Security Engineering on AWS Certification Network Security & Architecture

Question 1

What is the primary function of a firewall in network security?

Accepted Answer

To monitor and control incoming and outgoing network traffic based on security rules

Answer

To increase network speed

Answer

To store network data backups

Answer

To manage email distribution

Question 2

What is network segmentation and why is it important?

Accepted Answer

Dividing a network into smaller segments to contain breaches and control access

Answer

Increasing the number of network devices

Answer

Removing old network equipment

Answer

Upgrading all network cables simultaneously

Question 3

What does a VPN provide in terms of network security?

Accepted Answer

Encrypted communication tunnels over public networks

Answer

Faster internet connection speeds

Answer

Free internet access worldwide

Answer

Automatic virus removal

Question 4

What is the purpose of intrusion detection systems (IDS)?

Accepted Answer

To monitor network traffic for suspicious activity and known threats

Answer

To prevent all unauthorized access automatically

Answer

To speed up network performance

Answer

To manage network IP addresses

Question 5

What is the principle of least privilege in network security?

Accepted Answer

Users should have only the minimum access needed to perform their job functions

Answer

All users should have administrator access for convenience

Answer

Access permissions should be updated annually

Answer

New users should receive the same access as their managers

Question 6

What is a DMZ (Demilitarized Zone) in network architecture?

Accepted Answer

A network segment between internal and external networks that hosts public-facing services

Answer

A restricted area where damaged equipment is stored

Answer

A backup data center in a remote location

Answer

A meeting room for discussing network security