Unit 5: Network Security
Networking · Unit 5 · Paper 2

Network Security unit test

A test on this unit alone, marked as a percentage and a letter grade — for the test your class is actually sitting, rather than for May. Answer everything, then submit once: seeing the answer to question 3 before attempting question 4 makes the final percentage meaningless.

Paper 1Paper 2Paper 3
Each paper is built from this unit’s 40 terms and is the same for everyone, so a teacher can assign “Unit 5, Paper 2” and every student sits the identical test. Multiple choice is marked objectively; the written sections you mark yourself against the model answer and rubric.
Suggested time 33 min 30 points0/17 attempted
1

802.1X

2

Guest network isolation

3

Split tunneling

4

IPsec

5

On-path attack

6

SIEM

7

DNS poisoning and DNSSEC

8

Certificate validation

9

ARP poisoning

10

Incident response phases

11

Stateful inspection

12

Denial-of-service

Short answer 1. Define or explain: MAC filtering limits

3 pts

Short answer 2. Define or explain: Network access control (NAC)

3 pts

Short answer 3. Define or explain: Vulnerability scanning

3 pts

Short answer 4. Define or explain: Network segmentation

3 pts

Free response

6 pts

Explain the principle of defense in depth as applied to a network, giving three distinct layers.

Explain what a VPN provides and identify one thing it does not protect against.

Explain the difference between authentication and authorization, and give an example of each.

Explain what 802.1X provides and where it is deployed.

Explain how a rogue access point threatens a network and describe one control that detects or prevents it.

Explain what network address translation does and state whether it should be considered a security control.