MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. In cloud networking, what defines a public subnet?
   a. Subnets without access to any external network
   b. Subnets that allow instances to communicate directly with the internet
   c. Subnets restricted by firewalls from internet access
   d. Subnets only used for internal database communications
   Answer: bgeeksforgeeks+1​
2. Which AWS component must be associated with a public subnet to enable outbound internet access?
   a. NAT Gateway
   b. Internet Gateway
   c. Route Table Association
   d. VPN Connection
   Answer: baws.amazon+1​
3. The primary distinguishing factor between public and private subnets is the presence of:
   a. Static Routes
   b. Internet Gateway Association
   c. DNS Records
   d. Access Control Lists
   Answer: bdev+1​
4. Public subnets in cloud environments typically host:
   a. Database servers
   b. Internal-only applications
   c. Web servers and load balancers
   d. File system replication nodes
   Answer: cgeeksforgeeks+1​
5. In AWS, a route table entry for public subnets should point to which destination?
   a. 192.168.0.0/16
   b. 0.0.0.0/0
   c. 10.0.0.0/8
   d. 172.16.0.0/12
   Answer: baws.amazon+1​
6. Which IP addressing scheme is generally used for public subnet instances to reach the internet?
   a. Private IP
   b. Elastic IP
   c. Loopback IP
   d. Virtual IP
   Answer: bdev+1​
7. What type of gateway is optional but often used when private subnets need limited internet access?
   a. NAT Gateway
   b. VPN Gateway
   c. Direct Connect Gateway
   d. Transit Gateway
   Answer: ageeksforgeeks+1​
8. In a VPC, which service typically resides in a public subnet?
   a. Application servers
   b. Database nodes
   c. Web servers
   d. Backup servers
   Answer: cdev+1​
9. Why are public subnets vital in cloud infrastructure?
   a. Enable SSH tunnels for internal machines
   b. Allow external users to access hosted services
   c. Secure databases from the internet
   d. Eliminate need for NAT Gateways
   Answer: bgeeksforgeeks+1​
10. What firewall concept is most relevant in public subnet configuration?
    a. Stateless Inspection
    b. Stateful Inspection using Security Groups and NACLs
    c. Deep Packet Inspection
    d. Endpoint Security
    Answer: bnordlayer+1​
11. Instances in a public subnet typically need which setting enabled to receive internet traffic?
    a. Source/Destination Check disabled
    b. Public IPv4 address assigned
    c. DNS resolution disabled
    d. Access Control turned off
    Answer: baws.amazon+1​
12. How are public subnets commonly secured from external threats?
    a. Limiting public gateway traffic using NACLs
    b. Removing route table entries
    c. Disabling the Internet Gateway
    d. Allocating fewer IP ranges
    Answer: anordlayer+1​
13. In cybersecurity, exposing assets in a public subnet increases:
    a. Lateral movement
    b. Attack surface area
    c. Load balancing efficiency
    d. Network availability
    Answer: bnordlayer+1​
14. Which AWS component routes traffic between subnets and the internet?
    a. NACL
    b. Internet Gateway
    c. Security Group
    d. Load Balancer
    Answer: baws.amazon+1​
15. The CIDR block for a typical public subnet often lies within a:
    a. 10.0.0.0/8
    b. 10.0.x.0/24
    c. 100.64.0.0/10
    d. 198.51.100.0/24
    Answer: bdev+1​
16. For a public subnet, the route to the Internet Gateway is configured in:
    a. Route Table
    b. Network ACL
    c. Security Group
    d. DNS Resolver
    Answer: ageeksforgeeks+1​
