Network Security MCQ Practice Test

Q1. A network administrator is implementing a Web Application Firewall (WAF) to protect against SQL Injection attacks. The WAF is configured to use a technique called "Request Sanitization" to prevent malicious input from reaching the application. Which of the following is the primary benefit of using Request Sanitization in this scenario?

• A. It prevents the application from crashing due to malformed input
• B. It allows the application to continue processing requests even if the input is malicious
• C. It prevents the attacker from injecting malicious SQL code into the application ✓
• D. It reduces the amount of traffic that needs to be inspected by the WAF

Q2. A network administrator is implementing a Web Application Firewall (WAF) to protect against SQL injection attacks. The WAF is configured to use a 'rules-based' approach to identify and block malicious traffic. Which of the following is a key benefit of this approach?

• A. Improved performance by reducing the number of false positives
• B. Enhanced security through more accurate threat detection ✓
• C. Increased complexity in managing and updating the WAF ruleset
• D. Reduced visibility into attack patterns and trends

Q3. A network administrator is implementing a Web Application Firewall (WAF) to protect against SQL injection attacks. The WAF is configured to use a 'rule-based' approach. Which of the following is a characteristic of this approach?

• A. The WAF uses a signature-based approach to identify and block malicious traffic.
• B. The WAF uses a machine learning algorithm to identify and block malicious traffic.
• C. The WAF uses a set of predefined rules to identify and block malicious traffic based on known attack patterns. ✓
• D. The WAF uses a honeypot to lure and trap attackers.

Q4. A network administrator is implementing a Secure Sockets Layer (SSL) 3.0 protocol to encrypt data in transit. Which of the following is a weakness in the SSL 3.0 protocol that can be exploited by an attacker?

• A. The use of a fixed-size block cipher that can be vulnerable to padding oracle attacks ✓
• B. The reliance on a random number generator that can be compromised by an attacker
• C. The use of a non-recoverable nonce that can lead to replay attacks
• D. The lack of a secure key exchange protocol that can be vulnerable to man-in-the-middle attacks

Q5. A network administrator is configuring a firewall rule to allow incoming HTTPS traffic on a web server. The administrator wants to allow traffic from a specific IP range, but also wants to block traffic from any IP address that has previously been flagged as malicious. Which of the following firewall rules would achieve this?

• A. Allow traffic from IP addresses in the range 192.168.1.0/24
• B. Block traffic from IP addresses in the range 192.168.1.0/24
• C. Allow traffic from IP addresses in the range 192.168.1.0/24, but block traffic from IP addresses that have been flagged as malicious in the firewall's blacklist ✓
• D. Block all incoming HTTPS traffic on the web server

Q6. A network administrator is implementing a Secure Sockets Layer (SSL) termination appliance to encrypt HTTPS traffic. Which of the following is a benefit of using an SSL termination appliance?

• A. It provides an additional layer of encryption for the network backbone.
• B. It reduces the computational overhead on the web server. ✓
• C. It increases the complexity of the network architecture.
• D. It requires the web server to handle decryption and re-encryption of the data.

Q7. A network administrator is tasked with implementing a secure VPN solution to connect a remote office to the headquarters. The remote office has a limited budget and only has access to a single public IP address. Which of the following VPN protocols would be the most suitable for this scenario?

• A. PPTP is a good choice due to its low overhead and ease of implementation.
• B. L2TP/IPSec is a good choice due to its strong encryption and authentication mechanisms.
• C. OpenVPN is a good choice due to its high level of customization and flexibility.
• D. SSL/TLS is a good choice due to its ability to operate over a single public IP address. ✓

Q8. A network administrator is implementing a Web Application Firewall (WAF) to protect a web server from SQL injection attacks. The WAF is configured to use a technique called "request body signing" to verify the integrity of incoming requests. Which of the following is a benefit of using request body signing?

• A. It improves the performance of the web server by reducing the number of HTTP requests.
• B. It prevents attackers from injecting malicious SQL code into the web server by verifying the integrity of the request body. ✓
• C. It requires the web server to perform additional cryptographic operations, which can increase the processing time of incoming requests.
• D. It is only effective against cross-site scripting (XSS) attacks and not against SQL injection attacks.

Q9. Which network security protocol is responsible for encrypting and decrypting SSL/TLS connections using symmetric keys, and is vulnerable to the BEAST attack?

• A. SSL/TLS ✓
• B. IPSec
• C. ESP
• D. AES-GCM

Q10. In a network with a mix of Windows and Linux devices, which protocol is used to authenticate users to a RADIUS server, allowing them to access a VPN connection?

• A. Kerberos
• B. LDAP
• C. RADIUS ✓
• D. TACACS+

That was just a sample. Sign up to unlock the full question bank with timed tests and certificates.