Implementation Flashcards

What is the purpose of multifactor authentication?

Answer: Require multiple credentials

Multifactor authentication (MFA) enhances security by requiring users to provide two or more different types of credentials from independent categories to verify their identity. These categories typically include something you know (like a password), something you have (like a phone or token), and something you are (like a fingerprint). This layered approach significantly reduces the risk of unauthorized access, even if one factor is compromised, making it much harder for attackers to gain entry.

What protocol is used to securely browse websites?

Answer: HTTPS

HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP, the protocol over which data is sent between your browser and the website you are connecting to. It encrypts the communication between the client and the server using SSL/TLS, protecting data from eavesdropping and tampering. This ensures the confidentiality and integrity of information exchanged, making it safe for sensitive transactions like online banking or shopping.

What does WPA3 secure?

Answer: Wireless networks

WPA3 (Wi-Fi Protected Access 3) is the latest security standard for wireless networks, designed to provide stronger encryption and more robust authentication than its predecessors. It offers enhanced protection against brute-force attacks and improves privacy for users on public Wi-Fi networks. WPA3 secures the data transmitted over Wi-Fi, making it much harder for unauthorized parties to intercept or decrypt communications.

What is the main function of a firewall?

Answer: Control traffic

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its main function is to permit or deny data packets, protecting a private network from unauthorized access and malicious attacks. By filtering traffic according to established policies, firewalls enforce security boundaries and prevent unwanted communication.

What are access control lists (ACLs)?

Answer: Traffic control rules

Access Control Lists (ACLs) are sets of rules used to filter network traffic and control access to network resources. They specify which users or system processes are granted access to objects, as well as what operations are allowed on those objects. ACLs are crucial for enforcing security policies on routers, switches, and firewalls, determining whether packets should be forwarded or dropped based on criteria like source/destination IP addresses or port numbers.

What is the goal of network hardening?

Answer: Reduce vulnerabilities

Network hardening is the process of securing a network by reducing its attack surface and eliminating potential vulnerabilities. This involves implementing various security measures, such as disabling unnecessary services, applying security patches, configuring strong authentication, and segmenting networks. The ultimate goal is to make the network more resilient against cyber threats and unauthorized access, thereby enhancing its overall security posture.

Why isolate guest networks?

Answer: Secure main network

Isolating guest networks means creating a separate network segment for visitors or less trusted devices, distinct from the main internal network. This prevents guest devices, which may have unknown security postures, from directly accessing sensitive internal resources or potentially spreading malware to critical systems. By segmenting the network, the main network's security is significantly enhanced, limiting the blast radius of any compromise on the guest network.

What is port security?

Answer: Restrict MAC address access

Port security is a Layer 2 security feature on network switches that restricts which devices can connect to a specific switch port. It typically works by limiting the number of MAC addresses that can be learned on a port and can be configured to allow only specific MAC addresses. This prevents unauthorized devices from connecting to the network by plugging into an available port, thereby enhancing physical and network access control.

What is a secure protocol for file transfer?

Answer: SFTP

SFTP (SSH File Transfer Protocol) is a secure protocol for transferring files over an encrypted SSH (Secure Shell) connection. Unlike FTP, which sends data in plaintext, SFTP encrypts both the data and the authentication information, protecting them from eavesdropping and tampering. This makes SFTP a much safer choice for transferring sensitive files over a network, ensuring confidentiality and integrity.