Security Engineering on AWS Certification Network Security & Architecture

Question 1

What is the primary function of a firewall in network security?

Accepted Answer

To monitor and control incoming and outgoing network traffic based on security rules

Answer

A firewall monitors and controls network traffic based on predetermined security rules, acting as a barrier between trusted and untrusted networks.

Question 2

What is network segmentation and why is it important?

Accepted Answer

Dividing a network into smaller segments to contain breaches and control access

Answer

Network segmentation divides a network into isolated segments, limiting the spread of security breaches and providing granular access control.

Question 3

What does a VPN provide in terms of network security?

Accepted Answer

Encrypted communication tunnels over public networks

Answer

A VPN (Virtual Private Network) creates encrypted communication tunnels over public networks, protecting data confidentiality during transmission.

Question 4

What is the purpose of intrusion detection systems (IDS)?

Accepted Answer

To monitor network traffic for suspicious activity and known threats

Answer

IDS monitors network traffic for suspicious activity, known attack patterns, and policy violations, alerting administrators to potential security threats.

Question 5

What is the principle of least privilege in network security?

Accepted Answer

Users should have only the minimum access needed to perform their job functions

Answer

The principle of least privilege restricts user access to only the resources and permissions necessary for their specific job functions, minimizing potential damage from compromised accounts.

Security Engineering on AWS Certification Practice Test

Security Engineering on AWS Certification Practice Test

Security Engineering on AWS Certification Network Security & Architecture