Network Security & Best Practices Flashcards

Which security practice involves assigning users only the permissions they need to perform their job functions?

Answer: Least privilege

The principle of least privilege limits users and processes to only the access rights they need, reducing the attack surface.

What is the function of DHCP snooping on a Cisco switch?

Answer: Prevents unauthorized DHCP servers from assigning IP addresses

DHCP snooping identifies trusted DHCP server ports and drops DHCP offers from untrusted ports, preventing rogue DHCP servers.

Which type of malware disguises itself as legitimate software to trick users into installing it?

Answer: Trojan horse

A Trojan horse is malware that masquerades as legitimate or desirable software to deceive users into executing it.

A company wants to ensure that if one employee's credentials are compromised, the attacker cannot access all systems. Which security principle best addresses this?

Answer: Network segmentation with least privilege

Combining network segmentation with least privilege limits what any single compromised account can access across the network.

What is the purpose of a honeypot in network security?

Answer: To attract and detect attackers by simulating a vulnerable system

A honeypot is a decoy system designed to lure attackers, allowing security teams to study attack methods and detect intrusions.

Which VPN protocol is commonly used for site-to-site VPN connections on Cisco routers and provides both authentication and encryption?

Answer: IPsec

IPsec is widely used for site-to-site VPNs and provides authentication, integrity, and encryption for IP traffic.

What does AAA stand for in the context of Cisco network security?

Answer: Authentication, Authorization, Accounting

AAA stands for Authentication (verifying identity), Authorization (what the user can do), and Accounting (tracking what the user did).