Security Engineering
Network Security
8 practice questions. Free questions open a full answer guide; the rest unlock with Pro.
- Why is it not enough to encrypt only data crossing the internet, and what does it mean to also encrypt internal service-to-service traffic with something like mutual TLS?
- What's the difference between a WAF and DDoS protection, and why might you need both in front of a public web service?Go Pro
- What does TLS give you for traffic in transit, and what does a client actually verify during the handshake?Go Pro
- Why is identity-based microsegmentation preferred over IP-based firewall rules for east-west traffic in a dynamic cloud environment, and what does it buy you?Go Pro
- What's the difference between AWS security groups and network ACLs, and how do you use them together in a VPC?Go Pro
- Most teams lock down what can reach their service, but leave outbound traffic wide open. How would you control egress from a cloud workload, and why does it matter for stopping data exfiltration?Go Pro
- What is network segmentation, and why does limiting east-west (service-to-service) traffic matter even inside a 'private' network?Go Pro
- When would you push mutual TLS down into a service mesh versus handling service-to-service authentication in the application layer, and what are the trade-offs?Go Pro
Want questions matched to your role? Paste a job title, job description, or CV for a personalized set, or go Pro to unlock the full bank.