CIW Security Analyst Flashcards

What is a firewall primarily used for in network security?

Answer: Monitor and control incoming and outgoing network traffic based on security rules

A firewall enforces security policies by filtering network traffic, allowing or blocking packets based on predefined rules.

What type of attack involves an attacker intercepting communication between two parties without their knowledge?

Answer: Man-in-the-Middle (MitM)

A Man-in-the-Middle attack occurs when an attacker secretly relays and potentially alters communication between two parties who believe they are communicating directly.

What is phishing?

Answer: A social engineering attack using deceptive emails or websites to trick users into revealing sensitive information

Phishing deceives victims through fraudulent emails, messages, or websites that mimic trusted entities to steal credentials or personal data.

What does authentication verify in information security?

Answer: The identity of a user or system trying to access a resource

Authentication confirms that an entity (user, device, or service) is who or what it claims to be before granting access.

What is a denial-of-service (DoS) attack?

Answer: Overwhelming a server or network with traffic to make it unavailable to legitimate users

A DoS attack floods a target system with requests, consuming resources and preventing legitimate users from accessing services.

What is the purpose of encryption in web security?

Answer: Convert data into an unreadable format to protect it from unauthorized access

Encryption transforms readable plaintext into ciphertext using an algorithm and key, making intercepted data useless to unauthorized parties.