MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the main purpose of network segmentation enforcement in an enterprise environment?
   a. Improve network performance only
   b. Increase hardware usage
   c. Limit and control data flows between zones
   d. Significantly decrease overall network availability
   Answer: c
   tigera+2
2. Which network technology is commonly used to logically segment broadcast domains within a single switch?
   a. VPN
   b. VLAN
   c. NAT
   d. DMZ
   Answer: b
   testbook+1
3. What primary security advantage does network segmentation offer?
   a. Simplifies software upgrading
   b. Prevents lateral movement during attacks
   c. Increases cable complexity
   d. Reduces the number of IP addresses needed
   Answer: b
   trustedinstitute+1
4. Which of the following enforces segmentation at the workload level in virtualized data centers?
   a. Microsegmentation
   b. Port scanning
   c. Subnetting
   d. Packet sniffing
   Answer: a
   tigera
5. Which method enforces traffic rules and boundaries between network segments and the internet?
   a. Router reset
   b. DNS forwarding
   c. Firewall policy
   d. Simple Mail Transfer
   Answer: c
   paloaltonetworks+1
6. A company wants to isolate its accounting and HR networks while using the same infrastructure. Which approach is most suitable?
   a. Single flat subnet
   b. VLAN segmentation
   c. MAC filtering only
   d. Shared wireless SSID
   Answer: b
   trustedinstitute
7. Which device type is most effective at strictly enforcing segmentation between network zones?
   a. Switch
   b. Firewall
   c. Repeater
   d. Hub
   Answer: b
   tigera+1
8. Which best describes a DMZ (demilitarized zone) in network segmentation?
   a. A segment inaccessible from the internet
   b. A public-facing network zone separated from internal private zones
   c. A secure wireless zone
   d. The same as a VPN
   Answer: b
   trustedinstitute+1
9. Which of the following limits the impact of a breached host on neighboring segments?
   a. Single switch topology
   b. Flat addressing
   c. Proper access control lists (ACLs)