17. Security groups associated with public subnets should typically allow inbound traffic on:
    a. Port 1433
    b. Port 22 and 80/443
    c. Port 21
    d. Port 3306
    Answer: bnordlayer+1​
18. Public subnets primarily operate in which layer of OSI model?
    a. Application Layer
    b. Network Layer
    c. Transport Layer
    d. Presentation Layer
    Answer: bcloudflare+1​
19. Which feature distinguishes a public subnet from an isolated subnet?
    a. VPC Peering
    b. Internet connectivity through IGW
    c. NAT Gateway Access
    d. Static Routing
    Answer: bdev+1​
20. What is a significant risk of misconfigured public subnets?
    a. Denial-of-Service from internal nodes
    b. Direct unauthorized internet access to sensitive systems
    c. Overlapping IP blocks
    d. Route hijacking in private networks
    Answer: bnordlayer+1​
21. Which security principle is most affected by exposure via public subnets?
    a. Confidentiality
    b. Integrity
    c. Availability
    d. Redundancy
    Answer: ancsc+1​
22. Which default AWS routing rule turns a subnet public?
    a. 0.0.0.0/0 -> igw-id
    b. 10.0.0.0/16 -> local
    c. 172.31.0.0/12 -> nat-id
    d. ::/0 -> nat-id
    Answer: aaws.amazon+1​
23. In hybrid architectures, placing DMZ components in a public subnet helps:
    a. Reduce latency between databases
    b. Isolate public-facing services from private systems
    c. Merge public and private systems
    d. Encrypt backend services
    Answer: bnordlayer+1​
24. Network ACLs in public subnets are considered:
    a. Stateless security filters
    b. Stateful security filters
    c. Application-level firewalls
    d. Identity-based rules
    Answer: adev+1​
25. Which statement correctly identifies public subnet usage?
    a. Used for backend servers needing internet isolation
    b. Used for web servers that require global accessibility
    c. Mainly for offline backups
    d. Only for internal DNS mapping
    Answer: bgeeksforgeeks+1​
26. Public subnets in Azure are typically connected via:
    a. Virtual Network Gateways
    b. Public IP and routing to Internet Gateway equivalent
    c. Private Link endpoints
    d. ExpressRoute
    Answer: baws.amazon+1​
27. In AWS, which networking rule applies specifically to instances in public subnets?
    a. They must use IPv6 exclusively
    b. Must have an IGW route and public IP
    c. Cannot attach ENIs
    d. Must disable DHCP
    Answer: baws.amazon+1​
28. Which kind of data should never reside permanently in a public subnet?
    a. Configuration files
    b. Sensitive personal data
    c. Static website assets
    d. Monitoring scripts
    Answer: bncsc+1​
29. Security groups act at which level of protection in public subnets?
    a. Network Level
    b. Instance Level
    c. VPC Level
    d. AZ Level
    Answer: bnordlayer+1​
30. A well-architected network places public-facing components in:
    a. Isolated Subnet
    b. Private Subnet
    c. Public Subnet
    d. Local Network
    Answer: cgeeksforgeeks+1​
31. Public subnets contribute primarily to network:
    a. Segmentation
    b. Redundancy
    c. External accessibility
    d. Database replication
    Answer: cdev+1​
32. Which AWS feature allows inbound HTTP requests to reach instances in a public subnet?
    a. Route 53
    b. Load Balancer in public subnet
    c. NAT instance
    d. VPC Endpoint
    Answer: bgeeksforgeeks+1​
33. NACL inbound rules for public subnets often include which default setting?
    a. Allow SSH (22) and HTTP/S (80/443)
