MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. Which cloud service model commonly requires users to configure their own Network Security Groups?
   a. SaaS
   b. PaaS
   c. IaaS
   d. DaaS
   Answer: c. IaaSsanfoundry+1
2. What is the primary purpose of a Network Security Group in cloud computing?
   a. Monitor application performance
   b. Control access to virtual networks
   c. Backup cloud resources
   d. Manage billing information
   Answer: b. Control access to virtual networksthinkcloudly+1
3. Which type of cloud resource is typically protected by Network Security Groups?
   a. Cloud storage
   b. Virtual machines
   c. Physical servers
   d. Software applications
   Answer: b. Virtual machinesdev+1
4. NSG rules can apply to which traffic direction?
   a. Only inbound
   b. Only outbound
   c. Both inbound and outbound
   d. Neither
   Answer: c. Both inbound and outboundplacementpreparation+1
5. What is an NSG rule primarily composed of?
   a. Encryption method
   b. Source, destination, protocol, and action
   c. Software version
   d. Hardware type
   Answer: b. Source, destination, protocol, and actionthinkcloudly+1
6. Which protocol can NSG rules affect?
   a. TCP
   b. UDP
   c. ICMP
   d. All of the above
   Answer: d. All of the abovedev+1
7. What is the default action if a packet does not match any NSG rule?
   a. Allow by default
   b. Deny by default
   c. Encrypt by default
   d. Forward by default
   Answer: b. Deny by defaultdev+1
8. NSG rules are generally defined by which element?
   a. Cloud service provider
   b. Cloud user/admin
   c. Network hardware vendor
   d. Third-party consultant
   Answer: b. Cloud user/adminthinkcloudly+1
9. In Azure, to which objects can NSGs be associated?
   a. Virtual Networks
   b. Subnets and network interfaces
   c. Resource groups
   d. Containers
   Answer: b. Subnets and network interfacesbettercoder+1
10. What is the maximum number of NSG rules supported per group in Azure (default limit)?
    a. 100
    b. 200
    c. 500
    d. 1000
    Answer: b. 200thinkcloudly
11. Which of the following is NOT configurable in an NSG rule?
    a. Source IP
    b. Destination IP
    c. Virtual CPU type
    d. Protocol
    Answer: c. Virtual CPU typethinkcloudly
12. What is the effect of a higher priority number in NSG rules?
    a. Rules are evaluated first
    b. Rules are evaluated last
    c. Rules are ignored
    d. Rules always deny traffic
    Answer: b. Rules are evaluated lastbettercoder+1
13. NSGs help implement which security principle?
    a. Confidentiality
    b. Least privilege
    c. Availability
    d. Integrity
    Answer: b. Least privilegefinalroundai+1
14. Which service typically uses Security Groups to regulate network traffic?
    a. AWS EC2
    b. Azure Blob Storage
    c. Google Cloud Functions
    d. IBM Watson
    Answer: a. AWS EC2interviewkickstart+1
15. Which is the default inbound rule for an Azure NSG?
    a. Allow all traffic
    b. Deny all traffic
    c. Allow traffic from within the VNet
    d. Allow traffic from the internet
    Answer: c. Allow traffic from within the VNetbettercoder+1
16. What can happen if an NSG is incorrectly configured?
    a. Network downtime
    b. Loss of data
    c. Billing errors
    d. Improved performance
    Answer: a. Network downtimewebasha+1
17. What component can NSGs be NOT directly applied to in Azure?
    a. Virtual machines
    b. Network interfaces
    c. Resource groups
    d. Subnets
    Answer: c. Resource groupsbettercoder+1
18. Which of the following can be used in combination with NSGs for enhanced security?
    a. Application Security Groups
    b. Virtual CPUs
    c. Cloud storage buckets
    d. Cloud user accounts
    Answer: a. Application Security Groupsbettercoder+1
19. When creating NSG rules, which protocol must always be specified?
    a. ARP
    b. TCP/UDP
    c. HTTP
    d. SMTP
    Answer: b. TCP/UDPdev+1
20. Which cloud provider uses the term ‘Security Group’ similarly to NSG in their services?
    a. AWS
    b. Google Cloud
    c. IBM Cloud
    d. Oracle Cloud
    Answer: a. AWSinterviewkickstart+1
