IT – D315 ITEC 2112
Network & Security Foundations
3.0 Credits
Objective Assessment Review (Qns &
Ans)
2025
©2025
, Question 1:
Which type of firewall extends traditional packet filtering by
incorporating deep packet inspection, application awareness, and
integrated threat prevention?
- A. Stateful Inspection Firewall
- B. Next-Generation Firewall (NGFW)
- C. Proxy Firewall
- D. Circuit-Level Gateway
Correct ANS: B. Next-Generation Firewall (NGFW)
Rationale:
NGFWs provide advanced security by inspecting traffic up to the
application level and integrating functions such as intrusion prevention
and identification of malicious content, which go far beyond traditional
filtering methods.
---
Question 2:
In network security, the principle of "defense in depth" is best described
as:
- A. Relying solely on a perimeter firewall
- B. Implementing multiple layers of security controls throughout the
network
- C. Using a single, robust encryption protocol for all communications
- D. Isolating critical systems in a separate physical area
Correct ANS: B. Implementing multiple layers of security controls
throughout the network
Rationale:
Defense in depth involves applying several protective measures (physical,
technical, and administrative) so that if one layer fails, others remain to
mitigate the threat.
©2025
, ---
Question 3:
Which protocol is typically used to secure communications over the
Internet by providing encryption, authentication, and data integrity?
- A. HTTP/2
- B. FTP
- C. HTTPS (using TLS)
- D. Telnet
Correct ANS: C. HTTPS (using TLS)
Rationale:
HTTPS utilizes TLS (Transport Layer Security) to encrypt data in transit,
authenticate the communicating parties, and ensure data integrity, thus
providing secure communications over untrusted networks.
---
Question 4:
A network uses IPsec to secure data transmission between two sites.
IPsec operates primarily at which layer of the OSI model?
- A. Application
- B. Transport
- C. Network
- D. Data Link
Correct ANS: C. Network
Rationale:
IPsec operates at the Network layer, providing encryption,
authentication, and integrity for IP packets, making it a fundamental
technology for establishing secure Virtual Private Networks (VPNs).
---
©2025
Network & Security Foundations
3.0 Credits
Objective Assessment Review (Qns &
Ans)
2025
©2025
, Question 1:
Which type of firewall extends traditional packet filtering by
incorporating deep packet inspection, application awareness, and
integrated threat prevention?
- A. Stateful Inspection Firewall
- B. Next-Generation Firewall (NGFW)
- C. Proxy Firewall
- D. Circuit-Level Gateway
Correct ANS: B. Next-Generation Firewall (NGFW)
Rationale:
NGFWs provide advanced security by inspecting traffic up to the
application level and integrating functions such as intrusion prevention
and identification of malicious content, which go far beyond traditional
filtering methods.
---
Question 2:
In network security, the principle of "defense in depth" is best described
as:
- A. Relying solely on a perimeter firewall
- B. Implementing multiple layers of security controls throughout the
network
- C. Using a single, robust encryption protocol for all communications
- D. Isolating critical systems in a separate physical area
Correct ANS: B. Implementing multiple layers of security controls
throughout the network
Rationale:
Defense in depth involves applying several protective measures (physical,
technical, and administrative) so that if one layer fails, others remain to
mitigate the threat.
©2025
, ---
Question 3:
Which protocol is typically used to secure communications over the
Internet by providing encryption, authentication, and data integrity?
- A. HTTP/2
- B. FTP
- C. HTTPS (using TLS)
- D. Telnet
Correct ANS: C. HTTPS (using TLS)
Rationale:
HTTPS utilizes TLS (Transport Layer Security) to encrypt data in transit,
authenticate the communicating parties, and ensure data integrity, thus
providing secure communications over untrusted networks.
---
Question 4:
A network uses IPsec to secure data transmission between two sites.
IPsec operates primarily at which layer of the OSI model?
- A. Application
- B. Transport
- C. Network
- D. Data Link
Correct ANS: C. Network
Rationale:
IPsec operates at the Network layer, providing encryption,
authentication, and integrity for IP packets, making it a fundamental
technology for establishing secure Virtual Private Networks (VPNs).
---
©2025
