Network Security MCQs

This is correct because Anomaly-based detection looks for deviations from normal behavior that may indicate attacks.

The misconception is "strengthens DNS integrity"; in reality, DNS cache poisoning inserts false DNS data into a resolver cache to redirect users.

Packet-filtering firewall is best described as something that makes decisions using packet header fields such as IP address, port, and protocol.

This is correct because IDS monitors network or host activity and generates alerts for suspicious behavior.

The misconception is "matches only exact known signatures"; in reality, Anomaly-based detection looks for deviations from normal behavior that may indicate attacks.

The correct answer is that DNS cache poisoning inserts false DNS data into a resolver cache to redirect users.

The correct answer is that Access control limits resource use based on identity, permissions, and policy decisions.

The correct answer is that Least privilege grants only the minimum permissions needed to perform required tasks.

Rate limiting is best described as something that controls the number of requests or connections allowed in a given time period.

The correct answer is that Authentication verifies the identity of a user, device, or service.

Least privilege is best described as something that grants only the minimum permissions needed to perform required tasks.

This is correct because Rate limiting controls the number of requests or connections allowed in a given time period.