Network Security & Protocols Flashcards
7 cards from real CPA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Network Security & Protocols flashcards as text
What is the main purpose of a VPN (Virtual Private Network)?
Answer: Create an encrypted tunnel over a public network for secure communication
A VPN creates an encrypted tunnel between endpoints, allowing secure communication over untrusted public networks.
What is a rainbow table attack used for?
Answer: Cracking password hashes using precomputed hash-to-plaintext mappings
A rainbow table stores precomputed hashes of common passwords, allowing an attacker to quickly reverse a stolen hash to its plaintext.
Which protocol is responsible for automatically assigning IP addresses to devices on a network?
Answer: DHCP
DHCP (Dynamic Host Configuration Protocol) dynamically assigns IP addresses, subnet masks, gateways, and DNS servers to network clients.
What is the purpose of certificate pinning in application security?
Answer: Prevent MITM attacks by hardcoding or validating a specific certificate or public key
Certificate pinning ties an application to a specific certificate or public key, rejecting connections if a different (potentially forged) certificate is presented.
What distinguishes a worm from a virus in the context of malware?
Answer: A worm self-replicates and spreads across networks without user interaction; a virus attaches to files
Worms self-propagate across networks without needing a host file or user action, while viruses attach to executable files and require user interaction to spread.
What is the function of SNMP in network management?
Answer: Monitor and manage network devices by collecting performance and status data
SNMP (Simple Network Management Protocol) allows network administrators to query, monitor, and configure managed devices such as routers, switches, and servers.
Which security concept does 'least privilege' describe?
Answer: Restricting users to only the access rights needed to perform their job functions
The principle of least privilege limits each user or process to the minimum permissions required, reducing the potential damage from accidents or attacks.