21. What is a recommended practice for permitting SSH (port 22) access in NSG rules?
    a. Allow from all IPs
    b. Restrict to specific IP addresses
    c. Allow from internet
    d. Enable for all users
    Answer: b. Restrict to specific IP addresseswebasha+1
22. Which NSG rule takes precedence, lower or higher priority?
    a. Higher priority
    b. Lower priority
    c. Alphabetical order
    d. Random selection
    Answer: a. Higher prioritybettercoder+1
23. NSGs are most effective when paired with what other Azure service?
    a. Azure Firewall
    b. Virtual Machine Scale Sets
    c. Azure DNS
    d. Azure AD Connect
    Answer: a. Azure Firewallwebasha+1
24. What is the scope of an NSG in Azure?
    a. Entire region
    b. Subnet or NIC
    c. Resource group
    d. Organization
    Answer: b. Subnet or NICthinkcloudly+1
25. Which statement is true about the default outbound NSG rule in Azure?
    a. Allows outbound traffic to internet
    b. Denies outbound traffic
    c. Allows outbound only within VNet
    d. Requires manual configuration
    Answer: a. Allows outbound traffic to internetbettercoder+1
26. NSGs can be exported and reused via which method?
    a. ARM templates
    b. CSV files
    c. Email
    d. None
    Answer: a. ARM templatesthinkcloudly+1
27. What is one limitation of NSG rules in cloud environments?
    a. Cannot inspect packet contents
    b. Cannot control traffic
    c. Cannot use port ranges
    d. Cannot be automated
    Answer: a. Cannot inspect packet contentswebasha+1
28. What feature allows grouping of VMs for NSG-based security in Azure?
    a. Application Security Groups
    b. Security Rings
    c. Firewall Zones
    d. Traffic Pools
    Answer: a. Application Security Groupsbettercoder+1
29. Which method is NOT supported for traffic filtering by NSGs?
    a. Port numbers
    b. Protocols
    c. CPU usage
    d. Source/destination IPs
    Answer: c. CPU usagethinkcloudly+1
30. How are NSGs different from Azure Firewall?
    a. NSGs operate at layer 4; Firewall at layer 7
    b. Both operate at layer 4
    c. NSGs can decrypt traffic; Firewall cannot
    d. NSGs require external hardware
    Answer: a. NSGs operate at layer 4; Firewall at layer 7webasha+1
31. Which tool can help review NSG rules and visualize their effects?
    a. Azure Network Watcher
    b. Azure Log Analytics
    c. Azure Policy
    d. PowerShell
    Answer: a. Azure Network Watcherbettercoder+1
32. Can NSGs prevent Distributed Denial of Service (DDoS) attacks alone?
    a. Yes
    b. No
    c. Only on weekends
    d. Only for outbound traffic
    Answer: b. Nowebasha+1
33. How are NSGs typically managed and updated in large cloud deployments?
    a. Manually via portal
    b. Automated via scripts or templates
    c. By hardware switches
    d. By end users
    Answer: b. Automated via scripts or templatesthinkcloudly+1
34. Which cloud provider introduced Application Security Groups specifically to enhance NSG configurations?
    a. Azure
    b. AWS
    c. Google Cloud
    d. IBM Cloud
    Answer: a. Azurebettercoder+1
35. What is the purpose of ‘deny all inbound’ rule at the end of NSG rule sets?
    a. Improve billing
    b. Provide default security
    c. Increase performance
    d. Allow exceptions first
    Answer: b. Provide default securitythinkcloudly+1
36. NSG rules can reference which port range for Remote Desktop Protocol (RDP)?
    a. 3389
    b. 22
    c. 53
    d. 80
    Answer: a. 3389dev+1
37. NSGs operate at which OSI layer?
    a. Layer 2
    b. Layer 4
    c. Layer 7
    d. Layer 1
    Answer: b. Layer 4webasha+1
38. Which built-in NSG rule allows all traffic within a virtual network in Azure?
    a. AllowVnetInBound
    b. DenyAllInBound
    c. AllowAzureLoadBalancerInBound
    d. AllowInternetOutBound
    Answer: a. AllowVnetInBoundbettercoder+1
39. Can NSG rules be modified while VMs are running?
    a. Yes
    b. No
    c. Only during provisioning
    d. Only after shutdown
    Answer: a. Yesthinkcloudly+1
40. Which is a best practice when implementing NSG rules?
    a. Least privilege access
