Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Which policy controls who can access network resources and what they are allowed to do?
a. Access control policy
b. Encryption policy
c. Segmentation policy
d. Backup policy
Answer: a. Access control policyrippling+2 - What is the main purpose of a firewall policy in a network?
a. Define access privileges
b. Set password complexity
c. Restrict unauthorized traffic
d. Outline patch management
Answer: c. Restrict unauthorized trafficnordlayer+2 - What should a password policy ideally require?
a. Short passwords
b. Complex and long passwords
c. Password reuse
d. Static password use
Answer: b. Complex and long passwordstestbook+1 - Which principle means giving users the minimum access required to do their jobs?
a. Defense in depth
b. Least privilege
c. Redundancy
d. Administrative override
Answer: b. Least privilegeexabeam+1 - What does a network segmentation policy help prevent?
a. Device compatibility
b. Spreading of threats within the network
c. Software licensing violations
d. Service level violations
Answer: b. Spreading of threats within the networkalgosec+2 - Strong encryption in network security policies is used to:
a. Limit user access
b. Keep data confidential in transit and at rest
c. Speed up communications
d. Reduce hardware costs
Answer: b. Keep data confidential in transit and at restnordlayer+2 - What is the main function of an incident response policy?
a. Approve software installation
b. Define procedures for handling security breaches
c. Monitor network uptime
d. Allocate storage space
Answer: b. Define procedures for handling security breachesrippling+1 - Which policy requires all devices to be approved before connecting to the network?
a. Firewall policy
b. Network access control policy
c. Patch policy
d. Remote access policy
Answer: b. Network access control policyalgosec+1 - What should a remote access policy include?
a. VPN requirements and multi-factor authentication for remote users
b. Exemptions for executives
c. Only Wi-Fi guidelines
d. Data backup schedules
Answer: a. VPN requirements and multi-factor authentication for remote usersnordlayer+1 - Which of these is a key element in a bring-your-own-device (BYOD) policy?
a. Restricting all employee-owned devices
b. Defining security requirements for personal devices allowed on the network
c. Banning Wi-Fi use
d. Forcing only desktop connections
Answer: b. Defining security requirements for personal devices allowed on the networkvaronis+1 - Why is regular password expiration important in security policies?
a. Reduces help desk calls
b. Forces users to create new passwords, reducing risk of compromise
c. Increases network speed
d. Updates device drivers
Answer: b. Forces users to create new passwords, reducing risk of compromisevaronis+1 - A patch management policy ensures:
a. Only essential servers are updated
b. All critical software vulnerabilities are fixed in a timely manner
c. Device inventory is updated
d. Users are trained quarterly
Answer: b. All critical software vulnerabilities are fixed in a timely mannerrippling+1 - What aspect must be defined in a wireless security policy?
a. Only guest access
b. Encryption standards and authentication requirements for Wi-Fi
c. Number of routers available
d. Printer sharing rights
Answer: b. Encryption standards and authentication requirements for Wi-Finordlayer+1 - What is the goal of a data classification policy?
a. Assigning hardware resources
b. Categorizing data by sensitivity to define handling and protection levels
c. Listing network devices
d. Scheduling network resets
Answer: b. Categorizing data by sensitivity to define handling and protection levelsexabeam+1 - Why should a network security policy be subject to regular review?
a. To update device drivers
b. To adapt to new threats and changes in technology
c. To increase internet speed
d. To schedule meetings
Answer: b. To adapt to new threats and changes in technologyalgosec+2 - A security awareness and training policy aims to:
a. Teach users safe behaviors and increase policy compliance
b. Schedule software updates
c. Allocate IP addresses
d. Set up DNS settings
Answer: a. Teach users safe behaviors and increase policy compliancesanfoundry+2 - The main purpose of a clean desk policy is to:
a. Reduce dust buildup
b. Prevent sensitive information from being viewed or stolen
c. Clean computer keyboards
d. Avoid food in offices
Answer: b. Prevent sensitive information from being viewed or stolenpurplesec+1 - What is the central goal of network security policy management?
a. Speed up authentication
b. Ensure written policies are correctly enforced across firewalls and controls
c. Lower software licensing costs
d. Support network upgrades only
Answer: b. Ensure written policies are correctly enforced across firewalls and controlscisco+1 - A data loss prevention (DLP) policy should:
a. Monitor outbound communications for sensitive data leaks
b. Set disk quotas
c. Limit device installations
d. Allow all outgoing emails
Answer: a. Monitor outbound communications for sensitive data leaksrippling+1 - What is required by an endpoint security policy?
a. Application only on routers
b. Antivirus, patching, and configuration standards for all endpoint devices
c. No requirements for user devices
d. Only monitoring, not prevention
Answer: b. Antivirus, patching, and configuration standards for all endpoint devicesalgosec+1 - A security policy should have which component to define who it applies to?
