Question Bank

Reusable questions for assessments — with shuffling and random draw.

Network Security Basics

Core networking and defence questions reused across cohorts.

8 questions   0 scenario-based   14 total points   Pen Testing Fundamentals

Multiple choiceEasy1 pt

Which layer of the OSI model does a firewall that filters by IP address primarily operate at?

  • · Physical
  • ✓ Network
  • · Session
  • · Application
#osi #firewall
Multiple choiceEasy1 pt

Which protocol provides encrypted remote administration of a server?

  • · Telnet
  • · FTP
  • ✓ SSH
  • · HTTP
#protocols
True / FalseMedium1 pt

An IDS actively blocks malicious traffic by default.

  • · True
  • ✓ False
#ids
Short answerEasy2 pts

What does the acronym “DMZ” stand for in network security?

Rule: Any of 2 accepted answers (ignores case)
#architecture
Short answerEasy1 pt

Name the default TCP port used by HTTPS.

Rule: Number 443 ± 0
#ports
Short answerHard3 pts

Write a command (with any options) that scans the top 100 ports of 192.168.1.10 using Nmap.

Rule: Pattern /^nmap\s+.*(-F|--top-ports\s+100).*192\.168\.1\.10\s*$/i
#nmap
Multiple selectMedium2 pts

Select all controls that help mitigate a brute-force login attack.

  • ✓ Account lockout policy
  • ✓ Multi-factor authentication
  • · Disabling HTTPS
  • ✓ Rate limiting
#authentication
Short answerMedium3 pts

Explain in one sentence why defence-in-depth is preferred over a single perimeter firewall.

Rule: Keywords (min 2): layer, multiple, single point
#architecture
All screens