CompTIA SecurityX Practice Questions: Network Security (CAS-005)

Question 1

What is the PRIMARY security benefit of using eBPF for network monitoring?

Accepted Answer

Kernel-level observability without requiring kernel modules

Answer

Reduced visibility

Answer

Disabled encryption

Answer

No logging

Question 2

Which of the following is MOST important when implementing SASE (Secure Access Service Edge)?

Accepted Answer

Identity-centric zero trust policies

Answer

Legacy perimeter-based security

Answer

Disabled authentication

Answer

No encryption

Question 3

What is the PRIMARY security consideration for 5G network slicing?

Accepted Answer

Isolation between network slices

Answer

Shared network resources

Answer

Disabled authentication

Answer

No encryption

Question 4

What is the MAIN risk of using deprecated TLS versions (e.g., TLS 1.0)?

Accepted Answer

Known vulnerabilities

Answer

Slower performance

Answer

Incompatibility with modern browsers

Answer

Higher bandwidth usage

Question 5

Which of the following is a key feature of a next-generation firewall (NGFW)?

Accepted Answer

Application-layer inspection

Answer

Basic packet filtering

Answer

MAC address blocking

Answer

Static routing

Question 6

Which of the following is a key benefit of microsegmentation?

Accepted Answer

Limiting lateral movement

Answer

Reducing VLAN complexity

Answer

Increasing broadcast domains

Answer

Simplifying firewall rules

Question 7

What is the PRIMARY purpose of a Web Application Firewall (WAF)?

Accepted Answer

Filtering and monitoring HTTP traffic

Answer

Blocking DDoS attacks

Answer

Managing user authentication

Answer

Encrypting data in transit

Question 8

What is the PRIMARY purpose of a TAP (Test Access Point)?

Accepted Answer

Mirror network traffic for monitoring

Answer

Block malicious traffic

Answer

Encrypt data in transit

Answer

Route packets between VLANs

Question 9

What is the PRIMARY purpose of a VPN?

Accepted Answer

Securing remote access to networks

Answer

Encrypting data at rest

Answer

Blocking malware

Answer

Managing firewalls

Question 10

Which architecture best limits east-west movement between workloads inside a data center?

Accepted Answer

Microsegmentation

Answer

Flat VLAN design

Answer

Single shared administrator account

Answer

Unencrypted backup tapes

Question 11

Which security model centralizes policy decisions while enforcement happens close to applications or resources?

Accepted Answer

Software-defined perimeter

Answer

Flat perimeter firewall only

Answer

Public kiosk mode

Answer

Local guest account sharing

CompTIA SecurityX Practice Questions: Network Security

Q1. What is the PRIMARY security benefit of using eBPF for network monitoring?

Q2. Which of the following is MOST important when implementing SASE (Secure Access Service Edge)?

Q3. What is the PRIMARY security consideration for 5G network slicing?

Q4. What is the MAIN risk of using deprecated TLS versions (e.g., TLS 1.0)?

Q5. Which of the following is a key feature of a next-generation firewall (NGFW)?

Q6. Which of the following is a key benefit of microsegmentation?

Q7. What is the PRIMARY purpose of a Web Application Firewall (WAF)?

Q8. What is the PRIMARY purpose of a TAP (Test Access Point)?

Q9. What is the PRIMARY purpose of a VPN?

Q10. Which architecture best limits east-west movement between workloads inside a data center?

Q11. Which security model centralizes policy decisions while enforcement happens close to applications or resources?

More CompTIA SecurityX practice topics