Security+ & Network+

What are the primary functions of firewalls in network security?

• A. Encrypt all network traffic

• B. Filter traffic based on rules

• C. Monitor endpoint activities

• D. Authenticate users

How does network segmentation improve security in an enterprise environment?

• A. By blocking all external traffic

• B. By isolating sensitive areas of the network

• C. By encrypting all network traffic

• D. By improving network speed

Explain the difference between an IDS and an IPS

• A. IDS blocks traffic, while IPS only monitors it

• B. IDS detects threats, while IPS detects and blocks threats

• C. IDS operates on the application layer, while IPS operates on the transport layer

• D. IDS and IPS are the same

Why is monitoring traffic in a DMZ critical for protecting internal systems?

• A. To ensure faster network speeds

• B. To block all incoming traffic

• C. To detect threats before they reach internal networks

• D. To provide access to sensitive internal systems

What is the purpose of operating system hardening, and what steps are involved?

• A. Improving system performance

• B. Reducing vulnerabilities through patches and configurations

• C. Disabling security features for compatibility

• D. Installing unnecessary applications

How does Endpoint Detection and Response (EDR) enhance endpoint security compared to traditional antivirus software?

• A. By using only signature-based detection

• B. By offering real-time monitoring and behavioral analysis

• C. By focusing on known malware threats

• D. By isolating all devices on the network

What are the risks of granting excessive user privileges, and how can the principle of least privilege mitigate these risks?

• A. Excessive privileges can slow down networks

• B. Users may accidentally or intentionally compromise systems

• C. Privilege levels do not impact security

• D. Least privilege applies only to administrators

Why is encryption important for protecting endpoint data?

• A. It makes data unreadable without a decryption key

• B. It improves system performance

• C. It blocks unauthorized users from accessing the endpoint

• D. It ensures network segmentation

What is the role of honeypots in secure network design, and how do they assist security teams?

• A. They isolate unauthorized users permanently

• B. They lure attackers to analyze attack methods

• C. They replace IDS/IPS systems

• D. They act as primary data storage

Define Zero-Trust Architecture and explain its core principles

• A. Trust devices inside the network but not external ones

• B. Trust no entity by default, enforce strict access controls

• C. Allow access to public services without authentication

• D. Segment networks based on performance needs