advanced Cryptography Library
Correct answer: Access Control List
An ACL (Access Control List) is a set of rules applied to a router or firewall that permits or denies traffic based on criteria like IP and port.
Question 3: Which protocol secures web traffic and is indicated by HTTPS in a browser?
- TLS (Correct answer)
- FTP
- ICMP
- ARP
Correct answer: TLS
TLS (Transport Layer Security) encrypts the connection between a browser and web server, shown as HTTPS in the address bar.
Question 4: What is network segmentation and why is it important?
- Dividing a network into subnetworks to limit the spread of breaches (Correct answer)
- Combining all servers into one large network for simplicity
- Removing encryption to improve performance
- Disabling firewalls for internal traffic
Correct answer: Dividing a network into subnetworks to limit the spread of breaches
Network segmentation isolates parts of a network so a breach in one segment cannot easily spread to others, limiting attacker lateral movement.
Question 5: What type of attack overwhelms a server with traffic to make it unavailable?
- Distributed Denial of Service (DDoS) (Correct answer)
- Phishing
- SQL Injection
- Rootkit Installation
Correct answer: Distributed Denial of Service (DDoS)
A DDoS attack floods a target with massive amounts of traffic from many sources, exhausting resources and causing service outages.
Question 6: What is ARP spoofing used for in network attacks?
- Linking an attacker's MAC address to a legitimate IP to intercept traffic (Correct answer)
- Cracking WPA2 Wi-Fi passwords
- Exploiting buffer overflow vulnerabilities
- Bypassing two-factor authentication
Correct answer: Linking an attacker's MAC address to a legitimate IP to intercept traffic
ARP spoofing sends fake ARP messages to associate the attacker's MAC address with a victim's IP, allowing traffic interception on a local network.
Cyber Security Jobs Network Security Fundamentals 2
What is a man-in-the-middle (MITM) attack?