HomeSubjectsUniversityBlogAbout

Network Security

Topic in Cyber Security

210 total MCQsShowing 30 with explanations10 Easy10 Medium10 Hard
Start Timed Quiz on Network SecurityBack to Cyber Security

About This Topic

Network security protects data in transit and the devices that carry it, using controls such as firewalls, segmentation, encryption and intrusion detection. Expect questions distinguishing packet-filtering, stateful and application-layer firewalls, IDS from IPS, and signature from anomaly detection. Attack items cover DoS and DDoS, SYN floods, ARP spoofing, man-in-the-middle, DNS cache poisoning and VLAN hopping caused by trunking misconfiguration. Defensive topics include VPNs built on IPsec or TLS, DMZ design, network access control, honeypots and network taps for monitoring. Secure protocol replacements, such as SSH instead of Telnet and SFTP instead of FTP, are a recurring theme.

Below are 30 practice questions from a pool of 210 Network Security MCQs, one of 16 topics in Cyber Security. Each shows the correct answer with an explanation; when you are ready, take a timed quiz to test recall under exam conditions.

Practice Questions

Each question below shows the correct answer with a full explanation. Use these to build conceptual understanding before attempting a timed quiz.

Network SecurityEasy

Q1. What does VPN stand for?

  1. A.Very Personal Network
  2. B.Verified Public Network
  3. C.Virtual Private Network✓ Correct
  4. D.Visual Processing Node

Explanation

VPN stands for Virtual Private Network, which creates a secure encrypted connection over a less secure network.

Report an error in this question

Network SecurityEasy

Q2. What is the purpose of a VPN?

  1. A.To reduce data sizes through compression methods
  2. B.To increase internet speed for improved operational efficiency
  3. C.To block all websites within enterprise computing infrastructure
  4. D.To create a secure, encrypted connection over a public network✓ Correct

Explanation

A VPN creates a secure, encrypted tunnel between your device and a server, protecting data privacy.

Report an error in this question

Network SecurityEasy

Q3. What protocol is used for secure web browsing?

  1. A.FTP
  2. B.HTTPS✓ Correct
  3. C.Telnet
  4. D.HTTP

Explanation

HTTPS uses TLS/SSL encryption to secure communication between a web browser and server.

Report an error in this question

Network SecurityEasy

Q4. What does IDS stand for in network security?

  1. A.Integrated Development System
  2. B.Internal Data Storage
  3. C.Internet Download Service
  4. D.Intrusion Detection System✓ Correct

Explanation

IDS stands for Intrusion Detection System, which monitors network traffic for suspicious activity.

Report an error in this question

Network SecurityEasy

Q5. What is packet filtering?

  1. A.Encrypting all packets regardless of the specific situation or context
  2. B.Deleting all packets regardless of the specific situation or context
  3. C.Compressing network packets within enterprise security environments
  4. D.Examining packets and allowing or blocking them based on defined rules✓ Correct

Explanation

Packet filtering inspects each packet and accepts or rejects it based on predefined rules.

Report an error in this question

Network SecurityEasy

Q6. What is a DMZ in networking?

  1. A.A network segment between internal and external networks to host public-facing services✓ Correct
  2. B.A military zone within enterprise computing environments
  3. C.A wireless network used in enterprise network infrastructure
  4. D.A network routing device for managing enterprise traffic flows

Explanation

A DMZ is a subnetwork that separates an internal network from untrusted external networks, hosting public-facing services.

Report an error in this question

Network SecurityEasy

Q7. What is a firewall?

  1. A.A physical fireproof barrier within a building structure
  2. B.A category of self-replicating malicious software
  3. C.A high-level language used for development used in enterprise computing environments
  4. D.A network security device that monitors and filters network traffic✓ Correct

Explanation

A firewall monitors and controls incoming and outgoing network traffic based on predetermined security rules.

Report an error in this question

Network SecurityEasy

Q8. Which port number is commonly used for HTTPS?

  1. A.21
  2. B.80
  3. C.25
  4. D.443✓ Correct

Explanation

Port 443 is the standard port for HTTPS traffic.

Report an error in this question

Network SecurityEasy

Q9. What is a network intrusion?

  1. A.Adding new devices to a network
  2. B.Upgrading network hardware
  3. C.Unauthorized access to a computer network✓ Correct
  4. D.Installing network software

Explanation

A network intrusion is any unauthorized activity on a digital network.

Report an error in this question

Network SecurityMedium

Q10. What is port scanning?

  1. A.Sending packets to specific ports to discover which services are running✓ Correct
  2. B.A cryptographic algorithm used for protecting sensitive data
  3. C.A physical inspection of ports within modern computing environments
  4. D.A backup method for managing enterprise data resources

Explanation

Port scanning probes a server's ports to identify open ports and available services.

Report an error in this question

Network SecurityMedium

Q11. What is network segmentation?

