CSX Network Security Fundamentals Flashcards

Which protocol operates at the network layer and is commonly exploited in IP spoofing attacks?

Answer: IP

IP (Internet Protocol) operates at the network layer and lacks built-in authentication, making it vulnerable to spoofing attacks.

What is the primary purpose of a demilitarized zone (DMZ) in network security architecture?

Answer: To isolate public-facing services from the internal network

A DMZ is a perimeter network segment that hosts public-facing services, preventing direct access to the internal network.

Which type of firewall inspects traffic up to the application layer, including packet payload content?

Answer: Next-generation firewall (NGFW)

Next-generation firewalls perform deep packet inspection at the application layer, enabling content-aware filtering.

What does the principle of network segmentation primarily help prevent?

Answer: Lateral movement by attackers within the network

Network segmentation limits an attacker's ability to move laterally between systems after an initial breach.

Which ISACA CSX domain emphasizes the ability to continuously monitor networks for anomalous behavior?

Answer: Detect

The Detect domain focuses on continuous monitoring and anomaly detection to identify cybersecurity events.

What is a key security advantage of using VLANs in enterprise network design?

Answer: They logically separate broadcast domains to limit exposure

VLANs create logical network segments that contain broadcast traffic and reduce the attack surface between different user groups.