PCIP Security Technologies & Network Architecture — Questions and Answers
Question 1: What is the primary function of a firewall?
- Boost internet speed
- Scan for viruses
- Control network traffic (Correct answer)
- Monitor user behavior
Correct answer: Control network traffic
The primary function of a firewall is to monitor and control incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, such as the internet. By filtering traffic, firewalls prevent unauthorized access and protect internal systems from various cyber threats.
Question 2: Which device is used to segment a network into different subnetworks?
- Modem
- Switch
- Router (Correct answer)
- Repeater
Correct answer: Router
A router is a networking device that forwards data packets between different computer networks. Its key function is to connect distinct networks and segment them into subnetworks, directing traffic efficiently and securely. Routers use IP addresses to determine the best path for data, enabling communication between various network segments and the internet.
Question 3: What is the purpose of a demilitarized zone (DMZ) in network security?
- Boost server speed
- Store backups
- Isolate public-facing systems (Correct answer)
- Block DNS requests
Correct answer: Isolate public-facing systems
A Demilitarized Zone (DMZ) is a perimeter network that isolates an organization's public-facing servers (like web servers, email servers, or DNS servers) from its internal private network. By placing these systems in a DMZ, an organization can provide external users with access to certain services while protecting its core internal network from direct external threats. This acts as a buffer zone, enhancing overall network security.
Question 4: Which protocol secures web communication?
- HTTP
- FTP
- HTTPS (Correct answer)
- SMTP
Correct answer: HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the protocol used for secure communication over a computer network, widely used on the internet. It encrypts the data exchanged between a user's web browser and a website, protecting sensitive information like login credentials and payment details. This security is achieved through the use of Transport Layer Security (TLS).
Question 5: Which tool detects unauthorized access attempts?
- Antivirus
- Firewall
- Intrusion Detection System (IDS) (Correct answer)
- Patch manager
Correct answer: Intrusion Detection System (IDS)
An Intrusion Detection System (IDS) is a security tool designed to monitor network or system activities for malicious activity or policy violations. It analyzes traffic and system logs for patterns that indicate unauthorized access attempts, such as port scans or malware signatures. Upon detecting a potential threat, an IDS typically alerts administrators, allowing for timely response.
Question 6: Which encryption method uses two keys?
- Symmetric encryption
- Asymmetric encryption (Correct answer)
- Binary encryption
- Block cipher
Correct answer: Asymmetric encryption
Asymmetric encryption, also known as public-key cryptography, uses a pair of mathematically linked keys: a public key and a private key. The public key can be freely distributed and used to encrypt data, while only the corresponding private key can decrypt it. This method is fundamental for secure communication, digital signatures, and key exchange, as it eliminates the need to share a secret key beforehand.
Question 7: Which network model layers data communication into 7 layers?
- TCP/IP
- OSI model (Correct answer)
- IPV6
- WPA2
Correct answer: OSI model
The OSI (Open Systems Interconnection) model is a conceptual framework that standardizes the functions of a telecommunication or computing system into seven distinct layers. Each layer performs specific tasks, from the physical transmission of data (Layer 1) to application-level services (Layer 7). This layered approach helps in understanding, designing, and troubleshooting network architectures.
Question 8: Which device helps manage multiple devices in a network securely?
- Switch (Correct answer)
- Printer
- Modem
- Adapter
Correct answer: Switch
A network switch is a device that connects multiple devices on a computer network and forwards data packets only to the intended destination device. Unlike a hub, a switch learns the MAC addresses of connected devices, creating dedicated connections and reducing network congestion. This intelligent forwarding enhances network efficiency and security by ensuring data is sent only where it needs to go.
Question 9: What does VLAN stand for in networking?
- Virtual Link Access Network
- Virtual LAN (Correct answer)
- Verified LAN
- Virtual Logic Architecture Node
Correct answer: Virtual LAN
VLAN stands for Virtual Local Area Network. It is a logical grouping of network devices that allows them to communicate as if they were on the same physical LAN, even if they are connected to different network switches. VLANs improve network performance, security, and management by segmenting a single physical network into multiple broadcast domains, isolating traffic and reducing broadcast storms.
PCIP Security Technologies & Network Architecture
What is the primary function of a firewall?