CSX Network Security Fundamentals Flashcards

Which network scanning technique sends a SYN packet and waits for a SYN-ACK without completing the TCP handshake?

Answer: SYN stealth scan

A SYN stealth scan (half-open scan) identifies open ports without completing the three-way handshake, leaving fewer log traces.

What is the function of a honeypot in a network security strategy?

Answer: To lure and monitor attackers in a controlled decoy environment

A honeypot is a decoy system designed to attract attackers, allowing defenders to observe their techniques and gather intelligence.

Which port number is associated with HTTPS traffic by default?

Answer: 443

HTTPS uses port 443 by default for encrypted web traffic secured by TLS/SSL.

What does the term 'network baseline' mean in the context of cybersecurity monitoring?

Answer: A documented record of normal network behavior used to identify anomalies

A network baseline captures normal traffic patterns and behavior, enabling analysts to detect deviations that may indicate an incident.

Which wireless security protocol replaced WEP due to its critical vulnerabilities?

Answer: WPA2

WPA2 replaced WEP and uses AES-based CCMP encryption, providing significantly stronger wireless security.

In network security, what is the purpose of port-based Network Access Control (802.1X)?

Answer: To authenticate devices before granting network port access

IEEE 802.1X enforces port-based authentication, requiring devices to authenticate before network access is granted.