   d. Full-mesh connectivity everywhere
   Answer: c
   strongdm+1
10. How can organizations ensure that segmentation rules remain effective over time?
    a. Manual address assignment
    b. Regular audits and monitoring
    c. Allowing unrestricted access
    d. Overlapping VLANs
    Answer: b
    strongdm+1
11. In a segmented network, which scenario is most likely to indicate a segmentation failure?
    a. Authentication request between isolated zones succeeds unexpectedly
    b. User access logs are available
    c. DHCP leases are renewed periodically
    d. Devices in the same segment communicate
    Answer: a
    strongdm+1
12. Why is microsegmentation particularly useful in cloud environments?
    a. Restricts access at a granular, application or workload level
    b. Reduces costs of physical cabling
    c. Requires no policy planning
    d. Simplifies user onboarding
    Answer: a
    automationcommunity+1
13. Which approach separates guests from employees on a company Wi-Fi?
    a. Shared SSID
    b. DMZ
    c. VLANs or separate SSIDs
    d. Single DHCP scope
    Answer: c
    tigera
14. Which network component enforces traffic filtering between subnets or segments?
    a. Hub
    b. Firewall
    c. Patch panel
    d. Access point
    Answer: b
    trustedinstitute+1
15. Access Control Lists (ACLs) in network segmentation are used to:
    a. Block or permit traffic based on rules
    b. Reassign IPs on reboot
    c. Improve cable throughput
    d. Force NAT on all outgoing packets
    Answer: a
    paloaltonetworks+1
16. Which regulatory standard frequently requires network segmentation for sensitive data?
    a. PCI DSS
    b. SMTP
    c. SSL
    d. DNSSEC
    Answer: a
    tigera
17. What is one outcome of proper network segmentation in an attack scenario?
    a. Attack stays confined to a single segment
    b. Attack spreads to unrelated systems
    c. All firewalls are bypassed
    d. Device logs are erased
    Answer: a
    tufin+1
18. Why should organizations restrict unnecessary communication between network segments?
    a. To simplify routing tables
    b. To prevent malware or attackers moving laterally
    c. To support legacy hardware
    d. To reduce wireless bandwidth
    Answer: b
    trustedinstitute+1
19. Which principle is critical for enforcing access between segments?
    a. Least privilege
    b. Open access
    c. Hardware uniformity
    d. Single sign-on only
    Answer: a
    strongdm+1
20. What is a “security zone” in network segmentation?
    a. A single unmanaged switch
    b. An area with distinct access control and policies
    c. A collection of unrelated office devices
    d. The entire company network
    Answer: b
    tigera+1
21. VLAN tagging is implemented under which IEEE standard?
    a. 802.11
    b. 802.1Q
    c. 802.3af
    d. 802.5
    Answer: b
    trustedinstitute+1
22. Which segment should administrative management devices reside in?
    a. General user segment
    b. Public guest segment
    c. Dedicated administrative segment
    d. Unsegmented network
    Answer: c
    tigera
23. The process of dividing a flat network into multiple segments primarily helps to:
    a. Improve security and manageability
    b. Increase collision domains
    c. Disable device monitoring
    d. Enforce wireless roaming
    Answer: a
    trustedinstitute+1
24. Overlay networks such as VXLAN are used for segmentation in:
    a. Cloud and virtualized environments
    b. Only home routers
    c. Legacy bus networks
    d. Infrared networks
    Answer: a
    tigera
25. What does “east-west traffic” refer to in segmentation contexts?
    a. Traffic between devices or segments inside the organization
    b. Traffic from internet to company servers
    c. External VPN entry
    d. Mobile device roaming
    Answer: a
    tigera
26. How do firewalls contribute to segmentation enforcement?
    a. By permitting or denying traffic between segments via rules
    b. By connecting unmanaged switches
    c. By extending broadcast domains
    d. By providing DHCP options
    Answer: a
    paloaltonetworks+1
27. In microsegmentation, policy rules are usually based on:
    a. Application or workload attributes
    b. MAC addresses only
    c. Building floor layout
    d. Device age
    Answer: a
    tigera
28. What technique is used to ensure only managed devices join a protected network zone?
    a. Network Access Control (NAC)
