CISSP Domain 4 practice questions
Communication and Network Security
Domain 4 checks that you can secure networks by design, not just name protocols. Expect OSI layer mapping, segmentation, secure protocol choice, wireless security and modern architectures such as SDN and micro-segmentation. Think about where a control sits and what traffic it can actually see.
Sample Domain 4 questions
An enterprise wants Wi-Fi where each user authenticates with their own credentials and access can be revoked individually. What should it deploy?
Which IPsec configuration provides confidentiality of the original IP header between two gateways?
An attacker on the same switch is intercepting traffic by sending forged ARP replies. Which control BEST mitigates this?
Common Domain 4 traps
- Placing a control at the wrong OSI layer (e.g. expecting a stateless packet filter to inspect application content).
- Choosing WPA2-PSK for an enterprise where individual accountability is required.
- Forgetting that TLS protects data in transit only, not at rest on the endpoint.
Key concepts to master
- OSI and TCP/IP models, protocol-to-layer mapping
- Firewalls: packet filter, stateful, proxy, NGFW
- VPNs, IPsec (AH vs ESP, transport vs tunnel)
- Wireless: WPA3, 802.1X/EAP
- Segmentation, DMZ, VLANs, SDN, zero trust networking
Need the theory first? Read the CISSP Domain 4 study guide.
Find out where you stand
Start with the free 10-question CISSP practice test — no signup. Then create a free account for Practice Mode, or go Pro for Domain Quick-Fire, CAT-style adaptive exams and readiness analytics.