Securing Network Connections Flashcards

What is the primary function of a Virtual Private Network (VPN)?

Answer: To create an encrypted tunnel for data transmission, protecting privacy and security on untrusted networks

A VPN creates an encrypted tunnel between your device and a VPN server, protecting data from interception on untrusted networks and masking your IP address from websites.

What is the difference between WPA2 and WPA3 wireless security protocols?

Answer: WPA3 provides stronger encryption, protection against offline dictionary attacks, and individualized data encryption for each device on the network

WPA3 improves upon WPA2 with Simultaneous Authentication of Equals (SAE) that prevents offline dictionary attacks, individualized encryption per device, and mandatory Protected Management Frames.

What is ARP spoofing and how does it threaten network security?

Answer: An attack that manipulates the Address Resolution Protocol to redirect network traffic through the attacker's device

ARP spoofing sends falsified ARP messages to link the attacker's MAC address with a legitimate IP address, causing traffic intended for that IP to be sent to the attacker instead.

Why should you disable Wi-Fi auto-connect on your mobile devices?

Answer: Auto-connect may join malicious networks that impersonate trusted ones, exposing your data to attackers

Auto-connect can cause your device to join rogue access points that mimic the names of networks you have previously connected to, enabling attackers to intercept your traffic.

What is network segmentation and why is it important for security?

Answer: Dividing a network into isolated segments to contain breaches and limit attacker movement between segments

Network segmentation divides a network into separate zones with access controls between them, limiting the lateral movement of attackers and containing the impact of a security breach.

What is a DNS spoofing attack?

Answer: Corrupting DNS records to redirect users from legitimate websites to malicious ones without their knowledge

DNS spoofing (or DNS cache poisoning) corrupts DNS resolution so that queries for legitimate domain names return attacker-controlled IP addresses, silently redirecting users to malicious sites.