Network Security Test Questions
Course Introduction
Network Security is a comprehensive study of the principles, technologies, and practices used to protect digital communication systems from threats and vulnerabilities. This course covers fundamental concepts such as cryptography, authentication, network protocols, and secure network design. Students will explore various security mechanisms including firewalls, intrusion detection/prevention systems, and virtual private networks (VPNs) to understand how to safeguard networks against attacks like malware, denial-of-service, and unauthorized access. Real-world case studies and hands-on labs reinforce concepts, preparing learners to assess and implement robust security solutions in organizational networks.
Recommended Textbook
Hands On Ethical Hacking and Network Defense 2nd Edition by Michael T. Simpson
Available Study Resources on Quizplus
13 Chapters
673 Verified Questions
673 Flashcards
Source URL: https://quizplus.com/study-set/2085 Page 2
Chapter 1: Ethical Hacking Overview
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41510
Sample Questions
Q1) Why is it hard for an ethical hacker to avoid breaking any laws?
Answer: Because the job of an ethical hacker is fairly new,the laws are constantly changing.Even though a company has hired you to test its network for vulnerabilities,be careful that you aren't breaking any laws for your state or country.If you're worried that one of your tests might slow down the network because of excessive bandwidth use,that concern should signal a red flag.The company might consider suing you for lost time or monies caused by this delay.
Q2) Those who break into systems to steal or destroy data are often referred to as ____________________.
Answer: crackers
Q3) In the context of penetration testing, what is the gray box model?
Answer: The gray box model is a hybrid of the white and black box models.In this model,the company gives a tester only partial information.For example,the tester might get information about which OSs are used,but not get any network diagrams.
Q4) Employees of a security company are protected under the company's ____________________ with the client.
Answer: contract
To view all questions and flashcards with answers, click on the resource link above. Page 3
Chapter 2: Tcpip Concepts Review
Available Study Resources on Quizplus for this Chatper
57 Verified Questions
57 Flashcards
Source URL: https://quizplus.com/quiz/41511
Sample Questions
Q1) the primary protocol used to communicate over the World Wide Web
A)FTP
B)SMTP
C)SNMP
D)SSH
E)HTTP
F)IRC
G)URG
H)SYN
I)PSH
Answer: E
Q2) The ____-layer protocols are the front ends to the lower-layer protocols in the TCP/IP stack.
A)Internet
B)Network
C)Transport
D)Application
Answer: D
Q3) The IP in TCP/IP stands for ____________________.
Answer: Internet Protocol
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Network and Computer Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41512
Sample Questions
Q1) worm that uses UDP port 8998 to contact the attacker's server
A)shell
B)W32/Sobig.F
C)Luckysploit
D)Ping of Death
E)KeyGhost
F)Melissa
G)Back Orifice
H)Slammer
I)Mytob
Answer: B
Q2) ____ are devices or computer programs that can be used to capture keystrokes on a computer.
A)Viruses
B)Keyloggers
C)Macro viruses
D)Firewalls
Answer: B
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Footprinting and Social Engineering
Available Study Resources on Quizplus for this Chatper
51 Verified Questions
51 Flashcards
Source URL: https://quizplus.com/quiz/41513
Sample Questions
Q1) The HTTP ____ method is the same as the GET method, but retrieves only the header information of an HTML document, not the document body.
A)CONNECT
B)PUT
C)POST
D)HEAD
Q2) What type of information is usually gathered by social engineering?
Q3) Server did not receive a timely response
A)HTTP 400 Bad Request
B)HTTP 403 Forbidden
C)HTTP 404 Not Found
D)HTTP 405 Method Not Allowed
E)HTTP 408 Request Timeout
F)HTTP 500 Internal Server Error
G)HTTP 502 Bad Gateway
H)HTTP 503 Service Unavailable
I)HTTP 504 Gateway Timeout
Q4) The ____________________ utility gives you information on a company's IP addresses and any other domains the company might be part of.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Port Scanning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41514
Sample Questions
Q1) A computer that receives a SYN packet from a remote computer responds to the packet with a(n) ____ packet if its port is open.
A)FIN
B)RST
C)SYN/ACK
D)ACK
Q2) Which ports should security professionals scan when doing a test? Why?
Q3) Nmap has a GUI version called ____________________ that makes it easier to work with some of the more complex options.
Q4) What is a UDP scan?
Q5) ____, an open-source fork of Nessus, functions much like a database server, performing complex queries while the client interfaces with the server to simplify reporting and configuration.
A)Unicornscan
B)NetScanTools
C)OpenVAS
D)Nmap
Q6) Why is port scanning useful for hackers?
Q7) What makes the OpenVAS tool unique?
Page 7
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Enumeration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41515
Sample Questions
Q1) A NetBIOS name does not need to be unique on a network.
A)True
B)False
Q2) What can be accomplished by typing "finger root" in *nix systems?