    b. ARP poisoning
    c. Dynamic DNS
    d. Port mirroring
    Answer: a
    strongdm+1
29. In the context of network segmentation, ‘least privilege’ controls should be:
    a. Applied at all enforcement boundaries
    b. Ignored for speed
    c. Used sporadically
    d. Replaced by universal access
    Answer: a
    strongdm
30. A flat network topology is often discouraged because:
    a. It enables easier lateral attacks
    b. It simplifies auditing
    c. It decreases available bandwidth
    d. It increases password security
    Answer: a
    strongdm+1
31. Network segmentation helps mitigate the risk associated with:
    a. Internal threats and data breaches
    b. Hardware purchases
    c. Software licensing issues
    d. Power outages
    Answer: a
    automationcommunity+1
32. In large networks, audit and monitoring of segment traffic should be:
    a. Regular and automated
    b. Only manual
    c. Delayed until after incidents
    d. Completely outsourced
    Answer: a
    strongdm+1
33. What challenge requires careful planning in network segmentation?
    a. Mapping application and data interdependencies
    b. Implementing Wi-Fi upgrades
    c. Assigning hostnames
    d. Changing keyboard layouts
    Answer: a
    tigera
34. Segmentation reduces what auditing and compliance burden?
    a. Audit scope for regulated assets
    b. Number of users in directory
    c. Costs of rack space
    d. Printer maintenance cycles
    Answer: a
    tigera
35. Which is a regulatory-mandated best practice for payment card data isolation?
    a. Isolate cardholder data with strict segmentation
    b. Use single shared network
    c. Rely only on firewalls
    d. Route POS terminals over guest Wi-Fi
    Answer: a
    tigera
36. Which role is responsible for regular review of segmentation policies?
    a. IT security administration
    b. All employees
    c. Network hardware vendors
    d. Only third-party consultants
    Answer: a
    strongdm+1
37. What is the main disadvantage of over-segmenting a network?
    a. Increased operational complexity
    b. Reduced security
    c. Lack of user authentication
    d. Faster Wi-Fi speeds
    Answer: a
    strongdm+1
38. What is a common sign of poor segmentation enforcement?
    a. Unauthorized lateral movement between zones
    b. Fast application performance
    c. Encrypted backup traffic
    d. Routine DHCP lease renewal
    Answer: a
    automationcommunity+1
39. What is the best first step in a network segmentation project?
    a. Asset inventory and classification
    b. Install new switches
    c. Buy more IP addresses
    d. Enable bridge mode everywhere
    Answer: a
    tigera
40. What is the main function of a guest VLAN on corporate networks?
    a. Provide isolated internet access for visitors
    b. Store backup media
    c. Host domain controllers
    d. Enable trunk port scanning
    Answer: a
    tigera
41. What should the segmentation policy for IoT devices do?
    a. Restrict them to their own segment with strict inter-segment controls
    b. Place them in the admin segment
    c. Allow full access to core business servers
    d. Merge segments for cost reduction
    Answer: a
    trustedinstitute+1
42. Why is segmentation enforcement via firewall typically preferred over segmentation by switch alone?
    a. Firewalls add rule-based control and inspection
    b. Switches encrypt all traffic
    c. Firewalls broadcast traffic
    d. Switches block all ARP requests
    Answer: a
    trustedinstitute+1
43. Which segmentation failure can allow an attacker full access across the network?
    a. Insufficient enforcement at control points
    b. Strong password policies only
    c. Frequent device updates
    d. Load balanced web servers
    Answer: a
    strongdm+1
44. A “regulatory data zone” is used in segmentation to:
    a. Isolate and protect regulated or sensitive data
    b. Store generic log files
    c. Provide open internet to the public
    d. House test machines
    Answer: a
    tigera
45. Which tool best validates effective segmentation enforcement?
    a. Network penetration testing
    b. DNS lookup
    c. Regular server rebooting
    d. ARP scan
    Answer: a
    strongdm+1
46. Which concept is defined as minimum access necessary for effective operations?
    a. Least privilege
    b. Full mesh
    c. Flat segmentation
    d. Role confusion
    Answer: a
    strongdm+1
47. How can segmentation help when third-party vendors need remote access?
    a. Provide vendor-specific portals to only necessary segments
    b. Grant them access to all company systems
    c. Disable segmentation during remote support
    d. Route through public Wi-Fi
    Answer: a
    strongdm
48. Which network type is particularly at risk without proper segmentation?
    a. Flat legacy networks
    b. Point-to-point leased lines
    c. Standalone air-gapped hosts
    d. Bluetooth sensor mesh
    Answer: a
    strongdm+1
49. What is the effect of using only MAC filtering for segmentation?
    a. Weak enforcement, vulnerable to MAC spoofing
    b. Strong segmentation
    c. Hardware-based VLAN isolation
    d. Logical firewall enforcement
    Answer: a
    trustedinstitute+1
50. In segmentation, what does effective boundary enforcement rely on?
    a. Combination of VLAN, ACL, firewall, and auditing
    b. Only Wi-Fi SSIDs
    c. Redundant cabling
    d. Removing device authentication
    Answer: a

1. https://www.tigera.io/learn/guides/microsegmentation/network-segmentation-nist/
2. https://trustedinstitute.com/concept/comptia-network+/network-security/network-segmentation/
3. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
4. https://testbook.com/objective-questions/mcq-on-segmentation–5eea6a1539140f30f369f31e
5. https://www.strongdm.com/blog/network-segmentation
6. https://www.paloaltonetworks.com/cyberpedia/what-is-network-segmentation
7. https://www.tufin.com/blog/network-segmentation-secure-your-network
8. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
9. https://www.janbasktraining.com/interview-questions/network-segmentation-questions-and-answers/
10. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
11. https://www.scribd.com/document/515731318/Network-Security-Multiple-Choice-Questions-and-Answers-with-MCQ
12. https://itexamanswers.net/9-4-3-ipv4-addressing-quiz-answers.html
13. https://www.igmguru.com/blog/cyber-security-mcqs
14. https://www.upguard.com/blog/network-segmentation-best-practices
15. https://study.com/academy/practice/quiz-worksheet-network-segmentation-ip-subnetting.html
16. https://www.interviewbit.com/computer-network-mcq/
17. https://itexamanswers.net/11-4-4-check-your-understanding-network-segmentation-answers.html
18. https://reck.ac.in/wp-content/uploads/2023/04/DCN_MCQ-Ashwini-.pdf
19. https://www.sanfoundry.com/computer-network-questions-answers/
20. https://www.studocu.com/in/document/maa-shakumbhari-university/bachelor-of-computer-application/ns-mcq-network-security-multiple-choice-questions-for-exam-prep/129450495