ISC2 CC Network Security

Question 1

What is the primary purpose of a firewall?

Accepted Answer

To control incoming and outgoing network traffic based on security rules

Answer

To encrypt all network traffic

Answer

To monitor network performance metrics

Answer

To detect malware on endpoints

Question 2

What does a VPN (Virtual Private Network) primarily provide?

Accepted Answer

Encrypted tunnels for secure remote access over untrusted networks

Answer

Faster internet connection speeds

Answer

Protection against malware on endpoints

Answer

Anonymous browsing with no encryption

Question 3

What is a DMZ (Demilitarized Zone) in network security?

Accepted Answer

A segment that hosts public-facing servers while isolating them from the internal network

Answer

A network segment with no security controls

Answer

A firewall configuration that blocks all traffic by default

Answer

A wireless network exclusively for guest users

Question 4

What is network segmentation?

Accepted Answer

Dividing a network into smaller, isolated subnetworks to improve security

Answer

Increasing network bandwidth capacity

Answer

Encrypting all network communications end-to-end

Answer

Monitoring all network traffic for anomalies

Question 5

What is the purpose of an Intrusion Detection System (IDS)?

Accepted Answer

To monitor network traffic and generate alerts on suspicious activity

Answer

To block all unauthorized access attempts automatically

Answer

To encrypt sensitive network communications

Answer

To manage user authentication across the network

Question 6

What does the principle of 'zero trust' mean in network security?

Accepted Answer

Never trusting any user or device by default and always requiring verification

Answer

Trusting all users inside the network perimeter

Answer

Blocking all network traffic by default unless whitelisted

Answer

Trusting only cloud-based services and not on-premises systems