CompTIA Network+ Network Security 1 — Questions and Answers

Question 1: Which of the following is an example of network segmentation?

Using VLANs to separate departments in an organization (Correct answer)
Applying a firewall to block unauthorized access
Encrypting data during transmission
Configuring DHCP to assign IP addresses

Correct answer: Using VLANs to separate departments in an organization

Network segmentation involves dividing a larger network into smaller, isolated segments to improve security and performance. Using VLANs to separate departments in an organization is a prime example, as it creates logical boundaries that restrict broadcast traffic and prevent unauthorized access between different departmental segments. This reduces the attack surface and enhances overall network manageability.

Question 2: What is the purpose of a firewall in a network?

To provide physical security for network devices
To filter and monitor incoming and outgoing network traffic (Correct answer)
To assign IP addresses to devices
To optimize network performance

Correct answer: To filter and monitor incoming and outgoing network traffic

A firewall acts as a security barrier, controlling network traffic based on predefined security rules. Its primary purpose is to inspect incoming and outgoing data packets and decide whether to allow or block them, protecting a private network from unauthorized access and malicious threats from external networks. This filtering helps enforce security policies and prevent cyberattacks.

Question 3: Which type of attack involves sending a flood of packets to overwhelm a target's resources?

Phishing
Denial of Service (DoS) (Correct answer)
Man-in-the-Middle (MITM)
SQL Injection

Correct answer: Denial of Service (DoS)

A Denial of Service (DoS) attack aims to make a network resource unavailable to its legitimate users by overwhelming it with a flood of traffic. The attacker sends an excessive number of requests or malformed packets, consuming the target's resources like bandwidth, CPU, or memory. This prevents the server or service from responding to legitimate requests, effectively shutting it down.

Question 4: What protocol is commonly used for secure remote access to network devices?

Telnet
FTP
SSH (Correct answer)
HTTP

Correct answer: SSH

SSH (Secure Shell) is a cryptographic network protocol that allows secure remote access to computers and network devices over an unsecured network. It provides strong authentication and encrypts all communication, including passwords and data, protecting against eavesdropping and unauthorized access. Telnet, in contrast, transmits data in plain text and is considered insecure for remote management.

Question 5: What is the primary purpose of a VPN?

To increase wireless signal range
To encrypt and secure connections over public networks (Correct answer)
To enable load balancing on a network
To monitor traffic for malicious activity

Correct answer: To encrypt and secure connections over public networks

A VPN (Virtual Private Network) creates a secure, encrypted connection over a less secure network, such as the internet. It allows users to send and receive data as if their computing devices were directly connected to the private network. This provides privacy, anonymity, and security by tunneling traffic and encrypting data, protecting it from interception and surveillance.

CompTIA Network+ Network Security 1

Which of the following is an example of network segmentation?