CCST Network Security & Best Practices — Questions and Answers
Question 1: What is the function of a firewall?
- Boost speed
- Control traffic (Correct answer)
- Store data
- Assign IPs
Correct answer: Control traffic
A firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Its primary function is to establish a protective barrier between a trusted internal network and untrusted external networks, such as the internet. By filtering traffic, firewalls prevent unauthorized access and protect against various malicious attacks.
Question 2: What is a strong password characteristic?
- Only letters
- Only numbers
- Same name
- Letters, numbers, symbols (Correct answer)
Correct answer: Letters, numbers, symbols
A strong password is characterized by its complexity and length, making it significantly more difficult to guess or crack. It typically incorporates a diverse combination of uppercase and lowercase letters, numbers, and special symbols. This variety increases the password's entropy, thereby substantially enhancing its security against brute-force attacks.
Question 3: Why update firmware regularly?
- Change appearance
- Patch vulnerabilities (Correct answer)
- Delete logs
- Add users
Correct answer: Patch vulnerabilities
Regularly updating firmware, which is the embedded software on hardware devices, is critical for maintaining robust network security and optimal performance. These updates frequently include patches for newly discovered security vulnerabilities, bug fixes, and sometimes performance enhancements or new features. Neglecting firmware updates can leave devices susceptible to exploits and compromise network integrity.
Question 4: What is network segmentation?
- Increase signal
- Divide network (Correct answer)
- Extend bandwidth
- Join servers
Correct answer: Divide network
Network segmentation is an architectural practice that involves dividing a computer network into multiple smaller, isolated network segments or subnets. This strategy significantly enhances security by limiting the lateral movement of threats within the network. It also improves network performance by reducing broadcast domains and provides more granular control over network traffic flow.
Question 5: What is phishing?
- Hardware issue
- Slow loading
- Fraud for info (Correct answer)
- Spam
Correct answer: Fraud for info
Phishing is a deceptive form of social engineering attack where malicious actors attempt to trick individuals into revealing sensitive information, such as usernames, passwords, and credit card details. Attackers typically masquerade as a trustworthy entity in electronic communications, often through fraudulent emails, messages, or websites, to illicitly obtain personal data.
Question 6: What protocol secures web traffic?
- HTTP
- FTP
- HTTPS (Correct answer)
- Telnet
Correct answer: HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, the foundational protocol for data communication on the World Wide Web. It encrypts the communication between a user's browser and the website using SSL/TLS, providing crucial data integrity, authentication, and confidentiality. This encryption is essential for protecting sensitive information exchanged online, such as login credentials and financial data.
Question 7: What is the purpose of VPN?
- Speed up PC
- Fix cables
- Secure remote access (Correct answer)
- Restart router
Correct answer: Secure remote access
The primary purpose of a Virtual Private Network (VPN) is to create a secure, encrypted connection over a less secure network, like the internet. This allows users to access private network resources remotely and securely, protecting data from interception and ensuring privacy. It essentially extends a private network across a public network.
Question 8: What is two-factor authentication?
- Backup password
- Two login methods (Correct answer)
- One-time email
- Fingerprint only
Correct answer: Two login methods
Two-factor authentication (2FA) is a security process that requires users to provide two different authentication factors to verify their identity. This typically involves something the user knows (like a password) and something the user has (like a code sent to a phone) or something the user is (like a fingerprint). It significantly enhances security by making it much harder for unauthorized users to gain access, even if one factor is compromised.
Question 9: How to prevent unauthorized access?
- Ignore alerts
- Use access controls (Correct answer)
- Add bandwidth
- Clear cookies
Correct answer: Use access controls
To prevent unauthorized access, organizations implement access controls, which are security measures that regulate who can view or use resources. These controls define permissions and restrictions for users and systems, ensuring that only authenticated and authorized individuals or processes can interact with specific data or functionalities. This is fundamental for maintaining data confidentiality and system integrity.
What is the function of a firewall?