SE Network Security 1

Question 1

Which firewall type inspects traffic at the application layer and understands specific protocols like HTTP and FTP?

Accepted Answer

Application-layer (proxy) firewall

Answer

Application-layer firewalls (proxies) operate at Layer 7 and can inspect and filter protocol-specific content.

Question 2

What is the primary purpose of network segmentation in a security architecture?

Accepted Answer

Limit lateral movement and contain breaches

Answer

Network segmentation restricts an attacker's ability to move laterally across the environment after an initial compromise.

Question 3

A security engineer needs to detect unauthorized devices connecting to a wired network. Which technology provides the best control?

Accepted Answer

Network Access Control (NAC)

Answer

NAC enforces policy-based access, performing posture checks before granting network admission.

Question 4

Which attack exploits a weakness in the ARP protocol to intercept traffic between two hosts on the same network?

Accepted Answer

ARP spoofing (poisoning)

Answer

ARP spoofing sends forged ARP replies to associate the attacker's MAC with a legitimate IP, enabling man-in-the-middle attacks.

Question 5

What does a network-based IDS (NIDS) primarily analyze to detect threats?

Accepted Answer

Network packet traffic

Answer

A NIDS passively monitors and analyzes network traffic flows to detect suspicious patterns or signatures.

SE - Security Engineer Practice Test