CCD Network Security 1 — Questions and Answers
Question 1: Which of the following best describes the purpose of a firewall in a network?
- To detect viruses on a local computer.
- To monitor employee productivity.
- To encrypt data across the network.
- To control access to and from the network. (Correct answer)
Correct answer: To control access to and from the network.
A firewall serves as a critical security barrier that monitors and filters incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to control access to and from a network, preventing unauthorized access and protecting internal systems from external threats. It acts as a gatekeeper, allowing only legitimate traffic to pass.
Question 2: Which protocol is commonly used to securely access a remote system?
- FTP
- Telnet
- SSH (Correct answer)
- HTTP
Correct answer: SSH
SSH (Secure Shell) is a cryptographic network protocol that enables secure remote access to computers over an unsecured network. It provides strong authentication and encrypts all communication between the client and server, protecting against eavesdropping and tampering. This makes it the preferred protocol for remote administration and secure file transfers.
Question 3: What does the principle of least privilege entail in network security?
- Allowing users full access to all systems.
- Providing the minimum access necessary for tasks. (Correct answer)
- Allowing administrators to share credentials.
- Disabling security measures for trusted users.
Correct answer: Providing the minimum access necessary for tasks.
The principle of least privilege is a fundamental security concept that dictates users, programs, or processes should be granted only the minimum access necessary to perform their intended functions. By limiting permissions, this principle minimizes the potential damage that could result from a security breach, error, or malicious activity. It reduces the attack surface and the impact of compromises.
Question 4: What is the main function of an Intrusion Detection System (IDS)?
- To prevent unauthorized access to files.
- To stop all malware from entering the network.
- To monitor and alert on potential threats. (Correct answer)
- To replace firewalls in perimeter defense.
Correct answer: To monitor and alert on potential threats.
An Intrusion Detection System (IDS) is designed to continuously monitor network traffic or system activities for malicious activity or policy violations. Upon detecting suspicious patterns or known attack signatures, the IDS generates alerts to security personnel. Its main function is to identify potential threats and provide warnings, rather than actively blocking them.
Question 5: Which device is used to connect multiple networks together and direct traffic between them?
- Switch
- Router (Correct answer)
- Hub
- Modem
Correct answer: Router
A router is a networking device that connects multiple networks together and directs data packets between them. It operates at the network layer (Layer 3) of the OSI model, using IP addresses to determine the best path for data to travel. Routers are essential for enabling communication between different local area networks (LANs) and connecting them to wider networks like the internet.
Question 6: Why is it important to segment a network?
- To allow unrestricted access to all users.
- To reduce network speed.
- To isolate sensitive areas and control traffic. (Correct answer)
- To make the network structure simpler.
Correct answer: To isolate sensitive areas and control traffic.
Network segmentation involves dividing a computer network into smaller, isolated sub-networks or segments. This practice is crucial for enhancing security by isolating sensitive areas and controlling traffic flow between different parts of the network. If one segment is compromised, the breach is contained, preventing it from spreading to other critical areas.
Question 7: Which tool is commonly used for network traffic analysis?
- Wireshark (Correct answer)
- Nmap
- Kali Linux
- Metasploit
Correct answer: Wireshark
Wireshark is a widely used, open-source packet analyzer that allows users to capture and interactively browse network traffic in real-time. It provides detailed information about individual data packets, making it an invaluable tool for network troubleshooting, analysis, protocol development, and security auditing. It helps identify network issues and potential security threats.
Question 8: Which of the following best describes a VPN?
- A network protocol used for DNS.
- A tool for increasing internet speed.
- A secure connection over a public network. (Correct answer)
- A method for physical cable testing.
Correct answer: A secure connection over a public network.
A Virtual Private Network (VPN) creates a secure, encrypted connection, often referred to as a 'tunnel,' over a less secure public network like the internet. This allows users to send and receive data securely and privately, as if their devices were directly connected to a private network. VPNs are used to protect online privacy, bypass geo-restrictions, and secure remote access to corporate networks.
Question 9: Which method enhances security by verifying a user’s identity with more than one factor?
- Using a strong password only.
- Multi-factor authentication (Correct answer)
- Relying on IP filtering.
- Applying software updates regularly.
Correct answer: Multi-factor authentication
Multi-factor authentication (MFA) is a security method that requires users to provide two or more distinct verification factors to prove their identity before gaining access. These factors typically include something the user knows (e.g., password), something the user has (e.g., phone, token), and/or something the user is (e.g., fingerprint). MFA significantly enhances security by making it much harder for unauthorized users to access accounts.
CCD Network Security 1
Which of the following best describes the purpose of a firewall in a network?