WorksheetsIAS1-FINAL EXAMINATION
Total questions: 50
Worksheet time: 25mins
Name
Class
Date
1.
What is the primary goal of access control?
a)
To restrict all users from accessing resources
b)
To determine whether and how to admit a user into a trusted area
c)
To block all network traffic
d)
To create security loopholes
2.
Which of the following is an example of discretionary access control (DAC)?
a)
Users controlling access to their own files
b)
A centralized system assigning access privileges
c)
Access controlled strictly by a system administrator
d)
Access based on job roles
3.
Role-based access control (RBAC) assigns permissions based on:
a)
User preference
b)
Task completion
c)
Organizational roles
d)
Random allocation
4.
Which of these is NOT a factor used for authentication?
a)
Something the user knows
b)
Something the user has
c)
Something the user wants
d)
Something the user is
5.
What is the most common authentication method?
a)
Biometric scanning
b)
Passwords
c)
Smart cards
d)
Voice recognition
6.
What is the primary purpose of a firewall?
a)
To increase network speed
b)
To prevent unauthorized access to a network
c)
To allow free data exchange between networks
d)
To replace antivirus software
7.
Firewalls can be implemented as:
a)
Separate computer systems
b)
Software running on a router
c)
A dedicated network security device
d)
All of the above
8.
Which firewall processing mode examines only packet headers?
a)
Application gateway
b)
Circuit gateway
c)
Packet filtering
d)
Hybrid
9.
Which firewall type operates at the media access control (MAC) layer?
a)
Packet-filtering firewall
b)
Application-layer firewall
c)
Circuit gateway
d)
MAC layer firewall
10.
Which firewall model combines elements of different types?
a)
Static firewall
b)
Hybrid firewall
c)
Circuit gateway firewall
d)
Content filtering firewall
11.
What does a stateful inspection firewall do?
a)
Keeps track of network connections using a state table
b)
Blocks all incoming traffic by default
c)
Filters packets based only on MAC addresses
d)
Encrypts all outgoing data
12.
A proxy firewall operates at which OSI layer?
a)
Network layer
b)
Application layer
c)
Physical layer
d)
Transport layer
13.
What is the main function of a screened host firewall?
a)
To block all traffic
b)
To use a combination of a packet-filtering router and a proxy server
c)
To operate without requiring a router
d)
To filter only outbound traffic
14.
Which firewall architecture uses a bastion host as its primary line of defense?
a)
Screened subnet firewall
b)
Screened host firewall
c)
Packet-filtering firewall
d)
MAC-layer firewall
15.
The primary function of a DMZ (Demilitarized Zone) in a firewall architecture is:
a)
To store all firewall logs
b)
To isolate the internal network from external traffic
c)
To increase network speed
d)
To act as a secondary access control system
16.
A VPN is primarily used to:
a)
Speed up internet connections
b)
Create a secure connection over an insecure network
c)
Replace firewalls
d)
Prevent local network access
17.
Which VPN mode encrypts only the data portion of the packet?
a)
Transport mode
b)
Tunnel mode
c)
Hybrid mode
d)
Stateful mode
18.
What does a tunnel-mode VPN do?
a)
Encrypts only the data payload
b)
Encrypts the entire packet
c)
Encrypts only the headers
d)
Blocks incoming VPN connections
19.
Which protocol is commonly used for secure VPN connections?
a)
FTP
b)
HTTP
c)
IPsec
d)
SMTP
20.
Which of the following VPN types combines features of trusted and secure VPNs?
a)
Hybrid VPN
b)
Tunnel VPN
c)
Open VPN
d)
Dynamic VPN
21.
What is the main purpose of content filtering?
a)
Blocking harmful or unwanted content
b)
Speeding up internet access
c)
Allowing unrestricted browsing
d)
Improving firewall performance
22.
Which authentication system is designed to control remote access?
a)
RADIUS
b)
DHCP
c)
ARP
d)
DNS
23.
What is the purpose of a SOCKS proxy?
a)
To block all incoming requests
b)
To handle TCP traffic via a proxy server
c)
To create a firewall rule
d)
To encrypt wireless connections
24.
What does Kerberos use for authentication?
a)
Public key infrastructure
b)
Symmetric key encryption
c)
Biometric data
d)
Firewall rules
25.
What does a war dialer do?
a)
Cracks passwords
b)
Scans networks for open ports
c)
Dials random numbers to find open modems
d)
Filters malicious websites
26.
What does an access control list (ACL) do?
a)
Provides a list of active users in the system
b)
Specifies which users or systems can access specific resources
c)
Encrypts all network traffic
d)
Blocks all incoming and outgoing traffic
27.
Which access control model enforces security rules strictly based on data classification levels?
a)
Role-Based Access Control (RBAC)
b)
Mandatory Access Control (MAC)
c)
Discretionary Access Control (DAC)
d)
Task-Based Access Control (TBAC)
28.
Which of the following best describes a circuit-level gateway firewall?
a)
Filters traffic based on packet headers
b)
Operates at the transport layer to verify handshakes
c)
Inspects the full content of data packets
d)
Uses biometric authentication
29.
Which of the following is NOT a key function of firewalls?
a)
Blocking unauthorized access
b)
Monitoring network traffic
c)
Encrypting all transmitted data
d)
Filtering inbound and outbound packets
30.
What is the main security risk of a poorly configured firewall?
a)
It blocks all internet access
b)
It slows down the network
c)
It may allow unauthorized access to sensitive data
d)
It prevents VPN connections
31.
Firewalls prevent all cyberattacks.
a)
TRUE
b)
FALSE
32.
Role-based access control assigns permissions based on job function.
a)
TRUE
b)
FALSE
33.
A proxy firewall operates at the transport layer.
a)
TRUE
b)
FALSE
34.
Packet-filtering firewalls examine both packet headers and content.
a)
TRUE
b)
FALSE
35.
Stateful inspection keeps track of active connections.
a)
TRUE
b)
FALSE
36.
A DMZ is used to isolate critical servers from public access.
a)
TRUE
b)
FALSE
37.
VPNs are only used for remote work.
a)
TRUE
b)
FALSE
38.
IPsec is commonly used to secure VPN communications.
a)
TRUE
b)
FALSE
39.
RADIUS is a protocol for secure email transmission.
a)
TRUE
b)
FALSE
40.
Content filtering can help prevent employees from accessing social media.
a)
TRUE
b)
FALSE
41.
A war dialer is used to secure remote connections.
a)
TRUE
b)
FALSE
42.
Firewalls can be both software-based and hardware-based.
a)
TRUE
b)
FALSE
43.
Dynamic filtering firewalls update rules based on network activity.
a)
TRUE
b)
FALSE
44.
Kerberos is used for network authentication.
a)
TRUE
b)
FALSE
45.
Biometric authentication uses physical traits like fingerprints for identification.
a)
TRUE
b)
FALSE
46.
MAC layer firewalls operate at the network layer of the OSI model.
a)
TRUE
b)
FALSE
47.
Hybrid firewalls combine multiple firewall techniques.
a)
TRUE
b)
FALSE
48.
A screened host firewall requires two separate firewalls.
a)
TRUE
b)
FALSE
49.
VPN tunnel mode encrypts the entire data packet.
a)
TRUE
b)
FALSE
50.
Authentication verifies a user’s identity before granting access.
a)
TRUE
b)
FALSE
100 %
