SANS SEC401 Module Quizzes UPDATED ACTUAL Exam Questions and CORRECT Answers

SANS SEC401 MODULE QUIZZES UPDATED
ACTUAL EXAM QUESTIONS AND CORRECT
ANSWERS


SANS SEC401 Security Essentials — Comprehensive Practice
Exam
Original Exam-Style Questions + Correct Answers
Section 1: Networking Fundamentals
Question 1
Which OSI model layer is responsible for logical addressing and
routing packets between networks?
A. Data Link
B. Network
C. Transport
D. Session
Correct Answer: B. Network
Explanation:
The Network layer (Layer 3) handles IP addressing and routing
decisions between different networks.


Question 2
What is the primary purpose of TCP three-way handshake?

,A. Encrypt network traffic
B. Establish a reliable TCP session
C. Assign an IP address
D. Resolve DNS names
Correct Answer: B. Establish a reliable TCP session
Explanation:
TCP uses SYN, SYN-ACK, and ACK messages to establish a
connection before transmitting data.


Question 3
A switch primarily operates at which OSI layer?
A. Layer 1
B. Layer 2
C. Layer 4
D. Layer 7
Correct Answer: B. Layer 2
Explanation:
Traditional switches forward frames using MAC addresses at the
Data Link layer.


Section 2: Network Security
Question 4
Which security device typically examines traffic at the application
layer and can block specific HTTP requests?

, A. Hub
B. Layer 2 switch
C. Web Application Firewall
D. Router
Correct Answer: C. Web Application Firewall


Question 5
A company separates its public web servers from internal
databases using a security zone. What is this architecture called?
A. VLAN hopping
B. DMZ
C. NAT
D. VPN tunnel
Correct Answer: B. DMZ
Explanation:
A DMZ isolates publicly accessible systems from internal
networks.


Question 6
Which attack attempts to overwhelm a service by sending
massive amounts of traffic?
A. SQL injection
B. Buffer overflow