a. Audience specification
b. Encryption standard
c. Port allocation
d. Printer sharing guideline
Answer: a. Audience specificationexabeam+1 - In a network, a guest access policy primarily governs:
a. Access rights of visitors and non-employees
b. IT staff job descriptions
c. Social media guidelines
d. Wi-Fi speeds
Answer: a. Access rights of visitors and non-employeesrippling+1 - Which policy defines the required steps after detecting a network intrusion?
a. Acceptable use policy
b. Intrusion response policy
c. Password complexity policy
d. Patch management policy
Answer: b. Intrusion response policyexabeam+1 - Which is included in a strong acceptable use policy?
a. Prohibits unauthorized software and personal use of company resources for illegal activities
b. States server rack sizes
c. IT department lunch hours
d. Printer brands in use
Answer: a. Prohibits unauthorized software and personal use of company resources for illegal activitiesvaronis+1 - Why is network device configuration policy important?
a. Specifies secure setup and maintenance procedures for routers and switches to reduce misconfigurations
b. Allocates licenses
c. Installs gaming software
d. Defines cable color codes
Answer: a. Specifies secure setup and maintenance procedures for routers and switches to reduce misconfigurationstechnology.howard+1 - What role does an audit policy serve in network security?
a. Enables logs and regular review of access and activity to detect breaches or misuse
b. Blocks all logins
c. Removes older devices
d. Schedules routine emails
Answer: a. Enables logs and regular review of access and activity to detect breaches or misusealgosec+2 - A network monitoring policy should specify:
a. Tools and methods for continuous monitoring of traffic, logins, and anomalies
b. User job roles only
c. Only periodic checks on weekends
d. Firewall port numbers
Answer: a. Tools and methods for continuous monitoring of traffic, logins, and anomaliesnordlayer+1 - The purpose of a business continuity and disaster recovery (BCDR) policy in networking is to:
a. Restore operations quickly after security incidents or outages
b. Schedule public holidays
c. Assign IP addresses
d. Train help desk staff only
Answer: a. Restore operations quickly after security incidents or outagesexabeam+2 - What does a privilege escalation policy seek to prevent?
a. Unauthorized increase in user access rights
b. Lengthy login times
c. IP address conflicts
d. Application errors
Answer: a. Unauthorized increase in user access rightsnordlayer+1 - Software installation policy is intended to:
a. Allow only IT-approved and secure software to be installed on network systems
b. Limit system RAM
c. Select browser homepages
d. Update time zones
Answer: a. Allow only IT-approved and secure software to be installed on network systemsrippling+1 - What is defined by a network perimeter security policy?
a. The controls for managing connections between internal networks and external systems
b. Type of network cabling
c. Email archiving rules
d. Internal office layouts
Answer: a. The controls for managing connections between internal networks and external systemscisco+2 - A secure guest network policy should:
a. Segregate guest users from sensitive internal systems and data
b. Allow access to all resources
c. Require static IPs only
d. Block all internet access
Answer: a. Segregate guest users from sensitive internal systems and dataalgosec+1 - What does an encryption key management policy address?
a. Secure generation, distribution, storage, and destruction of cryptographic keys
b. Assigning public DNS servers
c. Updating software licenses
d. Allocating device drivers
Answer: a. Secure generation, distribution, storage, and destruction of cryptographic keysrippling+1 - An anti-malware policy should require:
a. Mandatory use of up-to-date anti-malware solutions organization-wide
b. Manual virus checks only
c. No policy for laptops
d. Only signature-based detection
Answer: a. Mandatory use of up-to-date anti-malware solutions organization-widenordlayer+1 - Why should a policy include controls for removable media (USB, etc.)?
a. To prevent unauthorized data transfers and malware introduction
b. Speed up network traffic
c. Increase device inventory
d. Track internet usage
Answer: a. To prevent unauthorized data transfers and malware introductionalgosec+2 - What is the primary objective of a vendor and third-party access policy?
a. Limit and monitor external partner access to essential systems while protecting sensitive resources
b. Increase helpdesk workload
c. Approve new hires
d. Set default browser
Answer: a. Limit and monitor external partner access to essential systems while protecting sensitive resourcesexabeam+1 - Log retention policies in networking dictate:
a. How long logs are stored and when they can be securely deleted
b. Wi-Fi connection limits
c. Number of network ports in use
d. Patch policy deadlines
Answer: a. How long logs are stored and when they can be securely deletedrippling+1 - What is addressed in an access revocation policy?
a. Procedures for promptly removing access of departing or role-changing users
b. Keyboard model
c. Patch file formats
d. DNS forwarding options
Answer: a. Procedures for promptly removing access of departing or role-changing usersexabeam+1 - A mobile device security policy should include:
a. Requirements for mobile device encryption and remote wipe capabilities
b. Assigning new phone numbers
c. SMS quotas
d. Charging practices
Answer: a. Requirements for mobile device encryption and remote wipe capabilitiesnordlayer+1 - What is the role of a security policy in regulatory compliance?
