Security Technologies & Network Architecture Flashcards

What is the primary function of a firewall?

Answer: Control network traffic

The primary function of a firewall is to monitor and control incoming and outgoing network traffic based on predetermined security rules. It acts as a barrier between a trusted internal network and untrusted external networks, such as the internet. By filtering traffic, firewalls prevent unauthorized access and protect internal systems from various cyber threats.

Which device is used to segment a network into different subnetworks?

Answer: Router

A router is a networking device that forwards data packets between different computer networks. Its key function is to connect distinct networks and segment them into subnetworks, directing traffic efficiently and securely. Routers use IP addresses to determine the best path for data, enabling communication between various network segments and the internet.

What is the purpose of a demilitarized zone (DMZ) in network security?

Answer: Isolate public-facing systems

A Demilitarized Zone (DMZ) is a perimeter network that isolates an organization's public-facing servers (like web servers, email servers, or DNS servers) from its internal private network. By placing these systems in a DMZ, an organization can provide external users with access to certain services while protecting its core internal network from direct external threats. This acts as a buffer zone, enhancing overall network security.

Which protocol secures web communication?

Answer: HTTPS

HTTPS (Hypertext Transfer Protocol Secure) is the protocol used for secure communication over a computer network, widely used on the internet. It encrypts the data exchanged between a user's web browser and a website, protecting sensitive information like login credentials and payment details. This security is achieved through the use of Transport Layer Security (TLS).

Which tool detects unauthorized access attempts?

Answer: Intrusion Detection System (IDS)

An Intrusion Detection System (IDS) is a security tool designed to monitor network or system activities for malicious activity or policy violations. It analyzes traffic and system logs for patterns that indicate unauthorized access attempts, such as port scans or malware signatures. Upon detecting a potential threat, an IDS typically alerts administrators, allowing for timely response.

Which encryption method uses two keys?

Answer: Asymmetric encryption

Asymmetric encryption, also known as public-key cryptography, uses a pair of mathematically linked keys: a public key and a private key. The public key can be freely distributed and used to encrypt data, while only the corresponding private key can decrypt it. This method is fundamental for secure communication, digital signatures, and key exchange, as it eliminates the need to share a secret key beforehand.

Which network model layers data communication into 7 layers?

Answer: OSI model

The OSI (Open Systems Interconnection) model is a conceptual framework that standardizes the functions of a telecommunication or computing system into seven distinct layers. Each layer performs specific tasks, from the physical transmission of data (Layer 1) to application-level services (Layer 7). This layered approach helps in understanding, designing, and troubleshooting network architectures.

Which device helps manage multiple devices in a network securely?

Answer: Switch

A network switch is a device that connects multiple devices on a computer network and forwards data packets only to the intended destination device. Unlike a hub, a switch learns the MAC addresses of connected devices, creating dedicated connections and reducing network congestion. This intelligent forwarding enhances network efficiency and security by ensuring data is sent only where it needs to go.

What does VLAN stand for in networking?

Answer: Virtual LAN

VLAN stands for Virtual Local Area Network. It is a logical grouping of network devices that allows them to communicate as if they were on the same physical LAN, even if they are connected to different network switches. VLANs improve network performance, security, and management by segmenting a single physical network into multiple broadcast domains, isolating traffic and reducing broadcast storms.