  1. A.Deleting network components within enterprise security environments
  2. B.A type of network attack used in enterprise network infrastructure
  3. C.Dividing a network into smaller segments to improve security and performance✓ Correct
  4. D.Combining all networks into one regardless of the specific situation or context

Explanation

Network segmentation divides a network into smaller subnetworks, limiting lateral movement of attackers.

Report an error in this question

Network SecurityHard

Q12. What is the purpose of 802.1X network authentication?

  1. A.To increase and optimize overall network throughput speed and management
  2. B.To create and deploy enterprise wireless network infrastructure
  3. C.To provide port-based network access control requiring authentication before granting access✓ Correct
  4. D.To compress network traffic across the enterprise network infrastructure

Explanation

IEEE 802.1X requires devices to authenticate before being granted network access.

Report an error in this question

Network SecurityMedium

Q13. What is a stateful firewall?

  1. A.A firewall without rules deployed across enterprise environments
  2. B.A firewall that tracks the state of active connections and makes decisions based on context✓ Correct
  3. C.A software-only firewall deployed across enterprise environments
  4. D.A firewall that only checks packet headers deployed across enterprise environments

Explanation

A stateful firewall monitors the full state of active connections and uses context for more informed filtering.

Report an error in this question

Network SecurityMedium

Q14. What is DNS security and why is it important?

  1. A.Continuous monitoring is not important for security for modern enterprise security environments
  2. B.It is only about encrypting DNS without any additional considerations needed
  3. C.Protecting DNS infrastructure from attacks like DNS spoofing to ensure correct domain name resolution✓ Correct
  4. D.DNS security only affects speed without any additional considerations needed

Explanation

DNS security protects the Domain Name System from threats like cache poisoning and spoofing.

Report an error in this question

Network SecurityHard

Q15. What is deep packet inspection (DPI)?

  1. A.Checking only packet headers without any additional considerations needed
  2. B.Examining the full content of network packets including the data payload for threats✓ Correct
  3. C.A type of compression within modern computing environments
  4. D.A routing protocol used in enterprise network infrastructure

Explanation

DPI examines the data portion of packets to detect threats, policy violations, and malware.

Report an error in this question

Network SecurityHard

Q16. What is network forensics?

  1. A.Designing and deploying new network topologies across enterprise security infrastructure
  2. B.The capture, recording, and analysis of network events to discover the source of security attacks✓ Correct
  3. C.Configuring and managing enterprise routers across enterprise security infrastructure
  4. D.Installing and configuring network cables across enterprise security infrastructure environments

Explanation

Network forensics involves monitoring and analyzing network traffic to investigate security incidents.

Report an error in this question

Network SecurityEasy

Q17. What is the function of a proxy server in security?

  1. A.To act as an intermediary between users and the internet, providing anonymity and filtering✓ Correct
  2. B.To directly connect to the internet within enterprise computing infrastructure
  3. C.To create viruses for enterprise computing environments and management
  4. D.To store passwords within enterprise computing infrastructure and management

Explanation

A proxy server acts as an intermediary providing anonymity, content filtering, and additional security.

Report an error in this question

Network SecurityMedium

Q18. What is the difference between an IDS and an IPS?

  1. A.IDS only detects and alerts while IPS can also block malicious traffic✓ Correct
  2. B.They are the same thing with no meaningful distinction between them
  3. C.IPS is slower than IDS within enterprise security environments
  4. D.IDS blocks traffic while IPS only detects

Explanation

An IDS monitors and alerts, while an IPS can also take active measures to block or prevent detected threats.

Report an error in this question

Network SecurityMedium

Q19. What is ARP spoofing?

  1. A.An attack where fake ARP messages link an attacker's MAC address with a legitimate IP✓ Correct
  2. B.A symmetric key data encryption algorithm applied to data protection workflows
  3. C.A firewall configuration deployed across enterprise environments
  4. D.A legitimate network technique used in enterprise network infrastructure

Explanation

ARP spoofing sends falsified ARP messages to associate the attacker's MAC address with a legitimate host's IP.

Report an error in this question

Network SecurityMedium

Q20. What is a honeypot in network security?

  1. A.A decoy system designed to attract attackers and study their methods✓ Correct
  2. B.A network switch used in enterprise network infrastructure
  3. C.A strain of self-replicating malicious software programs
  4. D.A type of firewall for filtering wireless network traffic

Explanation

A honeypot is a security resource used to detect, deflect, and study unauthorized access attempts.

Report an error in this question

Network SecurityMedium

Q21. What is SSL/TLS used for?

  1. A.Optimal network routing and efficient packet forwarding across systems
  2. B.Persistent data storage and streamlined data retrieval management
  3. C.Providing encrypted communication between a client and server over a network✓ Correct
  4. D.Lossless data file compression techniques for long-term storage optimization

Explanation

SSL/TLS protocols provide encryption, authentication, and integrity for network communications.

