Network Security & Protocols Flashcards
7 cards from real TOC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Network Security & Protocols flashcards as text
Which firewall type inspects the state of active connections and uses this context to make filtering decisions?
Answer: Stateful inspection firewall
A stateful inspection firewall tracks the state of network connections and uses that context to determine whether packets are part of a legitimate session.
A company wants to ensure all remote workers' traffic is encrypted before it reaches the corporate network. Which protocol is MOST appropriate?
Answer: IPsec VPN
IPsec VPN encrypts all IP traffic between the remote device and the corporate network, making it the standard solution for secure remote access.
What does the principle of 'defense in depth' mean in network security?
Answer: Layering multiple security controls so that failure of one doesn't compromise the whole system
Defense in depth means implementing multiple overlapping security layers so that an attacker must bypass each one independently, reducing the risk of a single point of failure.
Which protocol provides secure, encrypted remote command-line access to a network device?
Answer: SSH
SSH (Secure Shell) encrypts the entire session including authentication, replacing plaintext protocols like Telnet for remote administration.
An organization notices unusual outbound traffic spikes at 3 AM daily. What type of threat does this MOST likely indicate?
Answer: Data exfiltration by malware or a compromised host
Regular, off-hours outbound traffic spikes are a classic indicator of malware performing scheduled data exfiltration to a command-and-control server.
Which network segmentation technique limits the spread of a breach by isolating groups of systems with similar security requirements?
Answer: VLAN segregation
VLANs (Virtual Local Area Networks) logically separate network segments, limiting lateral movement by an attacker who has compromised one segment.
What is the primary security risk of using default credentials on network devices such as routers and switches?
Answer: Unauthorized access since default passwords are publicly documented
Default credentials for network equipment are published by manufacturers and widely known, making any device left with them trivially accessible to attackers.