NE NE Network Security 1

Question 1

Which firewall type inspects traffic at the application layer and can filter based on application-specific data?

Accepted Answer

Next-generation firewall (NGFW)

Answer

NGFWs operate at Layer 7 and can identify applications regardless of port number, enabling deep packet inspection.

Question 2

What is the primary purpose of a demilitarized zone (DMZ) in network security?

Accepted Answer

To host public-facing servers while protecting the internal network

Answer

A DMZ places public-facing servers (web, mail, DNS) in a separate zone so that even if compromised, attackers cannot directly access the internal LAN.

Question 3

Which attack floods a target with SYN packets without completing the TCP three-way handshake?

Accepted Answer

SYN flood

Answer

A SYN flood exhausts server connection tables by leaving half-open TCP sessions, resulting in a denial-of-service condition.

Question 4

What does the 802.1X standard provide in a network environment?

Accepted Answer

Port-based Network Access Control (NAC)

Answer

802.1X enforces authentication before allowing a device to access the network, requiring credentials verified by a RADIUS server.

Question 5

Which encryption protocol replaced WEP and is considered insecure due to its use of RC4?

Accepted Answer

TKIP (WPA)

Answer

WPA with TKIP was designed as a temporary fix for WEP but still uses RC4 and has known vulnerabilities like the TKIP MIC exploit.

NE - Network Engineer Practice Test

NE - Network Engineer Practice Test

NE NE Network Security 1