a. Helps ensure adherence to legal, industry, and customer-imposed security standards
b. Sets sales goals
c. Increases website SEO
d. Determines company colors
Answer: a. Helps ensure adherence to legal, industry, and customer-imposed security standardscisco+2 - What must be specified in a remote work policy related to security?
a. Device security requirements, secure network access methods, and user responsibilities
b. Types of home routers allowed
c. Work hours only
d. Break times
Answer: a. Device security requirements, secure network access methods, and user responsibilitiesvaronis+1 - Why include multi-factor authentication (MFA) in security policy?
a. Provide layered verification to increase account protection beyond simple passwords
b. Limit log length
c. Set default gateways
d. Adjust monitor brightness
Answer: a. Provide layered verification to increase account protection beyond simple passwordsnordlayer+1 - Acceptable use of cloud services in a networking policy should:
a. Set rules for how cloud-based resources are accessed and protected
b. Restrict all online activity
c. Allow only guest users
d. Suspend employee accounts
Answer: a. Set rules for how cloud-based resources are accessed and protectedvaronis+1 - A privilege audit policy requires:
a. Periodic review of user privileges to remove unnecessary or risky access rights
b. Weekly OS reinstallations
c. Auto-forwarding all emails
d. Scheduling printer upgrades
Answer: a. Periodic review of user privileges to remove unnecessary or risky access rightsexabeam+1 - What is supported by a strong network documentation policy?
a. Accurate and up-to-date diagrams and records to facilitate troubleshooting, audits, and policy enforcement
b. Only maintenance schedules
c. Password reuse
d. DNS cache purges
Answer: a. Accurate and up-to-date diagrams and records to facilitate troubleshooting, audits, and policy enforcementcisco+1 - Which statement describes a policy for end-user device hardening?
a. Mandates disabling unneeded services and enforcing baseline security settings on endpoints
b. Reduces log collection
c. Schedules video meetings
d. Allows unmonitored installations
Answer: a. Mandates disabling unneeded services and enforcing baseline security settings on endpointsalgosec+1 - A data retention and disposal policy should dictate:
a. Secure storage period and mandatory destruction of data when no longer needed
b. Weekends off
c. Setting file extensions
d. Remote desktop settings
Answer: a. Secure storage period and mandatory destruction of data when no longer neededrippling+1 - What does physical security policy focus on within networking context?
a. Limiting unauthorized physical access to network equipment and data centers
b. Assigning desktop wallpapers
c. Increasing cable lengths
d. Updating monitors
Answer: a. Limiting unauthorized physical access to network equipment and data centersalgosec+1 - The purpose of a social engineering defense policy is to:
a. Educate users and implement controls to counter phishing and manipulation attempts
b. Block all emails
c. Force daily password changes
d. Change website layout
Answer: a. Educate users and implement controls to counter phishing and manipulation attemptsrippling+1 - What element should a security policy include to ensure accountability?
a. Assignment of responsibility and procedures for policy enforcement and violation reporting
b. Disk formatting schedule
c. Device serial numbers
d. Backup quotas
Answer: a. Assignment of responsibility and procedures for policy enforcement and violation reportingexabeam+1
- https://www.rippling.com/blog/network-security-policy
- https://www.algosec.com/resources/security-policy
- https://www.exabeam.com/explainers/network-security/network-security-policy-9-key-components-and-how-to-make-them-work/
- https://nordlayer.com/learn/network-security/basics/
- https://www.cisco.com/site/us/en/learn/topics/security/what-is-network-security-policy-management.html
- https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
- https://www.varonis.com/blog/what-is-a-security-policy
- https://www.sanfoundry.com/1000-cyber-security-questions-answers/
- https://purplesec.us/learn/network-security-policies/
- https://technology.howard.edu/sites/technology.howard.edu/files/2020-03/NetworkSecurityPolicy_UPC_0.pdf
- https://www.sanfoundry.com/computer-fundamentals-questions-answers-network-security/
- https://www.yeahhub.com/top-20-frequently-asked-network-security-mcqs-with-answers/
- https://www.uninets.com/blog/computer-networks-mcq
- https://www.scribd.com/document/413985393/CH-31-Network-Security-Multiple-Choice-Questions-and-Answers-PDF
- https://www.studocu.com/in/document/rashtrasant-tukadoji-maharaj-nagpur-university/cyber-security/cyber-law-and-security-policy-mcq/16482442
- https://www.pearsonitcertification.com/articles/article.aspx?p=3197450&seqNum=6
- https://www.geeksforgeeks.org/computer-networks/network-security/
- https://www.vskills.in/practice/network-security
- https://digitdefence.com/blog/fundamentals-of-network-security-in-computer-networks
- https://www.interviewbit.com/cyber-security-mcq/
