SE Network Security 2

Question 1

What is the role of a DMZ (demilitarized zone) in network security architecture?

Accepted Answer

Host publicly accessible services isolated from the internal network

Answer

A DMZ places externally accessible servers (web, mail, DNS) in a buffer zone between the internet and the trusted internal network.

Question 2

Which technique splits outbound traffic so that only traffic destined for the VPN tunnel is encrypted, while other traffic goes directly to the internet?

Accepted Answer

Split tunneling

Answer

Split tunneling allows selective routing so corporate traffic uses the VPN while internet traffic bypasses it.

Question 3

An attacker sends thousands of SYN packets to a server without completing the TCP handshake. What type of attack is this?

Accepted Answer

SYN flood (DoS)

Answer

A SYN flood exhausts server resources by filling the connection table with half-open TCP connections.

Question 4

Which DNS security extension adds digital signatures to DNS records to prevent cache poisoning?

Accepted Answer

DNSSEC

Answer

DNSSEC uses cryptographic signatures on DNS records to allow resolvers to verify data authenticity.

Question 5

What is the primary security benefit of using 802.1X port-based authentication on a network switch?

Accepted Answer

Authenticates devices before granting network access

Answer

802.1X requires devices to authenticate via an authentication server (e.g., RADIUS) before the switch port is opened.

SE - Security Engineer Practice Test

SE - Security Engineer Practice Test

SE Network Security 2