Network Security Controls & Protocols Flashcards

What is the primary purpose of firewalls in network security?

Answer: To act as a barrier and filter network traffic based on security rules

Firewalls are fundamental network security devices that monitor and control incoming and outgoing network traffic. They establish a barrier between a trusted internal network and untrusted external networks, filtering data packets based on predefined security rules. This ensures only authorized traffic can pass, protecting the network from unauthorized access and malicious attacks.

Which of the following protocols is used to secure communications on the internet?

Answer: TLS (Transport Layer Security)

TLS (Transport Layer Security) is a cryptographic protocol designed to provide communication security over a computer network. It is widely used for securing web browsing (HTTPS), email, and other data transfers, ensuring data privacy and integrity between communicating applications. HTTP, FTP, and Telnet are older protocols that either lack inherent security or are less secure.

What is the function of Intrusion Detection Systems (IDS)?

Answer: To monitor and alert on suspicious activities or breaches

Intrusion Detection Systems (IDS) are security tools that continuously monitor network or system activities for malicious activities or policy violations. When suspicious patterns or known attack signatures are detected, an IDS generates alerts to security personnel. Its primary role is to detect and notify, rather than to actively block traffic.

How does Virtual Private Network (VPN) enhance network security?

Answer: By securing the connection and encrypting data transmission

A Virtual Private Network (VPN) creates a secure, encrypted connection over a less secure network, such as the internet. It encrypts all data transmitted between the user's device and the VPN server, making it unreadable to unauthorized parties. This ensures privacy and protects sensitive information from eavesdropping and tampering, effectively extending a private network across a public one.

Which network security measure is used to authenticate users based on their physical characteristics?

Answer: Biometric authentication

Biometric authentication verifies a user's identity based on unique physical or behavioral characteristics. Examples include fingerprints, facial recognition, iris scans, or voice patterns. This method offers a high level of security because biometric traits are difficult to replicate or steal, making it a robust way to authenticate users.

What does encryption do in the context of network security?

Answer: It encodes data to prevent unauthorized access

Encryption is the process of converting information or data into a code to prevent unauthorized access. It transforms plaintext into ciphertext using an algorithm and a key, making the data unreadable to anyone without the correct decryption key. This ensures confidentiality and protects sensitive information during storage and transmission.

What is the role of a network access control (NAC) system?

Answer: To enforce security policies and control access based on device compliance

Network Access Control (NAC) systems manage and enforce security policies for devices attempting to connect to a network. NAC checks devices for compliance with security policies, such as having up-to-date antivirus software or specific operating system patches, before granting or denying network access. This ensures that only healthy and authorized devices can connect, reducing the risk of malware spreading.

What is the primary function of a Demilitarized Zone (DMZ) in a network?

Answer: To provide a secure zone for public-facing services while protecting internal networks

A Demilitarized Zone (DMZ) is a perimeter network that separates an organization's internal local area network (LAN) from an untrusted external network, like the internet. It hosts public-facing services such as web servers, email servers, and DNS servers. This design allows external users to access these services without directly exposing the internal network, adding an extra layer of security.

What is the role of a security policy in a network security plan?

Answer: To define rules for protecting network resources and ensure consistent security practices

A security policy is a formal statement that outlines the rules, procedures, and guidelines for protecting an organization's information and network assets. It defines acceptable use, access controls, incident response procedures, and other security practices. This ensures a consistent approach to security, helps employees understand their responsibilities, and provides a framework for compliance.