CND Network Defense Infrastructure Flashcards

Which type of firewall inspects the state of active connections and uses this information to determine which network packets to allow through?

Answer: Stateful inspection firewall

A stateful inspection firewall tracks the state of active network connections and makes filtering decisions based on context, not just individual packets.

What is the primary purpose of a DMZ (Demilitarized Zone) in network architecture?

Answer: To isolate public-facing servers from the internal network

A DMZ is a network segment that isolates publicly accessible servers (like web and mail servers) from the trusted internal network, limiting exposure if those servers are compromised.

Which VPN protocol is widely considered the most secure for site-to-site enterprise VPN connections due to its robust authentication and encryption?

Answer: IPSec IKEv2

IPSec with IKEv2 provides strong mutual authentication, perfect forward secrecy, and is highly resilient to network changes, making it the preferred choice for enterprise VPNs.

What network segmentation technique uses logical partitioning within a single physical network to separate traffic by function or department?

Answer: VLAN

VLANs (Virtual Local Area Networks) allow a single physical switch infrastructure to be logically divided into multiple isolated broadcast domains, limiting lateral movement of threats.

An IDS placed in-line with network traffic that can actively block detected threats is best described as:

Answer: IPS

An Intrusion Prevention System (IPS) sits inline in the traffic path and can automatically drop malicious packets or block connections, unlike a passive IDS that only detects and alerts.

Which proxy server type hides the identity of internal clients by substituting its own IP address in outbound requests?

Answer: Forward proxy

A forward proxy acts on behalf of internal clients making outbound requests, masking their identities and providing content filtering, caching, and access control.