Network Security Engineer Quiz Total 10 Questions Please enter your email: 1. In what scenarios would a ‘Virtual Private Network’ (VPN) be inadequate for securing remote access, and what alternatives could be considered? In scenarios where users prefer not to use encryption, physical security measures are the alternative When accessing from insecure networks; consider Zero Trust models, secure web gateways, or CASBs Only inadequate for accessing high-bandwidth content; alternatives are not necessary VPNs are always adequate; no scenarios or alternatives need consideration 2. Your company’s network is experiencing slow performance, and you suspect a DDoS attack. What immediate actions should you take to mitigate the attack and restore normal operations? Send an email to all employees asking them to stop using the internet Shutdown all servers to stop the attack and plan for a response Activate DDoS mitigation plan, reroute traffic, contact ISP, and deploy resources Increase bandwidth immediately to handle the extra traffic load 3. During a routine network audit, you discover an unauthorized device connected to the network. What steps should you take to address this security breach? Isolate the device, investigate the breach, and strengthen access controls Increase network bandwidth to dilute the impact of the unauthorized device Ignore the device until the audit is completed to maintain audit integrity Disconnect the internet to the entire network to prevent data exfiltration 4. What are the security implications of ‘cloud-based networking’ for businesses, and how can they ensure protection? Cloud-based networking is inherently secure and requires no additional protection measures Concerns over data privacy and access; protection involves encryption and robust access controls The main implication is increased network speed, not security concerns Businesses can ensure protection by avoiding cloud-based solutions altogether 5. A critical server is repeatedly infected with malware despite having up-to-date antivirus software. What additional security measures could prevent future infections? Limit the server’s functionality to reduce the risk of infection Replace the antivirus software with a different brand and hope for better results Disconnect the server from the network permanently as a preventative measure Application whitelisting, DMZ isolation, update firewall rules, and conduct security audits 6. Which protocol is used for securely accessing remote servers, replacing Telnet? SNMP FTP HTTP SSH 7. A network security scan reveals several vulnerabilities in the company’s web application. What is the most effective sequence of actions to remediate these vulnerabilities? Inform customers about the vulnerabilities and assure them that it’s under control Prioritize based on risk, patch or mitigate, review code, and implement regular training and scans Turn off the web application until a security expert can be consulted Patch all vulnerabilities at once during the next scheduled maintenance window 8. What is the significance of ‘port scanning’ in network security assessments? Port scanning has no significance in modern network security practices Used to physically secure ports against unauthorized access It is a method to increase the speed of network connections Identifies open ports and potential vulnerabilities 9. In what ways do ‘Advanced Persistent Threats’ (APT) pose a challenge to network security, and how can they be addressed? Targeted, stealthy, and long-term presence; addressed with threat intelligence and monitoring They primarily affect the physical security of network devices APTs can be completely prevented by using firewalls APTs are easily detected by standard antivirus software, posing little challenge 10. Describe how ‘machine learning’ can enhance network security monitoring and threat detection. Machine learning increases the risk of false positives in threat detection, hindering security efforts It is primarily used to reduce the workload on security teams, with no improvement in threat detection Machine learning makes network security monitoring obsolete by automating all protections Analyzes network data to identify patterns and anomalies, improving threat detection accuracy Loading … Question 1 of 10
