Network Security & Protocols Flashcards

What is a Distributed Denial of Service (DDoS) attack?

Answer: Multiple compromised systems flood a target with traffic to make it unavailable

A DDoS attack overwhelms a target's resources by directing massive traffic from many sources simultaneously, causing service disruption.

What is a zero-day vulnerability?

Answer: A security flaw that is unknown to the vendor and has no available patch

A zero-day is an unknown vulnerability that attackers can exploit before the vendor is aware and can release a patch.

What is SQL injection?

Answer: Inserting malicious SQL code into input fields to manipulate a database

SQL injection exploits insufficient input validation to insert rogue SQL statements that can read, modify, or delete database data.

What is a botnet?

Answer: A collection of compromised devices controlled remotely by an attacker

A botnet is a group of malware-infected machines (bots) under the control of a threat actor, often used for DDoS attacks, spam, or credential stuffing.

What does SIEM stand for and what is its primary function?

Answer: Security Information and Event Management — aggregates logs for real-time security monitoring

SIEM platforms collect and correlate logs from across the environment to detect anomalies, generate alerts, and support incident investigations.

What distinguishes ransomware from other types of malware?

Answer: It encrypts the victim's data and demands payment for the decryption key

Ransomware encrypts files or locks systems and extorts the victim for a ransom, usually in cryptocurrency, to restore access.

What is the purpose of a network honeypot?

Answer: To act as a decoy system that lures attackers and gathers intelligence on their tactics

A honeypot is a deliberately vulnerable decoy resource that attracts attackers, allowing defenders to study attack techniques without risk to real systems.