CompTIA SecurityX Practice Questions: Network Security

11 free, exam-style CompTIA SecurityX (CAS-005) practice questions covering Network Security, each with the correct answer and an explanation. Start a timed exam below, or scroll on to read through the questions.

🧠

Mini Exam

25 Questions · 50 minutes

Start Quiz 🚀
🏆

Mock SecurityX Exam

85 Questions · 165 minutes

Start Quiz 🚀
📅

Daily Quiz

10 Questions · 20 minutes

Start Quiz 🚀
🎯

Standard Practice

50 Questions · 100 minutes

Start Quiz 🚀

Network Security practice questions

Answers and explanations are shown. Take the timed exam above to test yourself first.

Q1. What is the PRIMARY security benefit of using eBPF for network monitoring?

  • A.Reduced visibility
  • B.Kernel-level observability without requiring kernel modules✓ Correct
  • C.Disabled encryption
  • D.No logging
Explanation: eBPF provides deep visibility with lower overhead than traditional methods. Learn more.

Q2. Which of the following is MOST important when implementing SASE (Secure Access Service Edge)?

  • A.Legacy perimeter-based security
  • B.Identity-centric zero trust policies✓ Correct
  • C.Disabled authentication
  • D.No encryption
Explanation: SASE combines networking and security with zero trust principles. Learn more.

Q3. What is the PRIMARY security consideration for 5G network slicing?

  • A.Shared network resources
  • B.Isolation between network slices✓ Correct
  • C.Disabled authentication
  • D.No encryption
Explanation: Slices must be securely separated to prevent cross-slice attacks. Learn more.

Q4. What is the MAIN risk of using deprecated TLS versions (e.g., TLS 1.0)?

  • A.Slower performance
  • B.Known vulnerabilities✓ Correct
  • C.Incompatibility with modern browsers
  • D.Higher bandwidth usage
Explanation: Older TLS versions have known security flaws. Learn more.

Q5. Which of the following is a key feature of a next-generation firewall (NGFW)?

  • A.Basic packet filtering
  • B.Application-layer inspection✓ Correct
  • C.MAC address blocking
  • D.Static routing
Explanation: NGFWs inspect traffic at the application layer for advanced threats. Learn more.

Q6. Which of the following is a key benefit of microsegmentation?

  • A.Reducing VLAN complexity
  • B.Limiting lateral movement✓ Correct
  • C.Increasing broadcast domains
  • D.Simplifying firewall rules
Explanation: Microsegmentation restricts attacker movement within a network. Learn more.

Q7. What is the PRIMARY purpose of a Web Application Firewall (WAF)?

  • A.Blocking DDoS attacks
  • B.Filtering and monitoring HTTP traffic✓ Correct
  • C.Managing user authentication
  • D.Encrypting data in transit
Explanation: WAFs protect web applications by filtering and monitoring HTTP traffic. Learn more.

Q8. What is the PRIMARY purpose of a TAP (Test Access Point)?

  • A.Block malicious traffic
  • B.Mirror network traffic for monitoring✓ Correct
  • C.Encrypt data in transit
  • D.Route packets between VLANs
Explanation: Network TAPs provide passive traffic visibility. Learn more.

Q9. What is the PRIMARY purpose of a VPN?

  • A.Encrypting data at rest
  • B.Securing remote access to networks✓ Correct
  • C.Blocking malware
  • D.Managing firewalls
Explanation: VPNs encrypt traffic between remote users and corporate networks. Learn more.

Q10. Which architecture best limits east-west movement between workloads inside a data center?

  • A.Microsegmentation✓ Correct
  • B.Flat VLAN design
  • C.Single shared administrator account
  • D.Unencrypted backup tapes
Explanation: Microsegmentation applies granular controls between workloads so compromise of one system does not easily spread laterally. Learn more.

Q11. Which security model centralizes policy decisions while enforcement happens close to applications or resources?

  • A.Software-defined perimeter✓ Correct
  • B.Flat perimeter firewall only
  • C.Public kiosk mode
  • D.Local guest account sharing
Explanation: A software-defined perimeter uses identity-aware policy to broker and enforce access to protected services. Learn more.

More CompTIA SecurityX practice topics

Keep studying CompTIA SecurityX

Full CompTIA SecurityX practice exam · CompTIA SecurityX study guide · All CompTIA practice questions

Last updated