CSS Network Security & Architecture Flashcards
6 cards from real CSS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CSS Network Security & Architecture flashcards as text
Which VPN technology is commonly recommended for modern enterprise deployments due to its simplicity and performance?
Answer: WireGuard
WireGuard is a modern VPN protocol known for its lean codebase, high performance, and strong cryptographic defaults.
What does the term 'east-west traffic' refer to in data center network security?
Answer: Lateral traffic between servers within the same data center
East-west traffic refers to internal server-to-server communication, which is a key focus for micro-segmentation strategies.
Which security mechanism prevents a compromised VLAN from accessing other VLANs through switch exploitation?
Answer: Disabling trunk negotiation and using dedicated native VLANs
Disabling Dynamic Trunking Protocol and setting a dedicated unused native VLAN prevents VLAN hopping attacks.
What is the primary role of an intrusion prevention system (IPS) compared to an IDS?
Answer: An IPS can actively block malicious traffic, while an IDS only detects and alerts
An IPS sits inline with traffic and can drop or block malicious packets, whereas an IDS is passive and only generates alerts.
Which technique do security teams use to capture and analyze network packets for forensic investigation?
Answer: Packet capture (PCAP) analysis
PCAP files capture raw network traffic that analysts can replay and inspect using tools like Wireshark during investigations.
What network security control is designed to detect and prevent unauthorized wireless access points?
Answer: Wireless intrusion prevention system (WIPS)
A WIPS monitors the radio frequency spectrum to detect rogue access points and automatically mitigate them.