Network+ Network Security Flashcards

Which of the following is an example of network segmentation?

Answer: Using VLANs to separate departments in an organization

Network segmentation involves dividing a larger network into smaller, isolated segments to improve security and performance. Using VLANs to separate departments in an organization is a prime example, as it creates logical boundaries that restrict broadcast traffic and prevent unauthorized access between different departmental segments. This reduces the attack surface and enhances overall network manageability.

What is the purpose of a firewall in a network?

Answer: To filter and monitor incoming and outgoing network traffic

A firewall acts as a security barrier, controlling network traffic based on predefined security rules. Its primary purpose is to inspect incoming and outgoing data packets and decide whether to allow or block them, protecting a private network from unauthorized access and malicious threats from external networks. This filtering helps enforce security policies and prevent cyberattacks.

Which type of attack involves sending a flood of packets to overwhelm a target's resources?

Answer: Denial of Service (DoS)

A Denial of Service (DoS) attack aims to make a network resource unavailable to its legitimate users by overwhelming it with a flood of traffic. The attacker sends an excessive number of requests or malformed packets, consuming the target's resources like bandwidth, CPU, or memory. This prevents the server or service from responding to legitimate requests, effectively shutting it down.

What protocol is commonly used for secure remote access to network devices?

Answer: SSH

SSH (Secure Shell) is a cryptographic network protocol that allows secure remote access to computers and network devices over an unsecured network. It provides strong authentication and encrypts all communication, including passwords and data, protecting against eavesdropping and unauthorized access. Telnet, in contrast, transmits data in plain text and is considered insecure for remote management.

What is the primary purpose of a VPN?

Answer: To encrypt and secure connections over public networks

A VPN (Virtual Private Network) creates a secure, encrypted connection over a less secure network, such as the internet. It allows users to send and receive data as if their computing devices were directly connected to the private network. This provides privacy, anonymity, and security by tunneling traffic and encrypting data, protecting it from interception and surveillance.