SE Network Security

Question 1

Which firewall type inspects traffic at the application layer and understands specific protocols like HTTP and FTP?

Accepted Answer

Application-layer (proxy) firewall

Answer

Packet-filtering firewall

Answer

Stateful inspection firewall

Answer

Circuit-level gateway

Question 2

What is the primary purpose of network segmentation in a security architecture?

Accepted Answer

Limit lateral movement and contain breaches

Answer

Increase bandwidth

Answer

Simplify network management

Answer

Reduce hardware costs

Question 3

A security engineer needs to detect unauthorized devices connecting to a wired network. Which technology provides the best control?

Accepted Answer

Network Access Control (NAC)

Answer

MAC address filtering

Answer

VLAN tagging

Answer

Port mirroring

Question 4

Which attack exploits a weakness in the ARP protocol to intercept traffic between two hosts on the same network?

Accepted Answer

ARP spoofing (poisoning)

Answer

DNS poisoning

Answer

BGP hijacking

Answer

ICMP redirect attack

Question 5

What does a network-based IDS (NIDS) primarily analyze to detect threats?

Accepted Answer

Network packet traffic

Answer

Host log files

Answer

Memory dumps

Answer

User authentication events

Question 6

Which protocol provides encrypted tunneling for site-to-site VPN connections commonly used in enterprise environments?

Accepted Answer

IPsec

Answer

PPTP

Answer

L2TP alone

Answer

Telnet