ISC2 CC Network Security 1 — Questions and Answers
Question 1: What is the primary purpose of a firewall?
- To encrypt all network traffic
- To monitor network performance metrics
- To control incoming and outgoing network traffic based on security rules (Correct answer)
- To detect malware on endpoints
Correct answer: To control incoming and outgoing network traffic based on security rules
A firewall controls network traffic by allowing or blocking connections based on predefined security rules.
Question 2: What does a VPN (Virtual Private Network) primarily provide?
- Faster internet connection speeds
- Encrypted tunnels for secure remote access over untrusted networks (Correct answer)
- Protection against malware on endpoints
- Anonymous browsing with no encryption
Correct answer: Encrypted tunnels for secure remote access over untrusted networks
A VPN creates an encrypted tunnel between a user and a network, providing secure remote access and protecting data in transit.
Question 3: What is a DMZ (Demilitarized Zone) in network security?
- A network segment with no security controls
- A segment that hosts public-facing servers while isolating them from the internal network (Correct answer)
- A firewall configuration that blocks all traffic by default
- A wireless network exclusively for guest users
Correct answer: A segment that hosts public-facing servers while isolating them from the internal network
A DMZ is a network segment that hosts public-facing services (like web servers) while isolating them from the internal corporate network.
Question 4: What is network segmentation?
- Increasing network bandwidth capacity
- Dividing a network into smaller, isolated subnetworks to improve security (Correct answer)
- Encrypting all network communications end-to-end
- Monitoring all network traffic for anomalies
Correct answer: Dividing a network into smaller, isolated subnetworks to improve security
Network segmentation divides a network into smaller subnetworks to improve security, performance, and limit the spread of attacks.
Question 5: What is the purpose of an Intrusion Detection System (IDS)?
- To block all unauthorized access attempts automatically
- To monitor network traffic and generate alerts on suspicious activity (Correct answer)
- To encrypt sensitive network communications
- To manage user authentication across the network
Correct answer: To monitor network traffic and generate alerts on suspicious activity
An IDS monitors network traffic and system activity, generating alerts when it detects patterns that may indicate an attack.
Question 6: What does the principle of 'zero trust' mean in network security?
- Trusting all users inside the network perimeter
- Never trusting any user or device by default and always requiring verification (Correct answer)
- Blocking all network traffic by default unless whitelisted
- Trusting only cloud-based services and not on-premises systems
Correct answer: Never trusting any user or device by default and always requiring verification
Zero trust means that no user, device, or network segment is inherently trusted — every access request must be verified regardless of its origin.
