A security analyst notices that a user's computer is sending encrypted traffic to an external IP address at odd hours. The analyst suspects a man-in-the-middle (MITM) attack but is not sure. Which observation would most strongly indicate a MITM attack?

The user's firewall logs show blocked inbound connections

The user's browser shows a certificate warning when visiting a trusted website

The user's DNS server is responding slowly

The user's computer has a high CPU usage

What is the primary purpose of a Virtual Private Network (VPN)?

To block all incoming traffic from the internet

To increase the speed of internet connections

To replace the need for antivirus software

To create a secure, encrypted tunnel over a public network

A security team wants to detect an ongoing brute-force attack against their SSH server. They have enabled logging on the server and want to analyze the logs for patterns. Which type of analysis would be most effective?

Reviewing DNS query logs for unusual domain names

Monitoring network traffic for large file transfers

Reviewing authentication logs for repeated failed login attempts from the same IP address

Checking the firewall logs for dropped packets

What is the first step in responding to a network security incident?

Restore all systems from backup

Delete all logs to preserve privacy

Identify and contain the incident

What is the primary benefit of network segmentation?

It eliminates the need for encryption

It allows all devices to communicate freely

It limits the spread of an attack within the network

It increases the speed of all network traffic

LPI Security Essentials

Domain 4Objective 2

024.2 Network and Internet Security (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 7)

Part of the 024 Network and Service Security domain, which makes up ~19% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

Questions 31–35

31expert · medium
A security analyst notices that a user's computer is sending encrypted traffic to an external IP address at odd hours. The analyst suspects a man-in-the-middle (MITM) attack but is not sure. Which observation would most strongly indicate a MITM attack?
Select an answer first
32foundation · easy
What is the primary purpose of a Virtual Private Network (VPN)?
Select an answer first
33application · medium
A security team wants to detect an ongoing brute-force attack against their SSH server. They have enabled logging on the server and want to analyze the logs for patterns. Which type of analysis would be most effective?
Select an answer first
34foundation · easy
What is the first step in responding to a network security incident?
Select an answer first
35foundation · easy
What is the primary benefit of network segmentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.