IAS Mid-Term Quiz

What is the primary purpose of a firewall in network security?

• To encrypt data transmission

• To prevent unauthorized access to a network

• To boost network performance

• To filter spam emails

What does VPN stand for in the context of network security?

• Virtual Public Network

• Virtual Private Network

• Visible Private Network

• Virtual Proxy Network

Which authentication factor typically relies on something the user knows?

• Biometric

• Token

• Password

• Smart card

What does SSL/TLS primarily provide in communication security?

• Authentication and authorization

• Data encryption

• Network segmentation

• Packet filtering

What is the purpose of intrusion detection systems (IDS) in network security?

• To prevent unauthorized access

• To encrypt data transmissions

• To detect and alert about suspicious activities

• To authenticate users

Which of the following is NOT a type of network security attack?

• Denial of Service

• Phishing

• Patching

• Man-in-the-Middle

What is the purpose of digital signatures in communication security?

• To encrypt data

• To provide authentication and integrity

• To prevent eavesdropping

• To detect intrusion attempts

Which of the following is NOT a commonly used security mechanism for identity management and access control?

• Multi-factor authentication (MFA)

• Role-based access control (RBAC)

• Public key infrastructure (PKI)

• Data encryption

What technology allows users to access multiple applications with a single set of credentials and is often used for identity federation?

• Single sign-on (SSO)

• Open Authorization

• Kerberos

• Lightweight Directory Access Protocol

Answer explanation

Single sign-on (SSO) focuses on seamless authentication across multiple applications, OAuth deals with delegated authorization for third-party access to resources.

Kerberos provides network authentication using secret-key cryptography, and LDAP is a protocol for accessing and managing directory information, commonly used for centralized authentication and authorization.

Which access control model assigns permissions to users based on their roles within an organization?

• Discretionary access control (DAC)

• Role-based access control (RBAC)

• Mandatory access control (MAC)

• Attribute-based access control (ABAC)