MCQ Collection
Network Security MCQs
Network Security MCQs covering firewalls, attacks, protocols, and secure communication.
Choose an option to check your answer.
A.
can provide confidentiality, integrity, and authentication for IP packets
B.
does not support encryption
C.
is a social engineering method
D.
is used only by printers
Show Answer
Correct Answer: A. can provide confidentiality, integrity, and authentication for IP packets
Explanation:
This is correct because ESP in IPsec can provide confidentiality, integrity, and authentication for IP packets.
Choose an option to check your answer.
A.
removes authentication requirements
B.
creates a protected tunnel for traffic across an untrusted network
C.
broadcasts traffic to all users
D.
is a replacement for all backups
Show Answer
Correct Answer: C. broadcasts traffic to all users
Explanation:
The misconception is "broadcasts traffic to all users"; in reality, VPN creates a protected tunnel for traffic across an untrusted network.
Choose an option to check your answer.
A.
is the same as patch management
B.
prevents all spoofing automatically
C.
changes passwords into certificates
D.
captures and inspects network packets for analysis or unauthorized observation
Show Answer
Correct Answer: D. captures and inspects network packets for analysis or unauthorized observation
Explanation:
The correct answer is that Packet sniffing captures and inspects network packets for analysis or unauthorized observation.
Choose an option to check your answer.
A.
does not support encryption
B.
is a plain text logging format only
C.
can provide confidentiality, integrity, and authentication for IP packets
D.
is used only by printers
Show Answer
Correct Answer: B. is a plain text logging format only
Explanation:
The misconception is "is a plain text logging format only"; in reality, ESP in IPsec can provide confidentiality, integrity, and authentication for IP packets.
Choose an option to check your answer.
A.
is a replacement for all backups
B.
broadcasts traffic to all users
C.
stores DNS zones only
D.
creates a protected tunnel for traffic across an untrusted network
Show Answer
Correct Answer: D. creates a protected tunnel for traffic across an untrusted network
Explanation:
The correct answer is that VPN creates a protected tunnel for traffic across an untrusted network.
Choose an option to check your answer.
A.
always improves authentication
B.
is only a legitimate backup method
C.
guarantees integrity
D.
forges identity-related information such as IP, MAC, or DNS data
Show Answer
Correct Answer: D. forges identity-related information such as IP, MAC, or DNS data
Explanation:
The correct answer is that Spoofing forges identity-related information such as IP, MAC, or DNS data.
Choose an option to check your answer.
A.
is a social engineering method
B.
is a plain text logging format only
C.
can provide confidentiality, integrity, and authentication for IP packets
D.
is used only by printers
Show Answer
Correct Answer: C. can provide confidentiality, integrity, and authentication for IP packets
Explanation:
The correct answer is that ESP in IPsec can provide confidentiality, integrity, and authentication for IP packets.
Choose an option to check your answer.
A.
allows individual users to securely connect to an organization network from outside
B.
is a malware category
C.
connects two entire branch networks only
D.
removes access control
Show Answer
Correct Answer: A. allows individual users to securely connect to an organization network from outside
Explanation:
The correct answer is that Remote access VPN allows individual users to securely connect to an organization network from outside.
Choose an option to check your answer.
A.
is only a legitimate backup method
B.
prevents impersonation by design
C.
forges identity-related information such as IP, MAC, or DNS data
D.
guarantees integrity
Show Answer
Correct Answer: C. forges identity-related information such as IP, MAC, or DNS data
Explanation:
Spoofing is best described as something that forges identity-related information such as IP, MAC, or DNS data.
Choose an option to check your answer.
A.
adds cryptographic validation to DNS data to help prevent forged responses
B.
replaces TLS certificates entirely
C.
hides all IP addresses from routers
D.
turns DNS into a file system
Show Answer
Correct Answer: A. adds cryptographic validation to DNS data to help prevent forged responses
Explanation:
The correct answer is that DNSSEC adds cryptographic validation to DNS data to help prevent forged responses.
Choose an option to check your answer.
A.
is a router chassis type
B.
is a subnetting formula
C.
protects application communication by providing encryption, integrity, and authentication support
D.
is a malware sandbox only
Show Answer
Correct Answer: C. protects application communication by providing encryption, integrity, and authentication support
Explanation:
The correct answer is that SSL/TLS protects application communication by providing encryption, integrity, and authentication support.
Choose an option to check your answer.
A.
only changes monitor resolution
B.
allows individual users to securely connect to an organization network from outside
C.
is a malware category
D.
removes access control
Show Answer
Correct Answer: B. allows individual users to securely connect to an organization network from outside
Explanation:
Remote access VPN is best described as something that allows individual users to securely connect to an organization network from outside.
