Cyber Security Network Security 2 — Questions and Answers
Question 1: What is a VPN primarily used for in a corporate environment?
- Speed up internet browsing
- Create a secure encrypted tunnel for remote access (Correct answer)
- Block malware downloads
- Monitor employee emails
Correct answer: Create a secure encrypted tunnel for remote access
A VPN creates an encrypted tunnel allowing remote users to securely access corporate resources.
Question 2: Which scanning technique sends a TCP SYN packet and waits for a SYN-ACK without completing the handshake?
- Full connect scan
- SYN (half-open) scan (Correct answer)
- UDP scan
- FIN scan
Correct answer: SYN (half-open) scan
A SYN scan sends a SYN packet and analyzes responses without completing the full TCP handshake, making it stealthier.
Question 3: What does MAC address spoofing allow an attacker to do on a network?
- Encrypt traffic between hosts
- Impersonate another device's hardware address (Correct answer)
- Bypass TLS certificate checks
- Escalate privileges on a server
Correct answer: Impersonate another device's hardware address
MAC address spoofing changes the hardware address to impersonate another device, bypassing MAC-based access controls.
Question 4: Which protocol is most vulnerable to ARP poisoning attacks?
- IPv6
- IPv4 on a local network segment (Correct answer)
- HTTPS traffic
- DNS over TLS
Correct answer: IPv4 on a local network segment
ARP poisoning targets IPv4 on local network segments by associating the attacker's MAC with a legitimate IP address.
Question 5: What is the purpose of network segmentation in cybersecurity?
- Increase internet bandwidth
- Limit lateral movement by isolating network zones (Correct answer)
- Improve DNS resolution speed
- Reduce firewall rule complexity
Correct answer: Limit lateral movement by isolating network zones
Network segmentation divides a network into zones to contain breaches and limit an attacker's lateral movement.
Question 6: Which technology monitors network traffic for known attack signatures and can automatically block them?
- IDS
- IPS (Correct answer)
- SIEM
- NAC
Correct answer: IPS
An Intrusion Prevention System (IPS) detects and automatically blocks malicious traffic based on signatures.
Cyber Security Network Security 2
What is a VPN primarily used for in a corporate environment?