Skip to content

Network Security Questions

Practice questions for Network Security topic in Palo Alto Networks Certified Cybersecurity Apprentice. 28 questions covering this domain.

28 questions8 easy12 medium8 hard
Q1
easy

A learner divides an IP network into smaller logical networks. Which segmentation method is this?

Q2
medium

An administrator needs encrypted remote shell access to a server. Which tunneling protocol best fits?

Q3
hard

An employee tries to upload customer records to an unsanctioned SaaS app, and the transfer is blocked by content policy. Which function acted?

Q4
easy

A switch separates traffic into logical broadcast domains. Which segmentation method is this?

Q5
medium

A web application needs encrypted transport using certificates. Which protocol best fits?

Q6
medium

Two VPN peers need a protocol to negotiate security associations. Which protocol best fits?

Q7
hard

Users report that a newly registered phishing site is blocked because of its web category. Which control most directly caused the block?

Q8
easy

A firewall policy groups interfaces or networks by trust level for enforcement. Which segmentation method is this?

Q9
hard

A company wants to manage risk at the point where employees access SaaS apps through the browser. Which blueprint function is most aligned?

Q10
easy

A firewall tracks connection state so return traffic can be evaluated in context. Which firewall type fits?

Q11
medium

Traffic uses port 443, but the security team must identify the actual application and user context. Which control best fits?

Q12
medium

A company wants security controls focused on the browser as a major work access path. Which function best fits the blueprint?

Q13
medium

A company wants to stop sensitive files from being shared outside approved channels. Which function best fits?

Q14
hard

A legacy firewall sees only HTTPS on port 443, but the team must control a risky file-sharing app using that port. Which control is best?

Q15
hard

A return packet is allowed because it belongs to a permitted session already in the connection table. Which firewall behavior is this?

Q16
easy

A firewall identifies applications, users, and content rather than relying only on ports. Which firewall type fits?

Q17
medium

A basic firewall allows return traffic because it belongs to an already established session. Which capability is being used?

Q18
easy

A control permits or denies web access based on website categories and risk. Which function is this?

Q19
medium

A user connects from an airport network and needs protected access to internal applications. Which technology best fits?

Q20
medium

A school blocks known phishing and malware website categories for students. Which control best fits?

Sign in to see all 28 questions

Create a free account to browse all questions — completely free during our launch phase.