Network Security Flashcards

Which of the following best describes the purpose of a firewall in a network?

Answer: To control access to and from the network.

A firewall serves as a critical security barrier that monitors and filters incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to control access to and from a network, preventing unauthorized access and protecting internal systems from external threats. It acts as a gatekeeper, allowing only legitimate traffic to pass.

Which protocol is commonly used to securely access a remote system?

Answer: SSH

SSH (Secure Shell) is a cryptographic network protocol that enables secure remote access to computers over an unsecured network. It provides strong authentication and encrypts all communication between the client and server, protecting against eavesdropping and tampering. This makes it the preferred protocol for remote administration and secure file transfers.

What does the principle of least privilege entail in network security?

Answer: Providing the minimum access necessary for tasks.

The principle of least privilege is a fundamental security concept that dictates users, programs, or processes should be granted only the minimum access necessary to perform their intended functions. By limiting permissions, this principle minimizes the potential damage that could result from a security breach, error, or malicious activity. It reduces the attack surface and the impact of compromises.

What is the main function of an Intrusion Detection System (IDS)?

Answer: To monitor and alert on potential threats.

An Intrusion Detection System (IDS) is designed to continuously monitor network traffic or system activities for malicious activity or policy violations. Upon detecting suspicious patterns or known attack signatures, the IDS generates alerts to security personnel. Its main function is to identify potential threats and provide warnings, rather than actively blocking them.

Which device is used to connect multiple networks together and direct traffic between them?

Answer: Router

A router is a networking device that connects multiple networks together and directs data packets between them. It operates at the network layer (Layer 3) of the OSI model, using IP addresses to determine the best path for data to travel. Routers are essential for enabling communication between different local area networks (LANs) and connecting them to wider networks like the internet.

Why is it important to segment a network?

Answer: To isolate sensitive areas and control traffic.

Network segmentation involves dividing a computer network into smaller, isolated sub-networks or segments. This practice is crucial for enhancing security by isolating sensitive areas and controlling traffic flow between different parts of the network. If one segment is compromised, the breach is contained, preventing it from spreading to other critical areas.

Which tool is commonly used for network traffic analysis?

Answer: Wireshark

Wireshark is a widely used, open-source packet analyzer that allows users to capture and interactively browse network traffic in real-time. It provides detailed information about individual data packets, making it an invaluable tool for network troubleshooting, analysis, protocol development, and security auditing. It helps identify network issues and potential security threats.

Which of the following best describes a VPN?

Answer: A secure connection over a public network.

A Virtual Private Network (VPN) creates a secure, encrypted connection, often referred to as a 'tunnel,' over a less secure public network like the internet. This allows users to send and receive data securely and privately, as if their devices were directly connected to a private network. VPNs are used to protect online privacy, bypass geo-restrictions, and secure remote access to corporate networks.

Which method enhances security by verifying a user’s identity with more than one factor?

Answer: Multi-factor authentication

Multi-factor authentication (MFA) is a security method that requires users to provide two or more distinct verification factors to prove their identity before gaining access. These factors typically include something the user knows (e.g., password), something the user has (e.g., phone, token), and/or something the user is (e.g., fingerprint). MFA significantly enhances security by making it much harder for unauthorized users to access accounts.