Network and Security Administration Flashcards

Which protocol uses port 443 by default for encrypted web traffic?

Answer: HTTPS

HTTPS (HTTP Secure) uses TLS encryption and listens on TCP port 443 by default.

What does a stateful firewall track that a stateless packet filter does not?

Answer: Active connection state

Stateful firewalls maintain a connection table to track the state of active sessions, allowing them to make smarter allow/deny decisions.

An administrator needs to segment a physical network into multiple isolated broadcast domains. Which technology achieves this?

Answer: VLAN

VLANs (Virtual Local Area Networks) logically segment a switch into multiple isolated broadcast domains without requiring separate physical hardware.

Which type of VPN creates an encrypted tunnel between two routers to connect entire office networks?

Answer: Site-to-site VPN

Site-to-site VPNs connect two networks (e.g., branch offices) by establishing a persistent encrypted tunnel between gateway devices.

What is the primary purpose of Network Address Translation (NAT)?

Answer: Map private IP addresses to a public IP address

NAT translates private internal IP addresses to a public IP address, conserving IPv4 address space and masking internal topology.

Which attack exploits trust relationships by forging ARP replies to redirect traffic to a malicious host?

Answer: ARP poisoning

ARP poisoning sends forged ARP replies to associate the attacker's MAC address with a legitimate IP, intercepting traffic on the local network.

An IDS detects suspicious traffic but takes no automatic blocking action. What differentiates an IPS from an IDS?

Answer: An IPS can actively block or drop malicious traffic

An Intrusion Prevention System (IPS) is inline with traffic and can actively drop or block packets, whereas an IDS only monitors and alerts.