Secure Network Design Quiz

Which of the following is a primary objective of secure network design?

• Minimize hardware usage

• Ensure administrative simplicity

• Reduce the attack surface

• Promote unrestricted access

Which technology separates broadcast domains in a Layer 2 environment?

• Routing tables

• VLANs

• NAT

• IDS

Which access control principle ensures that users have only the permissions required to perform their job?

• Discretionary access control

• Least Privilege

• Fail-safe defaults

• Segregation of Duties

What is the primary function of a demilitarized zone (DMZ) in a network?

• Encrypt internal traffic

• Filter VPN connections

• Isolate public-facing services from internal networks

• Block all outbound traffic

Which of the following controls is considered an administrative control?

• Antivirus

• Security awareness training

• Firewall

• VLAN segmentation

In a secure design, how should a guest Wi-Fi network be configured?

• Bridged with the internal network

• On a separate VLAN

• Shared with company printers

• Assigned static IPs from the internal DHCP

Which protocol is primarily used to securely manage network devices over an encrypted channel?

• Telnet

• FTP

• SSH

• SNMPv1

What kind of firewall inspects both incoming and outgoing packets and tracks the state of network connections?

• Packet filtering firewall

• Stateless firewall

• Proxy firewall

• Stateful inspection firewall

What is the goal of network segmentation?

• Increase bandwidth

• Simplify routing tables

• Reduce broadcast traffic

• Limit the spread of malware or lateral movement

Why is NAT used in network security?

• To increase DNS resolution speed

• To encrypt network traffic

• To mask internal IP addresses from the outside world

• To enable port forwarding