Network and Security Quiz

A company wants to block all incoming traffic from a specific country to prevent common cyberattacks originating from that region. Which security tool is best suited for this task?

• An Intrusion Detection System (IDS)

• An Intrusion Prevention System (IPS)

• A packet-filtering firewall

• A Web Application Firewall (WAF)

An administrator notices a high volume of unauthorized login attempts to a server from a single IP address. Which security device is designed to both detect this activity and automatically block the source IP address in real-time?

• Firewall

• Intrusion Detection System (IDS)

• Intrusion Prevention System (IPS)

• Load Balancer

Which of the following is a key advantage of using HTTPS over HTTP?

• It is faster.

• It uses a simpler protocol.

• It encrypts the data in transit.

• It is less vulnerable to DDoS attacks.

A network security professional decides to implement a stateful firewall. Why is this considered more secure than a simple packet-filtering firewall?

• It inspects the content of the data packet.

• It can detect and block viruses.

• It keeps a record of active connections and only allows traffic that is part of an established session.

• It is much cheaper and easier to configure.

Your server is configured to allow SSH connections. Which protocol's secure counterpart should you use to ensure your remote management is protected from eavesdropping?

• HTTP

• SFTP

• Telnet

• FTP

Which of the following is a core principle of 'OS hardening'?

• Installing a new operating system.

• Reducing the attack surface by disabling unnecessary services.

• Encrypting the entire hard drive.

• Installing a third-party antivirus program.

A malicious actor gains control of a user's Windows laptop by exploiting a memory-based vulnerability. The attacker never writes a file to the hard drive. Which security solution is specifically designed to detect this type of fileless malware?

• Traditional signature-based antivirus

• A host-based firewall

• A Network Intrusion Detection System (NIDS)

• An Endpoint Detection and Response (EDR) solution

In Linux, what is a fundamental practice for securing the system?

• Allowing direct root login for convenience.

• Using the sudo command to run all applications.

• Disabling all file permissions.

• Regularly applying patches and updates.

Which Windows Group Policy setting prevents pass-the-hash attacks?

• Enable Windows Defender

• Restrict NTLM authentication

• Disable Registry Editor

• Block USB drives

A Linux server has PasswordAuthentication yes in /etc/ssh/sshd_config. What’s the risk?

• Brute-force attacks on SSH

• DNS leakage

• SQL injection

• CSRF vulnerabilities