SE Network Security 3

Question 1

A security engineer wants to prevent email spoofing for a domain. Which combination of DNS records is most effective?

Accepted Answer

SPF + DKIM + DMARC

Answer

SPF defines authorized senders, DKIM adds email signatures, and DMARC enforces policy and reporting when either check fails.

Question 2

Which network security control is specifically designed to deceive attackers by mimicking real systems and logging their activity?

Accepted Answer

Honeypot

Answer

A honeypot is a decoy system intentionally deployed to attract attackers and gather intelligence on their techniques.

Question 3

What is the main advantage of using out-of-band management networks for network devices?

Accepted Answer

Management access remains available even if the production network is compromised or down

Answer

Out-of-band management provides a separate, dedicated channel so administrators can still reach devices when the primary network fails.

Question 4

Which technology aggregates logs from firewalls, IDS, and other network devices to correlate security events?

Accepted Answer

SIEM

Answer

A SIEM (Security Information and Event Management) collects, normalizes, and correlates log data from across the environment.

Question 5

What is the purpose of egress filtering on a network perimeter firewall?

Accepted Answer

Prevent internal hosts from sending unauthorized outbound traffic

Answer

Egress filtering inspects and restricts traffic leaving the network to prevent data exfiltration and stop compromised hosts from beaconing.

SE - Security Engineer Practice Test