    b. Block all inbound ports
    c. Allow only private IPs
    d. Enable ICMP only
    Answer: anordlayer+1​
34. Misconfigured route tables in public subnets often lead to:
    a. Unreachable internet services
    b. Faster internal routing
    c. Encrypted tunnels only
    d. Denied local communications
    Answer: adev+1​
35. In cloud deployments, a public subnet provides entry points for:
    a. Database connections
    b. Web and API traffic
    c. Storage replication
    d. Log aggregation
    Answer: bgeeksforgeeks+1​
36. The subnet mask choice in a public subnet determines:
    a. Encryption level
    b. Number of available host IPs
    c. Security strength
    d. Gateway location
    Answer: bgeeksforgeeks+1​
37. Public subnets can host a NAT Gateway to enable:
    a. Internet access for private subnets
    b. Encrypted data exchanges between IGWs
    c. Load balancing between AZs
    d. IPv6 translation
    Answer: aaws.amazon+1​
38. Which configuration ensures scalability for web applications in public subnets?
    a. Elastic Load Balancing
    b. Secondary DNS
    c. Static IP assignment
    d. Manual scaling
    Answer: adev+1​
39. Security posture for public subnets is strengthened by:
    a. Restricting inbound ports via NACLs
    b. Opening default ports for all IPs
    c. Removing gateway routes
    d. Disabling SG rules
    Answer: anordlayer+1​
40. Regulatory compliance requires sensitive workloads be placed in:
    a. Public Subnets
    b. Private or Isolated Subnets
    c. Default Subnets
    d. Temporary Subnets
    Answer: bnordlayer+1​
41. The CIDR block in a public subnet typically ranges within:
    a. RFC 1918 private IP blocks
    b. Public IP range directly assigned by ISP
    c. IPv6 unique local addresses
    d. Reserved multicast addresses
    Answer: ageeksforgeeks+1​
42. Which AWS command-line tool allows subnet configuration management?
    a. aws subnet-config
    b. aws ec2 create-subnet
    c. aws network-ingress
    d. aws route management
    Answer: baws.amazon+1​
43. The concept of “defense-in-depth” in public subnet design includes:
    a. Layering NACLs and security groups
    b. Relying only on VPC firewalls
    c. Using only encryption
    d. Blocking ping responses
    Answer: ancsc+1​
44. Logging traffic from public subnets can be achieved using:
    a. Flow Logs
    b. Port Mirroring
    c. DirectConnect Logs
    d. VPC Peering Watch Logs
    Answer: aaws.amazon+1​
45. Misconfigured open ports on public subnets may lead to:
    a. DDoS or intrusion attacks
    b. Higher latency
    c. Reduced throughput
    d. Bandwidth throttling
    Answer: ageeksforgeeks+1​
46. Firewall mismanagement in public subnets impacts which principle of CIA triad?
    a. Integrity
    b. Confidentiality
    c. Availability
    d. Scalability
    Answer: bncsc+1​
47. Public subnets use which DNS system for external resolutions?
    a. VPC Resolver + Internet DNS
    b. NAT Gateway DNS
    c. Local loopback DNS
    d. DNS Relay only
    Answer: aaws.amazon+1​
48. Which is the correct sequence when creating a public subnet in AWS?
    a. Create VPC → Subnet → Internet Gateway → Route Table
    b. Internet Gateway → Route Table → VPC → Subnet
    c. Route Table → Subnet → NAT → VPC
    d. NAT → Routing → Subnet → Gateway
    Answer: ageeksforgeeks+1​
49. In multi-tier architecture, which tier should reside in public subnets?
    a. Data Tier
    b. Web Tier
    c. Application Tier
    d. Storage Tier
    Answer: bdev+1​
50. The optimal best practice for public subnets includes:
    a. Minimal open ports, security monitoring, and proper routing
    b. Allowing unrestricted internet access for scalability
    c. Keeping IGW detached for safety
    d. Using private IPs only
    Answer: anordlayer+2​

1. https://www.geeksforgeeks.org/devops/public-vs-private-subnets/
2. https://dev.to/574n13y/exploring-advanced-networking-concepts-in-the-cloud-vpc-and-subnets-2j75
3. https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-vpc.html
4. https://nordlayer.com/learn/network-security/basics/
5. https://www.cloudflare.com/learning/network-layer/what-is-a-subnet/
6. https://www.ncsc.gov.uk/guidance/network-security-fundamentals
7. https://aws.amazon.com/blogs/modernizing-with-aws/designing-private-network-connectivity-aws-azure/
8. https://learn.microsoft.com/en-us/azure/architecture/aws-professional/networking
9. https://www.geeksforgeeks.org/computer-networks/introduction-to-subnetting/
10. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
11. https://www.sanfoundry.com/network-security-quiz/
12. https://www.interviewbit.com/cyber-security-mcq/
13. https://www.igmguru.com/blog/cyber-security-mcqs
14. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
15. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
16. https://examradar.com/cyber-security-mcqs-set-7/
17. https://www.uninets.com/blog/computer-networks-mcq
18. https://digitdefence.com/blog/fundamentals-of-network-security-in-computer-networks
19. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
20. https://www.alkira.com/cloud-networking-across-aws-azure-and-gcp/