MCQ Collection
Network Security MCQs
Network Security MCQs covering firewalls, attacks, protocols, and secure communication.
Choose an option to check your answer.
A.
only increases battery life
B.
sends false ARP messages to associate an attacker MAC address with another IP address
C.
updates antivirus software
D.
is required for WPA3
Show Answer
Correct Answer: B. sends false ARP messages to associate an attacker MAC address with another IP address
Explanation:
This is correct because ARP spoofing sends false ARP messages to associate an attacker MAC address with another IP address.
Choose an option to check your answer.
A.
is a malware analysis tool
B.
logically segments a switched network into separate broadcast domains
C.
is a wireless antenna type
D.
is a password hashing scheme
Show Answer
Correct Answer: D. is a password hashing scheme
Explanation:
The misconception is "is a password hashing scheme"; in reality, VLAN logically segments a switched network into separate broadcast domains.
Choose an option to check your answer.
A.
is an older wireless security protocol considered weak and unsuitable for modern protection
B.
is stronger than WPA3 by design
C.
is a network forensics standard
D.
prevents IV reuse fully
Show Answer
Correct Answer: A. is an older wireless security protocol considered weak and unsuitable for modern protection
Explanation:
The correct answer is that WEP is an older wireless security protocol considered weak and unsuitable for modern protection.
Choose an option to check your answer.
A.
sends false ARP messages to associate an attacker MAC address with another IP address
B.
is required for WPA3
C.
signs DNS records cryptographically
D.
only increases battery life
Show Answer
Correct Answer: C. signs DNS records cryptographically
Explanation:
The misconception is "signs DNS records cryptographically"; in reality, ARP spoofing sends false ARP messages to associate an attacker MAC address with another IP address.
Choose an option to check your answer.
A.
logically segments a switched network into separate broadcast domains
B.
is a password hashing scheme
C.
is a malware analysis tool
D.
always removes need for routing
Show Answer
Correct Answer: A. logically segments a switched network into separate broadcast domains
Explanation:
The correct answer is that VLAN logically segments a switched network into separate broadcast domains.
Choose an option to check your answer.
A.
stores passwords in DNS records
B.
requires no authentication
C.
is designed only for wired Ethernet
D.
uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes
Show Answer
Correct Answer: D. uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes
Explanation:
The correct answer is that WPA2 uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes.
Choose an option to check your answer.
A.
updates antivirus software
B.
sends false ARP messages to associate an attacker MAC address with another IP address
C.
only increases battery life
D.
signs DNS records cryptographically
Show Answer
Correct Answer: B. sends false ARP messages to associate an attacker MAC address with another IP address
Explanation:
The correct answer is that ARP spoofing sends false ARP messages to associate an attacker MAC address with another IP address.
Choose an option to check your answer.
A.
is a decoy system or service designed to attract and study attackers
B.
is a primary production database
C.
is a DNS resolver requirement
D.
is only a cable tester
Show Answer
Correct Answer: A. is a decoy system or service designed to attract and study attackers
Explanation:
The correct answer is that Honeypot is a decoy system or service designed to attract and study attackers.
Choose an option to check your answer.
A.
is designed only for wired Ethernet
B.
uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes
C.
requires no authentication
D.
is identical to plain HTTP
Show Answer
Correct Answer: B. uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes
Explanation:
WPA2 is best described as something that uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes.
Choose an option to check your answer.
A.
encrypts wireless traffic
B.
hardens switch port security
C.
overloads a switch MAC address table to affect normal switching behavior
D.
is a DNSSEC validation process
Show Answer
Correct Answer: C. overloads a switch MAC address table to affect normal switching behavior
Explanation:
The correct answer is that MAC flooding overloads a switch MAC address table to affect normal switching behavior.
Choose an option to check your answer.
A.
is a decoy system or service designed to attract and study attackers
B.
is a default password list
C.
is only a cable tester
D.
is a DNS resolver requirement
Show Answer
Correct Answer: A. is a decoy system or service designed to attract and study attackers
Explanation:
Honeypot is best described as something that is a decoy system or service designed to attract and study attackers.
Choose an option to check your answer.
A.
requires no authentication
B.
is designed only for wired Ethernet
C.
is identical to plain HTTP
D.
uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes
Show Answer
Correct Answer: D. uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes
Explanation:
This is correct because WPA2 uses stronger protection than WEP and commonly relies on AES-CCMP in enterprise or personal modes.
