Practice network security vocabulary: WAF, security groups, NACLs, DDoS protection, CIDR blocks, and AWS network security services.
0 / 14 completed
1 / 14
'The WAF ___ the request as potential SQL injection.' Which verb fits?
A WAF (Web Application Firewall) 'blocks' requests that match attack patterns like SQL injection. 'Blocked' is the standard term in WAF logs and dashboards.
2 / 14
'The security group allows inbound ___ only.' Which port number represents HTTPS?
Port 443 is HTTPS. Security groups in AWS are stateful firewalls that control inbound/outbound traffic at the instance level. Allowing only port 443 means only HTTPS traffic is accepted.
3 / 14
What is a NACL in AWS networking?
A NACL (Network Access Control List) is a stateless firewall applied at the subnet level in AWS VPCs. Unlike security groups, NACLs evaluate both allow and deny rules and are stateless.
4 / 14
'We're using AWS ___ for DDoS protection.' Which service name fits?
AWS Shield is the DDoS protection service. Shield Standard is free and automatic; Shield Advanced provides enhanced protection, 24/7 DDoS response team access, and cost protection.
5 / 14
What is a CIDR block in network security rules?
CIDR (Classless Inter-Domain Routing) notation defines IP address ranges. '10.0.0.0/16' covers 65,536 addresses. Security rules use CIDR to allow or deny traffic from specific IP ranges.
6 / 14
Sarah from the security team commented on your pull request: 'The WAF blocked this request as potential SQL injection.' Which verb best describes what the WAF did?
A WAF (Web Application Firewall) doesn't 'resolve' or 'terminate' a connection in the same way a server does. 'Blocked' accurately describes its primary function: actively preventing potentially harmful requests from reaching your application. The other options suggest actions beyond simply identifying and stopping malicious input.
7 / 14
During a Slack discussion about securing the new API endpoint, David asked: 'The security group allows inbound 80 only.' Which protocol does this port number typically represent?
Port 80 is the standard port number used by HTTP (Hypertext Transfer Protocol) for unencrypted web traffic. While TLS often uses port 443, many applications still use 80 for initial connections that then upgrade to HTTPS. It's important to distinguish between the protocol and the specific port.
8 / 14
As part of a project documentation update, you need to explain what a NACL (Network Access Control List) is in AWS networking. Which definition is the most accurate?
An NACL is a fundamental component of AWS networking. It functions like a firewall at the subnet level, allowing you to define rules that dictate which traffic can enter or leave your instances based on criteria such as source IP address, destination port, and protocol. It's distinct from a VPC route table or monitoring tools.
9 / 14
You are writing a PR description for a security change: 'We've updated the firewall rules to include CIDR block 192.168.1.0/24.' What does this CIDR notation represent?
CIDR (Classless Inter-Domain Routing) notation is used to define an IP address range. `192.168.1.0/24` specifies a subnet that includes all IP addresses from `192.168.1.0` through `192.168.1.255`. The `/24` indicates the number of bits used for the network portion, defining the size of the subnet.
10 / 14
A security analyst is investigating a potential data breach. They discover that an external IP address has been repeatedly attempting to access sensitive files on the server. Which of the following actions best describes the implementation of a firewall rule designed to mitigate this risk? The firewall blocked all traffic from the offending IP address, preventing further unauthorized access.
A firewall rule designed to prevent unauthorized access would typically block traffic originating from the malicious IP address. Rate limiting is a different strategy for managing bandwidth and preventing denial-of-service attacks. While an IDS can detect suspicious activity, it doesn't directly block traffic. Increasing server memory wouldn't solve the immediate security issue.
11 / 14
You are configuring a VPN connection for your remote team. What does the term 'tunneling' primarily refer to in this context? The process of creating an encrypted pathway between devices to transmit data securely over a public network.
Tunneling is the core function of a VPN. It creates an encrypted pathway – a 'tunnel' – through which data travels, protecting it from eavesdropping and ensuring confidentiality. The other options represent related functionalities or optimizations within the VPN setup.
12 / 14
A developer is reviewing a colleague's code that uses a public API. What does it mean to 'sanitize' the data received from this API before using it in an application? To remove potentially malicious characters or code snippets embedded within the data to prevent injection attacks.
Data sanitization is crucial when dealing with external APIs. It involves removing potentially harmful elements—like SQL injection or cross-site scripting (XSS) payloads—that could be injected into your application if the data isn't properly processed. Validation focuses on ensuring data *meets requirements*, not removing malicious content.
13 / 14
During a security audit, you discover that a server is running with excessive permissions. What is the primary risk associated with this situation? An attacker could potentially gain unauthorized access to sensitive data and compromise the entire system.
Overly permissive access rights grant an attacker a significantly increased opportunity to escalate privileges and gain control of the system. This could lead to data theft, malware installation, or complete system compromise. While other issues might arise from excessive permissions, they are secondary risks.
14 / 14
A security engineer is explaining the concept of 'least privilege' to a junior developer. What does this principle advocate for? Granting users and applications only the minimum level of access necessary to perform their tasks.
The principle of least privilege is a foundational security practice. By limiting access rights, you reduce the potential damage if an account is compromised or if a user makes a mistake. It's a core defense against unauthorized actions and data breaches.
What does the "Network Security Vocabulary" exercise cover?
Practice network security vocabulary: WAF, security groups, NACLs, DDoS protection, CIDR blocks, and AWS network security services.
Is this exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is free to use with no account, sign-up, or paywall.
How many questions are in "Network Security Vocabulary"?
This exercise has 14 questions. Each one gives instant feedback with an explanation, so you can see exactly why an answer is right or wrong.
Do I need to create an account to save my progress?
No account is required. The progress bar and score are tracked in your browser for the current session -- the exercise is designed to be a quick, repeatable drill rather than something you resume later.
What happens if I get an answer wrong?
You'll see the correct answer highlighted immediately, along with a short explanation of why it's correct. Wrong answers aren't penalized beyond your score, and you can keep going through every question.
How is this exercise different from reading an article?
Articles explain vocabulary and concepts through prose, while exercises like this one are interactive drills -- multiple-choice questions -- that test and reinforce your recall of specific terms and phrasing.
Can I retry this exercise?
Yes -- use the "Try again" button on the results screen to reset your score and go through all the questions again from the start.
Where can I find more Networking Language exercises?
Browse the full Networking Language hub for related drills, or check the site-wide exercises index for other IT English topics.
Is this exercise suitable for beginners?
This exercise assumes basic familiarity with IT terminology. If a term feels unfamiliar, check the site Glossary for a plain-English definition before attempting the questions.
How often is new content like this published?
New exercises are added regularly across all categories, alongside new vocabulary sets and articles. Check back on the exercises hub to see what's new.