Sample questions
Security Network SecurityDifficulty 1
Which security property does TLS primarily provide when protecting data in transit between a client and a server?
- aGuaranteed message delivery even if the network fails
- bConfidentiality and integrity with authentication✓
- cAutomatic removal of malware from uploaded files
- dPermanent storage encryption on the server disk
Explanation:TLS encrypts the channel (confidentiality), detects tampering (integrity), and lets the client verify the server's identity via certificates (authentication). It does not guarantee delivery, scan for malware, or encrypt data at rest.
Security Network SecurityDifficulty 1
In a TLS handshake, what is the main purpose of the server presenting a certificate to the client?
- aTo compress the traffic for faster transmission
- bTo store the client's session data for later use
- cTo verify the server's identity to the client✓
- dTo negotiate which programming language the API uses
Explanation:The certificate, issued and signed by a trusted authority, binds a public key to an identity so the client can authenticate the server before trusting it with data. It has nothing to do with compression, session storage, or language negotiation.
Security Network SecurityDifficulty 1
What is a man-in-the-middle (MITM) attack, conceptually?
- aAn attacker secretly relays communication between two parties who trust each other✓
- bAn attacker floods a server with so much traffic it cannot respond to legitimate users
- cAn attacker guesses a user's password by trying common values repeatedly
- dAn attacker tricks a user into installing malicious software via email
Explanation:MITM is defined by interception/relay of communication that both endpoints believe is direct and private. Flooding traffic describes DoS, password guessing describes brute force, and tricking via email describes phishing/malware delivery — different attack categories.
Security Network SecurityDifficulty 2
A user connects to public Wi-Fi and loads a website over plain HTTP. Why is this connection particularly exposed to a MITM attack?
- aPublic Wi-Fi routers always block encrypted traffic by policy
- bHTTP requests are limited to a smaller maximum packet size than HTTPS
- cThe website's DNS record expires faster on public networks
- dTraffic travels unencrypted and can be read or modified by others✓
Explanation:Without TLS, HTTP traffic is sent in cleartext, so another device on the same shared network (or a rogue access point) can passively read it or actively inject/alter content. The other options describe fabricated mechanisms with no basis in how Wi-Fi or HTTP works.
Security Network SecurityDifficulty 2
What is the core idea behind network segmentation as a security control?
- aSplitting a single database table into multiple tables for faster queries
- bDividing a network into isolated zones so a breach is contained✓
- cCompressing network traffic to reduce bandwidth usage
- dAssigning a unique username to every employee in the company
Explanation:Segmentation limits the blast radius of a compromise by placing boundaries (e.g., separate subnets/VLANs with controlled access between them) between groups of systems. It is not about database design, bandwidth compression, or username assignment.
Security Network SecurityDifficulty 1
What does "defense-in-depth" mean as a security principle?
- aRelying on a single very strong control instead of multiple weaker ones
- bHiring more security staff to monitor systems around the clock
- cLayering multiple independent security controls for redundancy✓
- dEncrypting data at every possible layer regardless of performance cost
Explanation:Defense-in-depth is about layered, independent controls (e.g., firewall + segmentation + authentication + monitoring) so a single failure does not lead to full compromise. It is not about relying on one strong control, staffing levels, or blanket encryption everywhere.