Objective 4.3CC

4.3 Understand network security infrastructure.

Objective 4.3 sits in Network Security, which carries 24% of the Certified in Cybersecurity exam. The questions below are original, written from the official objective title above, and each explanation cites the ISC2 page it rests on.

Objective title verbatim from the official objectives. ISC2 exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

4-3Network SecurityEasy

What protection does a firewall provide?

Encrypting files stored on the diskDisk encryption is a data-at-rest control, the right answer for a stolen-laptop question.
Shielding systems from unwanted trafficCorrect · your answerCorrect. Filtering unwanted traffic at a boundary is the firewall's job.
Backing up data to a second siteBackup is availability protection, unrelated to traffic filtering.
Scanning employees' email for typosContent proofreading is nobody's security control.

Correct.

Concept

A boundary control decides which traffic crosses it, admitting what the network needs and refusing what it does not.

Why B

Firewalls shield a computer or network from malicious or unnecessary network traffic and can block data from certain addresses, applications, or ports while allowing needed data through.

#firewalls

Now you: objective 4.3 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

4-3Network SecurityModerate

A small office team wants one device protecting all of its computers at the network edge. Which firewall category fits?

Sample question 2 of 3

4-3Network SecurityModerate

A user's machine runs only a software firewall. What weakness comes with that placement?

Sample question 3 of 3

4-3Network SecurityHard

A technician deploys a firewall with its factory settings untouched. Why does CISA flag that as a risk?

Full Certified in Cybersecurity question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Network Security