Q3) uses SUSE Linux as its OS
A)Windows 98
B)Windows 95
C)Windows Server 2003
D)Fedora Linux
E)Solaris
F)Windows XP Professional
G)Novell Open Enterprise Server
H)Windows 2000 Server/Professional
I)Windows NT 3.51 Server/Workstation
Q4) The open-source descendant of Nessus is called ____.
A)NW
B)WNessus
C)OpenVAS
D)WinNessus
Q5) What is enumeration?
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Programming for Security Professionals
Available Study Resources on Quizplus for this Chatper
53 Verified Questions
53 Flashcards
Source URL: https://quizplus.com/quiz/41516
Sample Questions
Q1) In Perl, comment lines begin with the ____ character(s).
A)%
B)//
C)#
D)$
Q2) The print command for Perl is almost identical to the ____ print command.
A)Java
B)C
C)PHP
D)Smalltalk
Q3) What is an algorithm? You may use an analogy to explain the concept.
Q4) ____ is a markup language rather than a programming language.
A)C
B)HTML
C)Perl
D)PHP
Q5) Structures called classes can be written in many ____________________ languages (Java, Object COBOL, or Perl).
Q6) The HTML ____________________ tag formats text as a level 1 heading.
Q7) What is a dangerous thing about programming in the C language?
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Desktop and Server Os Vulnerabilities
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41517
Sample Questions
Q1) Rootkits containing Trojan binary programs ready to be installed are more dangerous than typical Trojan programs.
A)True
B)False
Q2) to harden Microsoft systems, you should rename this account
A)antivirus software
B)port 389
C)Guest
D)port 53
E)port 443
F)port 80
G)unused services
H)Administrator
I)blank
Q3) RPC stands for ________________________.
Q4) What is the Common Internet File System (CIFS) protocol?
Q5) Why should you review logs regularly? How should you accomplish this task?
Q6) The MBSA can check for missing security updates.
A)True
B)False
Page 10
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Embedded Operating Systems: The Hidden Threat
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41518
Sample Questions
Q1) used for equipment monitoring in large industries
A)Windows Embedded Standard
B)Green Hill Software
C)RTLinux
D)VxWorks
E)RTEMS
F)embedded operating system
G)Quebec
H)QNX
I)SCADA
Q2) For sensitive embedded systems that need only a fraction of the features offered by other kernels, the risk of vulnerabilities might outweigh the benefits, and a(n) ____ kernel might be most suitable.
A)micro
B)proprietary
C)monolithic
D)macro
Q3) What principle can be used to help reduce insider threats to an organization?
Q4) Why might attackers use social engineering techniques to masquerade as support technicians?
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Hacking Web Servers
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41519
Sample Questions
Q1) OLE DB relies on connection strings that enable the application to access the data stored on an external device.
A)True
B)False
Q2) CFML stands for ______________________________.
Q3) SQL ____ involves the attacker supplying SQL commands when prompted to fill in a Web application field.
A)redirection
B)spoofing
C)injection
D)insertion
Q4) ColdFusion uses its own proprietary tags written in ____.
A)XML
B)DHTML
C)PHP
D)CFML
Q5) As a security professional, what should you do after identifying that a Web server you are testing is using PHP?
Q6) What is ODBC used for?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Hacking Wireless Networks
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41520
Sample Questions
Q1) One of the default SSIDs used by D-Link is ____.
A)Tsunami
B)Wireless
C)default
D)linksys
Q2) A(n) ______________________________ is the name used to identify the wireless local area network (WLAN), much the same way a workgroup is used on a Windows network.
Q3) data is spread across a large-frequency bandwidth instead of traveling across just one frequency band
A)802.16
B)spread spectrum
C)802.11b
D)narrowband
E)802.20
F)infrared (IR)
G)802.1X
H)Bluetooth
I)HiperLAN2
Q4) What is WEP? Is it a good way to secure wireless networks?
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Cryptography
Available Study Resources on Quizplus for this Chatper
58 Verified Questions
58 Flashcards
Source URL: https://quizplus.com/quiz/41521
Sample Questions
Q1) ____ is used for encryption as well as digital signatures and key exchange.
A)Diffie-Hellman
B)ECC
C)Blowfish
D)AES
Q2) uses two keys, one to encrypt and one to decrypt data
A)asymmetric encryption
B)collision free
C)symmetric encryption
D)certificate
E)hashing
F)collision
G)stream cipher
H)message digest
I)block cipher
Q3) Cryptography is the process of converting plaintext, which is readable text, into ____________________, which is unreadable or encrypted text.
Q4) Symmetric algorithms use two keys that are mathematically related.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Network Protection Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41522
Sample Questions
Q1) handles each packet on an individual basis and are not resistant to spoofing or DoS attacks
A)stateful packet filter
B)firewall
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)enable mode
H)ASA
I)privileged mode
Q2) ____ access lists can restrict IP traffic entering or leaving a router's interface based on only one criterion: source IP address.
A)Standard IP
B)Extended IP
C)IPX
D)Access control
Q3) A standard IP access list is restricted to source IP addresses.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 15