Report an error in this question

Network SecurityMedium

Q22. What is a VLAN and how does it improve security?

  1. A.A Virtual LAN that logically segments a network, isolating traffic between groups✓ Correct
  2. B.A virtual private network encrypted tunnel connection
  3. C.A next-generation firewall for filtering network traffic flows
  4. D.A software application used for enterprise computing operations

Explanation

A VLAN logically divides a physical network into separate broadcast domains, improving security by isolating traffic.

Report an error in this question

Network SecurityHard

Q23. What is a next-generation firewall (NGFW)?

  1. A.Same as a traditional firewall with no meaningful distinction between them regardless of the deployment context or scenario
  2. B.Only works with IPv6 without any additional considerations needed
  3. C.Combines traditional firewall with application awareness, deep packet inspection, and integrated threat intelligence✓ Correct
  4. D.Does not filter traffic in any deployment scenario or context regardless of the deployment context or scenario

Explanation

NGFWs add application-level inspection, deep packet inspection, intrusion prevention, and threat intelligence to traditional firewalls.

Report an error in this question

Network SecurityMedium

Q24. What is the purpose of network access control (NAC)?

  1. A.To speed up the network across the enterprise network infrastructure
  2. B.To restrict access to a network based on device compliance and user identity✓ Correct
  3. C.To install network cables across the enterprise network infrastructure
  4. D.To generate comprehensive network topology diagrams

Explanation

NAC enforces security policies by controlling access based on device compliance and user identity.

Report an error in this question

Network SecurityHard

Q25. What is the purpose of a SIEM system in network security?

  1. A.To speed up network traffic across the enterprise network infrastructure
  2. B.To provide real-time analysis of security alerts from network hardware and applications✓ Correct
  3. C.To compress log files within the data management framework and management
  4. D.To generate comprehensive network topology diagrams and management

Explanation

SIEM aggregates and analyzes log data from multiple sources for real-time security monitoring.

Report an error in this question

Network SecurityHard

Q26. What is microsegmentation in network security?

  1. A.A type of network cable used in enterprise network infrastructure
  2. B.A standard network communication protocol for data transmission
  3. C.Creating fine-grained security zones to isolate workloads and apply granular security policies✓ Correct
  4. D.Dividing networks into very large segments within enterprise security environments

Explanation

Microsegmentation creates secure zones enabling administrators to isolate workloads and apply precise security policies.

Report an error in this question

Network SecurityHard

Q27. What is a zero-day vulnerability?

  1. A.A vulnerability that has been patched within modern computing environments
  2. B.A previously unknown vulnerability exploited before the vendor has released a fix✓ Correct
  3. C.A vulnerability that only affects old networks used in enterprise computing environments
  4. D.A vulnerability in outdated software used in enterprise computing environments

Explanation

A zero-day vulnerability is a security flaw unknown to the vendor, meaning no patch exists when first exploited.

Report an error in this question

Network SecurityHard

Q28. What is a network tap used for in security monitoring?

  1. A.A network routing device for managing enterprise traffic flows
  2. B.A way to steal water within modern computing environments
  3. C.A passive device that copies network traffic for monitoring without affecting data flow✓ Correct
  4. D.A wireless access point within modern computing environments

Explanation

A network tap provides a copy of network traffic to monitoring tools without introducing latency.

Report an error in this question

Network SecurityHard

Q29. What is the purpose of NetFlow in security analysis?

  1. A.To encrypt traffic using established cryptographic standards and management
  2. B.To collect and record IP traffic flow data for analysis of patterns and anomaly detection✓ Correct
  3. C.To block websites within enterprise computing infrastructure and management
  4. D.To increase available bandwidth for improved download speeds

Explanation

NetFlow collects metadata about network traffic flows enabling analysis of patterns and detection of anomalies.

Report an error in this question

Network SecurityHard

Q30. What is BGP hijacking?

  1. A.A legitimate routing practice within modern computing environments
  2. B.A symmetric key data encryption algorithm applied to data protection workflows
  3. C.An attack where an AS falsely announces ownership of IP prefixes to redirect internet traffic✓ Correct
  4. D.A next-generation firewall for filtering network traffic flows

Explanation

BGP hijacking occurs when an autonomous system announces routes to IP blocks it does not own, redirecting traffic.

Report an error in this question

More Cyber Security Topics

Introduction to Cyber Security

Practice MCQs with explanations

Security Fundamentals

Practice MCQs with explanations

Cryptography

Practice MCQs with explanations

OS Security

Practice MCQs with explanations

Web Security

Practice MCQs with explanations

Malware & Attacks

Practice MCQs with explanations

Ready to test yourself on Network Security?

Take a timed quiz drawn from 210+ questions on this topic. No signup required — your progress saves in your browser.

Start Network Security Quiz