    b. Permit all by default
    c. No logging required
    d. Ignore outbound rules
    Answer: a. Least privilege accesswebasha+1
41. Can NSGs be used in Google Cloud Platform?
    a. Yes, but terminology differs
    b. No
    c. Only for storage
    d. Only with Kubernetes
    Answer: a. Yes, but terminology differsexamtopics+1
42. What happens if two NSGs apply conflicting rules?
    a. Lowest priority rule applies
    b. Highest priority rule applies
    c. Both rules apply
    d. All traffic is denied
    Answer: b. Highest priority rule appliesbettercoder+1
43. How are NSG logs generated?
    a. Through Network Watcher
    b. Through DNS
    c. Through network hardware
    d. By cloud account admin
    Answer: a. Through Network Watcherthinkcloudly+1
44. What is the recommended action after editing NSG rules?
    a. Validate through testing
    b. Ignore logging
    c. Increase billing limit
    d. Restart all VMs
    Answer: a. Validate through testingwebasha+1
45. What is the effect of removing all NSGs from a subnet in Azure?
    a. All traffic allowed
    b. All traffic denied
    c. Only outbound traffic allowed
    d. Service becomes costlier
    Answer: a. All traffic allowedbettercoder+1
46. A rule allowing HTTP traffic usually permits which port?
    a. 80
    b. 53
    c. 25
    d. 3306
    Answer: a. 80dev+1
47. To restrict database access to an internal network, what should an NSG rule do?
    a. Deny external traffic to DB ports
    b. Allow all traffic to DB ports
    c. Log database requests
    d. None of the above
    Answer: a. Deny external traffic to DB portsthinkcloudly+1
48. Can NSG rules be scheduled to update automatically?
    a. Yes, with automation scripts
    b. No
    c. Only when requested by support
    d. Only if encrypted
    Answer: a. Yes, with automation scriptsbettercoder+1
49. What is one reason NSGs are critical in regulated industries?
    a. Help with compliance such as HIPAA, GDPR
    b. Reduce latency
    c. Manage costs
    d. Improve customer experience
    Answer: a. Help with compliance such as HIPAA, GDPRfinalroundai+1
50. What tool can visualize effective NSG rules per resource in Azure?
    a. NSG Flow Logs
    b. Excel macros
    c. Azure Pricing Calculator
    d. Azure DevOps
    Answer: a. NSG Flow Logsthinkcloudly+1

1. https://www.sanfoundry.com/cloud-computing-questions-answers-cloud-security/
2. https://www.placementpreparation.io/mcq/cloud-computing/page/3/
3. https://thinkcloudly.com/blog/azure-interview-questions/top-21-azure-networking-interview-questions/
4. https://dev.to/imsushant12/interview-questions-on-aws-networking-vpc-subnets-and-security-groups-40g7
5. https://www.bettercoder.io/blog/122/15-azure-cloud-questions-to-verify-that-you-understand-azure-network-security-groups
6. https://www.finalroundai.com/blog/cloud-security-engineer-interview-questions
7. https://interviewkickstart.com/blogs/interview-questions/cloud-computing-mcqs-it-professionals
8. https://www.webasha.com/blog/top-50-cloud-networking-interview-questions-and-answers
9. https://www.examtopics.com/discussions/google/view/32698-exam-professional-cloud-security-engineer-topic-1-question/
10. https://www.interviewbit.com/cloud-computing-mcq/
11. https://www.sanfoundry.com/1000-cloud-computing-questions-answers/
12. https://examradar.com/cloud-computing-and-security-challenges-mcqs/
13. https://www.vinsys.com/blog/aws-cloud-practitioner-certification-exam-mcqs
14. https://www.webasha.com/blog/top-cloud-security-interview-questions-and-answers
15. https://testbook.com/objective-questions/mcq-on-network-security–5eea6a0939140f30f369d917
16. https://www.whizlabs.com/blog/cloud-security-interview-questions/
17. https://www.scribd.com/document/714050526/Cloud-Computing-Mcqs
18. https://www.infosectrain.com/blog/top-interview-questions-and-answers-for-cloud-security-professionals/
19. https://www.interviewbit.com/network-security-interview-questions/
20. https://www.studocu.com/in/document/anna-university/cloud-computing-cs8791/300-top-cloud-computing-objective-questions-answers-mcqs/11718156