Computer Networks & Security Flashcards
6 cards from real B.S.W.E. Bachelor of Software Engineering practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Computer Networks & Security flashcards as text
What is the three-way handshake in TCP?
Answer: A three-step process (SYN, SYN-ACK, ACK) for establishing a TCP connection between client and server
The TCP three-way handshake establishes a connection: the client sends SYN, the server responds with SYN-ACK, and the client sends ACK to confirm.
What does OAuth 2.0 provide in web security?
Answer: An authorization framework allowing third-party apps to access user resources without exposing credentials
OAuth 2.0 is an authorization framework that enables users to grant third-party applications limited access to their accounts on another service without sharing passwords.
Which concept in network security refers to granting users only the minimum permissions necessary to perform their job?
Answer: Principle of Least Privilege
The Principle of Least Privilege restricts users, processes, and systems to only the access rights they need to perform their authorized tasks, limiting the damage from mistakes or attacks.
What is a Man-in-the-Middle (MITM) attack?
Answer: An attacker who secretly intercepts and potentially alters communications between two parties
In a MITM attack, an adversary positions themselves between the communicating parties to eavesdrop on or alter the messages being exchanged.
What is the function of an SSL/TLS certificate?
Answer: To authenticate the identity of a website and enable encrypted communication via public key infrastructure
An SSL/TLS certificate binds a public key to the identity of a website (verified by a Certificate Authority), enabling encrypted HTTPS connections and proving the site's authenticity.
What does 'hashing' accomplish in the context of password storage?
Answer: It transforms a password into a fixed-length, irreversible digest so the original password is never stored
Hashing applies a one-way function to passwords, storing only the hash so that even if the database is breached, the original passwords cannot be recovered.