Network Security Flashcards
6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Network Security flashcards as text
What is the primary purpose of a firewall?
Answer: To control incoming and outgoing network traffic based on security rules
A firewall controls network traffic by allowing or blocking connections based on predefined security rules.
What does a VPN (Virtual Private Network) primarily provide?
Answer: Encrypted tunnels for secure remote access over untrusted networks
A VPN creates an encrypted tunnel between a user and a network, providing secure remote access and protecting data in transit.
What is a DMZ (Demilitarized Zone) in network security?
Answer: A segment that hosts public-facing servers while isolating them from the internal network
A DMZ is a network segment that hosts public-facing services (like web servers) while isolating them from the internal corporate network.
What is network segmentation?
Answer: Dividing a network into smaller, isolated subnetworks to improve security
Network segmentation divides a network into smaller subnetworks to improve security, performance, and limit the spread of attacks.
What is the purpose of an Intrusion Detection System (IDS)?
Answer: To monitor network traffic and generate alerts on suspicious activity
An IDS monitors network traffic and system activity, generating alerts when it detects patterns that may indicate an attack.
What does the principle of 'zero trust' mean in network security?
Answer: Never trusting any user or device by default and always requiring verification
Zero trust means that no user, device, or network segment is inherently trusted — every access request must be verified regardless of its origin.