Security Protocols & Network Access Control Flashcards

What is the role of WPA3 encryption in network security?

Answer: To provide stronger encryption and protection against attacks on the wireless network

WPA3 (Wi-Fi Protected Access 3) is the latest standard for securing wireless networks, offering significant advancements over WPA2. It introduces more robust encryption algorithms, enhanced protection against dictionary attacks, and improved privacy features like Opportunistic Wireless Encryption (OWE) for open networks. These features make WPA3 crucial for safeguarding sensitive data and preventing unauthorized access to wireless communications.

Why is network access control (NAC) important in wireless networking?

Answer: To enforce security policies and prevent unauthorized access to the network

Network Access Control (NAC) is vital in wireless networking for maintaining security. It acts as a gatekeeper, ensuring that only authorized and compliant devices and users can connect to the network. NAC solutions enforce security policies, perform device posture checks, and assign appropriate access privileges, thereby preventing unauthorized access and mitigating potential threats from compromised or non-compliant devices.

What is the purpose of a VLAN in network security?

Answer: To segment the network into isolated subnets, improving security and traffic management

A Virtual Local Area Network (VLAN) is a logical segmentation of a network, allowing devices connected to the same physical switch to be grouped into separate broadcast domains. This segmentation enhances security by isolating different types of traffic or user groups, preventing unauthorized access between segments. It also improves traffic management by reducing broadcast traffic within each segment and allowing for more efficient resource allocation.

What does RADIUS authentication provide in network security?

Answer: To provide centralized authentication, authorization, and accounting for network access

RADIUS (Remote Authentication Dial-In User Service) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users and devices connecting to a network. This means it verifies user identities, determines what resources they can access, and tracks their network usage. By centralizing these functions, RADIUS simplifies network administration and enhances security.

What role does a firewall play in network security?

Answer: To filter traffic and prevent unauthorized access to the network

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary role is to filter out malicious or unauthorized traffic, preventing it from reaching internal network resources. This protection is crucial for safeguarding against various cyber threats and ensuring network integrity.

How does an Intrusion Detection System (IDS) contribute to network security?

Answer: To monitor network traffic and alert administrators about potential security threats

An Intrusion Detection System (IDS) continuously monitors network traffic for suspicious activity or policy violations. When it detects patterns indicative of a potential security threat or attack, it generates alerts for network administrators. This allows for timely investigation and response, helping to identify and mitigate threats before they cause significant damage.

Why is strong password management important in network security?

Answer: To protect the network from unauthorized access and reduce the risk of attacks

Strong password management is vital because weak or easily compromised passwords are a common entry point for unauthorized access. By using complex, unique passwords and changing them regularly, organizations significantly reduce the risk of credential theft and brute-force attacks. This practice forms a fundamental layer of defense against cyber threats, protecting sensitive data and network resources.

What is the role of SSL/TLS encryption in network security?

Answer: To secure data transmission and protect sensitive information from interception

SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption creates a secure, encrypted connection between a client and a server over a network. This ensures that data transmitted between them remains confidential and cannot be intercepted or tampered with by unauthorized parties. It is essential for protecting sensitive information like login credentials, financial data, and personal details during online transactions and communications.

What does two-factor authentication (2FA) provide in network security?

Answer: It adds an additional layer of security by requiring two forms of identification

Two-factor authentication (2FA) enhances security by requiring users to provide two different forms of identification before granting access. This typically combines something the user knows (like a password) with something the user has (like a phone or hardware token) or something the user is (like a fingerprint). Even if one factor is compromised, the second factor prevents unauthorized access, significantly reducing the risk of account breaches.