Cybersecurity Perimeter Defense and Network Security

This test covers firewall techniques and various methods for defending network perimeters from cyber attacks, including firewalls, IDS/IPS, VPNs, WAFs, and defense against common attacks like DoS, SQL injection, and XSS. Suitable for CS and GATE aspirants.

14 Questions Published

Questions

Question 1 Multiple Choice (Single Answer)

Which of the following is/are true about DMZ (Demilitarized Zone) Architecture in cyber security?

  1. It provide an interface to separate the networks.
  2. DMZ is used to denied the traffic form the external network.
  3. By using DMZ, the traffic from the internal network to the external network is authorized.
  4. DMZ is used to protect internal servers.
  5. All of the above
Question 2 Multiple Choice (Single Answer)

Which of the following is correct about Vulnerability factor in cyber attacks?

  1. It exploits how easy an organization or government establishment is vulnerable to cyber-attacks.
  2. Due to this factor, a computer network attack disrupts the integrity or authenticity of data.
  3. It creates fear amongst individuals, groups, or societies.
  4. This attacks created direct losses and gained negative publicity.
  5. Both (1) and (2)
Question 3 Multiple Choice (Single Answer)

What are the defending perimeters from the firewalls?

  1. Firewall provides application data validity.
  2. These are used to check the connectivity of the data packets.
  3. Firewalls provide application data security running in remote environment.
  4. All of the above
  5. Both (2) and (3)
Question 4 Multiple Choice (Single Answer)

Which of the following is/are false about Application-layer firewall?

  1. This firewalls work on the application level of the TCP/IP stack.
  2. It is used to intercept all packets traveling to or from an application.
  3. This firewall does not run on dedicated hardware or as software on a general-purpose machine.
  4. This firewall prevents bowsers from cyber attack or worms.
  5. Both (3) and (4)
Question 5 Multiple Choice (Single Answer)

Which of the following is/are false about Intrusion Prevention System (IPS)?

  1. IPS is used to review the network traffic.
  2. IPS does not check the web application traffic.
  3. IPS protects from web server attacks to the web applications.
  4. IPS provides more functionality than IDS (Intrusion Detection System).
  5. Both (2) and (3)
Question 6 Multiple Choice (Single Answer)

What are the ways to defend from the Denial of Service (DOS) attack?

  1. To maintain the checklist of information about the networking environment.
  2. Disable the unnecessary services and applications.
  3. Implement the bogon block list.
  4. All of the above
  5. Both (1) and (3)
Question 7 Multiple Choice (Single Answer)

Which of the following is/are true about IDS (Intrusion detection system)?

  1. IDS is a device that monitors network or system activities for malicious activities.
  2. An IDS is used to monitor the traffic and spots patterns of activity, alerting you if it concludes that your network is under attack.
  3. A network-based IDS is used immediate at the external Internet facing network segments then DMZ segments.
  4. All of the above
  5. Both (1) and (3)
Question 8 Multiple Choice (Single Answer)

What are the defending techniques against the SQL injection attack?

  1. Blacklisting and Whitelisting
  2. Fortifying SQL statements
  3. Intrusion prevention and system signatures
  4. All of the above
  5. Both (1) and (2)
Question 9 Multiple Choice (Single Answer)

Which of the following securities does VPN (Virtual Private Network) provide?

  1. VPN is used to secure user's identity.
  2. It provides the user's authentication outside the organisation.
  3. VPN provides encryption of the data.
  4. VPN also provide message integrity.
  5. All of the above
Question 10 Multiple Choice (Single Answer)

Which of the following is/are false about Web Application Firewall (WAF) in cyber security?

  1. WAF provides security for the web applications.
  2. WAF can be network or host based.
  3. WAF does not watch the all network traffic on networking system.
  4. WAF can not analyse the application layer thoroughly.
  5. Both (3) and (4)
Question 11 Multiple Choice (Single Answer)

Which of the following attacks are possible due to SQL injection attack?

  1. Information disclosure.
  2. Remote command execution.
  3. Loss of data availability.
  4. All of the above
  5. Both (1) and (2)
Question 12 Multiple Choice (Single Answer)

Which of the following is/are true about the tools to detect the malware or malicious softwares?

  1. Configure the workstations and the servers to avoid them from auto-run.
  2. Automated tools to monitor the workstations and servers.
  3. Content filter should be use for web servers.
  4. Minimum use of external devices.
  5. All of the above
Question 13 Multiple Choice (Single Answer)

Which of the following is/are known as Cross-site scripting (XSS) attacks?

  1. These attacks bypass the application's input or output filters to execute malicious scripts in the browser of the application's user.
  2. The attackers use automated tools to guess passwords that use known dictionary words or that are otherwise predictable.
  3. This attack bypass the application's input filters to gain unrestrained access to the underlying database.
  4. Both (1) and (3)
  5. None of the above
Question 14 Multiple Choice (Single Answer)

Which of the following controls is/are belong to protect the network services form the cyber attacks?

  1. Disable the unauthorised installed softwares.
  2. Use of host based firewalls or filter ports to secure network services.
  3. The services those are no longer needed should be turned off.
  4. All of the above
  5. Both (2) and (3)