How should I use these Network and Communications Security practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

SSCP · topic practice

Network and Communications Security practice questions

Q: Can I practise just Network and Communications Security questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Network and Communications Security domain.

Practise Systems Security Certified Practitioner SSCP Network and Communications Security practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Network and Communications Security

Practice 10 questions Browse domain →

What the exam tests

What to know about Network and Communications Security

Network and Communications Security questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Network and Communications Security exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Network and Communications Security questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Network and Communications Security explanation →

Which protocol and port combination is commonly used for secure remote administration of a server?

Trap 1: HTTPS on TCP 443

HTTPS is for web traffic, not typically used for command-line administration.

Trap 2: Telnet on TCP 23

Telnet transmits data in cleartext and is not considered secure.

Trap 3: RDP on TCP 3389

RDP is for remote desktop access, not command-line administration.

Study all Network and Communications Security common traps →

A
HTTPS on TCP 443
Why wrong: HTTPS is for web traffic, not typically used for command-line administration.
B
Telnet on TCP 23
Why wrong: Telnet transmits data in cleartext and is not considered secure.
C
RDP on TCP 3389
Why wrong: RDP is for remote desktop access, not command-line administration.
D
SSH on TCP 22
SSH is the standard secure remote administration protocol.

Network and Communications Security practice questions

What to know about Network and Communications Security

Common Network and Communications Security exam traps

Network and Communications Security questions

Which protocol and port combination is commonly used for secure remote administration of a server?

A security analyst notices an unusual number of ARP replies on the network where one MAC address is claiming to be multiple IP addresses. Which type of attack is most likely occurring?

A company wants to deploy a firewall that can track the state of active connections and make decisions based on the context of traffic flows. Which firewall type should they choose?

During a wireless penetration test, an attacker captures the four-way handshake of a WPA2-PSK network and attempts to crack the passphrase offline. Which attack is the attacker likely using?

Which protocol is used for secure web browsing and operates on TCP port 443?

An organization wants to ensure that only authorized devices can connect to the corporate wired network. Which technology should they implement to enforce this?

A network administrator wants to block all inbound traffic except for web and email services. Which firewall rule configuration would achieve this?

Which of the following is a characteristic of TLS 1.3 that improves security over previous versions?

Which attack sends a flood of forged ICMP echo requests to a network's broadcast address to overwhelm a target?

A company is deploying a VPN for remote employees. They require strong encryption and authentication, and the solution must be compatible with native OS clients without additional software. Which VPN protocol is most appropriate?

During a security audit, a penetration tester successfully extracts the PMKID from a wireless beacon. What information can be derived from this attack?

Which UDP port is used by the Simple Network Management Protocol (SNMP) for receiving traps?

A security engineer is designing a network segmentation strategy to isolate a DMZ containing public-facing web servers from the internal corporate network. Which TWO controls should be implemented? (Select two)

A company is migrating from WPA2 to WPA3 for wireless security. Which THREE features does WPA3 introduce? (Select three)

A network administrator is troubleshooting a DNS poisoning attack. Which TWO countermeasures can help prevent such attacks? (Select two)

Which of the following network protocols operates on TCP port 22 and provides secure remote administration of network devices?

An attacker sends a flood of DHCP request packets with spoofed MAC addresses to exhaust the DHCP server's IP address pool, preventing legitimate clients from obtaining IP addresses. This attack is known as:

During a penetration test, a security analyst captures a packet containing a gratuitous ARP reply that associates the attacker's MAC address with the default gateway's IP address. This is a classic indicator of which attack?

Which of the following wireless security protocols uses AES-CCMP and is based on the 802.11i standard?

A security administrator is configuring a VPN between two branch offices. The requirement is to encrypt the entire original IP packet and add a new IP header for routing over the internet. Which IPsec mode should be used?

Track your progress over time

Start a Network and Communications Security only practice session

Related SSCP topic practice pages

Access Controls practice questions

Risk Identification, Monitoring, and Analysis practice questions

Incident Response and Recovery practice questions

Security Operations and Administration practice questions

Cryptography practice questions

Network and Communications Security practice questions

Systems and Application Security practice questions

Risk Identification, Monitoring and Analysis practice questions

SSCP fundamentals practice questions

SSCP scenario practice questions

SSCP troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid