Network Security & Threat Mitigation Flashcards

What is the primary objective of network security?

Answer: To secure data and resources from unauthorized access

The primary objective of network security is to protect an organization's data and computing resources from unauthorized access, use, disclosure, disruption, modification, or destruction. This involves implementing various controls and measures to ensure the confidentiality, integrity, and availability of network systems and the information they transmit and store. Ultimately, it safeguards against cyber threats and maintains operational continuity.

Which of the following is a common type of network attack?

Answer: Denial-of-Service (DoS)

A common type of network attack is a Denial-of-Service (DoS) attack, which aims to make a network resource unavailable to its legitimate users. This is typically achieved by overwhelming the target system with a flood of traffic or requests, consuming its resources and preventing it from responding to legitimate queries. DoS attacks can disrupt services, cause financial losses, and damage an organization's reputation.

What is the role of intrusion detection systems (IDS)?

Answer: Monitors network traffic for signs of attack

Intrusion Detection Systems (IDS) play a critical role in network security by continuously monitoring network traffic for suspicious activity or known patterns of attack. When an IDS detects potential threats, such as unauthorized access attempts, malware signatures, or policy violations, it alerts administrators. This proactive monitoring helps organizations identify and respond to security incidents in real-time, minimizing potential damage.

Which protocol is used to encrypt internet communications?

Answer: HTTPS

HTTPS (Hypertext Transfer Protocol Secure) is the protocol used to encrypt internet communications, ensuring secure data exchange between a user's web browser and a website. It works by combining HTTP with the Secure Sockets Layer (SSL) or Transport Layer Security (TLS) protocol, which encrypts the data. This encryption protects sensitive information, such as login credentials and financial details, from being intercepted and read by unauthorized parties.

What is port scanning used for?

Answer: To detect open ports and vulnerabilities

Port scanning is a technique used to identify active ports on a network host, which indicates running services. By detecting these open ports, security professionals can determine potential entry points for attackers and identify associated vulnerabilities. This process is crucial for both security assessments and malicious reconnaissance, helping to understand a system's exposure.

Which tool helps block unauthorized access to or from a private network?

Answer: Firewall

A firewall acts as a critical security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary function is to prevent unauthorized access to or from a private network. By filtering data packets, a firewall protects internal systems from external threats and ensures only legitimate traffic passes through.

What is the purpose of a VPN in network security?

Answer: To provide secure remote access to a network

A Virtual Private Network (VPN) creates a secure, encrypted connection over a public network, such as the internet. Its main purpose in network security is to provide secure remote access to a private network. This allows users to transmit data confidentially and securely, protecting it from eavesdropping and tampering, as if they were directly connected to the private network.

Which strategy helps reduce network-based threats?

Answer: Implementing security best practices and monitoring

Implementing security best practices, such as strong authentication, regular software updates, and least privilege access, builds a robust defense against threats. Continuous monitoring of network activity and system logs allows for early detection of suspicious behavior and potential attacks. This proactive combination enables organizations to identify and mitigate vulnerabilities before they can be exploited, significantly reducing the risk of network-based threats.

What is a common method to protect wireless networks?

Answer: Using WPA2 and strong passwords

WPA2 (Wi-Fi Protected Access II) is a strong encryption protocol that secures wireless network communications, preventing unauthorized parties from intercepting data. Combining WPA2 with strong, unique passwords creates a robust defense against unauthorized access to the network. This dual approach ensures both data confidentiality and network access control, making it a cornerstone of wireless security.