Security Fundamentals Flashcards

Which type of attack intercepts communication between two parties without their knowledge to steal or alter data?

Answer: Man-in-the-middle (MitM)

A man-in-the-middle attack positions the attacker between two communicating parties to eavesdrop or alter the exchanged data.

What is the primary purpose of a DMZ (demilitarized zone) in network security?

Answer: To host public-facing services while isolating the internal network

A DMZ is a network segment that hosts public-facing servers (e.g., web, email) while keeping the internal corporate network protected.

A user receives an email appearing to be from their bank asking them to verify account details via a link. This is BEST described as:

Answer: Phishing

Phishing uses deceptive emails that appear legitimate to trick users into revealing sensitive information.

Which authentication factor is represented by a fingerprint scan?

Answer: Something you are

Biometrics like fingerprints represent 'something you are,' which is an inherence factor in authentication.

What does the principle of 'defense in depth' mean in cybersecurity?

Answer: Layering multiple security controls so that if one fails, others still protect the system

Defense in depth uses multiple overlapping security layers so an attacker must bypass each one to compromise the system.

Which protocol provides secure remote access to network devices using encryption?

Answer: SSH

SSH (Secure Shell) encrypts remote terminal sessions, replacing the insecure Telnet protocol.

What is the purpose of a digital certificate in public key infrastructure (PKI)?

Answer: To bind a public key to an identity verified by a trusted CA

A digital certificate binds a public key to an entity's identity and is signed by a trusted Certificate Authority (CA) to verify authenticity.