ACSP Network Security & Traffic Management — Questions and Answers

Question 1: What is the purpose of a firewall?

Preventing unauthorized access
Speeding up network traffic
Encrypting data
Assigning IP addresses

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to prevent unauthorized access to or from a private network. By filtering traffic, firewalls protect against various cyber threats and enforce network security policies.

Question 2: What does SSL/TLS encryption provide?

Authentication
Confidentiality
Data integrity
All of the above

SSL/TLS encryption provides a comprehensive suite of security features for communication over a network. It ensures confidentiality by encrypting data, preventing eavesdropping. It also provides data integrity, guaranteeing that data has not been tampered with during transit, and authentication, verifying the identity of the communicating parties.

Question 3: What is the primary difference between IPS and IDS?

IPS detects, IDS blocks
IPS is more secure
IDS blocks traffic, IPS only detects
IDS detects, IPS blocks

The primary difference between an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS) lies in their action capabilities. An IDS is a passive system that monitors network traffic for suspicious activity and alerts administrators upon detection. In contrast, an IPS is an active system that not only detects threats but can also automatically block or prevent them in real-time by dropping malicious packets or resetting connections.

Question 4: What is the purpose of VPNs?

To speed up the internet
To secure communication over the internet
To block access to websites
To share data between users

Virtual Private Networks (VPNs) are designed to create a secure, encrypted connection over a public network, such as the internet. This secure tunnel protects data from eavesdropping and tampering, ensuring privacy and integrity for communications. VPNs are essential for remote access to corporate networks and for users seeking enhanced online privacy.

Question 5: What type of attack involves intercepting communication between two parties?

Phishing
DDoS
Man-in-the-middle
SQL injection

A Man-in-the-Middle (MITM) attack involves an attacker secretly intercepting and relaying communication between two parties. The attacker positions themselves between the two communicating entities, making them believe they are talking directly to each other, while the attacker can read, insert, or modify the data. This allows for eavesdropping and data manipulation.

Question 6: What is a common technique for preventing DDoS attacks?

Rate limiting
VPN tunneling
NAT
Packet filtering

Rate limiting is a common and effective technique for preventing Distributed Denial of Service (DDoS) attacks. It involves setting a threshold for the number of requests or connections a server or network can accept from a specific source or within a given timeframe. By restricting excessive traffic, rate limiting helps prevent the target system from being overwhelmed and ensures legitimate users can still access services.

Question 7: Which encryption standard is commonly used for wireless networks?

WEP
WPA
WPA2
TKIP

WPA2 (Wi-Fi Protected Access II) is the most widely adopted and recommended encryption standard for securing wireless networks. It uses the Advanced Encryption Standard (AES) for strong encryption, providing robust protection against unauthorized access and data interception. While WPA3 is newer, WPA2 remains the prevalent standard in use today.

Question 8: What is a security risk of using default passwords?

Better security
Easier to remember
Can be reused for multiple accounts
Security vulnerability

Using default passwords poses a significant security vulnerability because these credentials are often publicly known or easily guessed. Attackers can exploit this by trying common default passwords to gain unauthorized access to devices, networks, or accounts. This makes systems highly susceptible to breaches and compromises.

Question 9: Which protocol is commonly used to secure HTTP traffic?

FTP
HTTP
HTTPS
SMTP

HTTPS (Hypertext Transfer Protocol Secure) is the protocol commonly used to secure HTTP traffic. It combines the standard HTTP protocol with SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption. This ensures that data exchanged between a web browser and a website is encrypted, authenticated, and protected from tampering, safeguarding sensitive information.

ACSP Network Security & Traffic Management

What is the purpose of a firewall?