Network Security & Protocols Flashcards

What is multi-factor authentication (MFA)?

Answer: Requiring two or more distinct verification factors to grant access

MFA requires users to present two or more factors (something you know, have, or are) to verify identity, significantly reducing account compromise risk.

What does the principle of least privilege state?

Answer: Users and systems should have only the minimum access rights needed for their tasks

Least privilege limits damage from accidents, errors, or malicious actions by restricting access rights to only what is strictly necessary.

What is the primary function of RADIUS in network security?

Answer: To provide centralized authentication, authorization, and accounting for network access

RADIUS (Remote Authentication Dial-In User Service) centralizes AAA services, commonly used for VPN and Wi-Fi authentication.

What is Single Sign-On (SSO)?

Answer: A mechanism allowing one authentication event to grant access to multiple systems

SSO lets users authenticate once and gain access to multiple related applications without re-entering credentials for each.

What is IEEE 802.1X primarily used for in network security?

Answer: Providing port-based network access control (authentication before network access)

802.1X enforces authentication at the network access layer, requiring devices to authenticate before they can use a wired or wireless port.

Which protocol is commonly used to query and authenticate users against a directory service like Active Directory?

Answer: LDAP

LDAP (Lightweight Directory Access Protocol) is the standard protocol for accessing and maintaining distributed directory information services.

What security risk does privileged account sprawl introduce?

Answer: An expanded attack surface if any privileged account is compromised

Too many privileged accounts increase the chances that one will be compromised, and each breach grants an attacker elevated access.