Network Security & Protocols Flashcards
7 cards from real TOC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Network Security & Protocols flashcards as text
Which wireless security protocol is considered the MOST secure for modern enterprise Wi-Fi deployments?
Answer: WPA3-SAE
WPA3 with SAE (Simultaneous Authentication of Equals) provides stronger protections including resistance to offline dictionary attacks and forward secrecy, making it the most secure current standard.
What does the term 'least privilege' mean in the context of network access control?
Answer: Granting users and systems only the minimum access rights required to perform their function
The principle of least privilege limits the potential damage from compromised accounts or insider threats by ensuring each entity can access only what is strictly necessary for their role.
Which protocol provides secure, encrypted file transfer over SSH and replaces legacy FTP?
Answer: SFTP
SFTP (SSH File Transfer Protocol) runs over an SSH connection and provides encrypted, authenticated file transfer, making it the secure replacement for plaintext FTP.
A rogue DHCP server on the network is assigning itself as the default gateway to all new clients. What type of attack is this?
Answer: DHCP spoofing / rogue DHCP attack
A rogue DHCP attack involves an attacker setting up an unauthorized DHCP server that assigns malicious gateway or DNS settings, enabling man-in-the-middle interception of client traffic.
What is the main security advantage of using HTTPS over HTTP?
Answer: HTTPS encrypts data in transit and authenticates the server via TLS certificates
HTTPS uses TLS to encrypt data between the browser and server and verifies server identity via certificates, protecting against eavesdropping and man-in-the-middle attacks.
Which security mechanism prevents a switch's MAC address table from being flooded, which could force it to broadcast all traffic?
Answer: Port security / MAC limiting
Port security limits the number of MAC addresses allowed per switch port, preventing MAC flood attacks that would cause the switch to fail open and broadcast all frames to all ports.
An organization implements multi-factor authentication (MFA) for VPN access. Which combination represents a valid MFA implementation?
Answer: Password + one-time code from an authenticator app
MFA requires factors from at least two distinct categories: something you know (password) and something you have (OTP from an authenticator app), not two instances of the same category.