Networking and Security Fundamentals Flashcards

A company requires that employees authenticate using a password AND a hardware token. What concept does this describe?

Answer: Multi-factor authentication (MFA)

MFA requires two or more verification factors from different categories (something you know, have, or are).

Which SNMP version provides authentication and encryption, making it suitable for secure monitoring?

Answer: SNMPv3

SNMPv3 adds authentication (MD5/SHA) and encryption (DES/AES) features not present in earlier versions.

What is the function of a DMZ (Demilitarized Zone) in network architecture?

Answer: Provide a neutral network segment for publicly accessible servers, isolated from the internal network

A DMZ places public-facing servers (web, email, DNS) in an isolated segment, limiting exposure of the internal network if those servers are compromised.

Which protocol dynamically assigns IP addresses to clients on a network?

Answer: DHCP

DHCP (Dynamic Host Configuration Protocol) automatically assigns IP addresses, subnet masks, gateways, and DNS servers to clients.

An administrator notices repeated failed login attempts from a single IP address. Which security measure would BEST mitigate this threat?

Answer: Implement account lockout and IP-based rate limiting

Account lockout policies and IP-based rate limiting prevent brute-force attacks by blocking excessive failed authentication attempts.

What does a stateful firewall track that a stateless (packet-filtering) firewall does not?

Answer: The state of active network connections

A stateful firewall maintains a connection table and allows return traffic only for established sessions, unlike stateless firewalls that evaluate each packet independently.

Which hashing algorithm produces a 256-bit digest and is widely used for data integrity verification?

Answer: SHA-256

SHA-256 produces a 256-bit hash and is considered cryptographically strong for integrity checks and digital signatures.