Back to Communication and Network Security

Secure Network Architecture

5 minutes 5 Questions

Secure Network Architecture is the foundation for designing, implementing, and maintaining a protected communication infrastructure. It covers the principles of layered security, separation of concerns, and defense in depth. By adopting these strategies, it helps to prevent security incidents, redu…

Test mode:
Start practice test
CISSP - Secure Network Architecture Example Questions

Test your knowledge of Secure Network Architecture

Question 1

A company is setting up a new office, and the IT team is tasked with designing a secure network architecture. The office requires multiple levels of security, including a guest network for visitors, a network for employees, and a secure network for sensitive data. What is the best solution for achieving this requirement?

Correct Answer: Implement multiple VLANs and firewall rules to segregate traffic

To achieve multiple levels of security, the best solution is to implement multiple VLANs to segregate network traffic along with appropriate firewall rules to keep those layers separate from each other. The other options lack proper isolation and security measures.

Question 2

A small company wants to implement a secure network architecture that divides the network into segments based on their purpose. What type of network segmentation should they use?

Correct Answer: Functional Segmentation

Functional segmentation divides a network based on its purpose or function. Geographical segmentation is based on locations, address segmentation is based on IP addresses, vendor-specific segmentation is based on equipment manufacturers, layer segmentation is based on OSI layers, and time-based segmentation doesn't apply to network architecture.

Question 3

While analyzing a wireless network setup, you notice that there are several unauthorized devices connected to it. What feature should be implemented to prevent unauthorized access to the network?

Correct Answer: MAC Address Filtering

MAC Address Filtering allows only authorized devices to connect to a network by filtering based on their MAC addresses. Dynamic IP allocation assigns IP addresses automatically, SSID hiding hides the network name, IPv6 is a newer IP version, a guest network provides separate access for guests, and a VPN secures network communication.

More Secure Network Architecture questions
14 questions (total)
Start 14 question test