Network Security & Communication Protection Flashcards

What is the primary goal of network security?

Answer: To ensure the integrity, confidentiality, and availability of network resources and data.

The primary goal of network security is to protect the network infrastructure and all data transmitted over it, adhering to the CIA triad principles. Confidentiality ensures data is only accessible to authorized users, integrity guarantees data accuracy and completeness, and availability ensures authorized users can access resources when needed. This comprehensive protection safeguards against various cyber threats and ensures reliable network operations.

What is a firewall?

Answer: A system that monitors and controls network traffic to prevent unauthorized access.

A firewall serves as a critical security barrier, inspecting all incoming and outgoing network traffic against a defined set of security rules. Its main function is to block unauthorized access attempts and prevent malicious data from entering or leaving a private network. By filtering traffic, firewalls protect systems and data from external threats and enforce network security policies, acting as a crucial gatekeeper.

What is encryption in network security?

Answer: Converting data into unreadable format to protect it from unauthorized access.

Encryption is a fundamental cybersecurity process that transforms readable data (plaintext) into an unreadable format (ciphertext) using an algorithm and a key. This conversion ensures that even if unauthorized individuals intercept the data, they cannot understand its content without the correct decryption key. Its primary purpose is to protect data confidentiality and integrity during transmission and storage.

Why is VPN important for network security?

Answer: A VPN provides encrypted access to remote networks and protects data from interception.

A Virtual Private Network (VPN) is crucial for network security because it creates a secure, encrypted tunnel over a public network, like the internet. This encryption protects data from eavesdropping and interception by unauthorized parties, ensuring confidentiality and integrity. VPNs allow users to securely access remote networks and resources, safeguarding sensitive information from potential threats.

What is the role of an Intrusion Detection System (IDS)?

Answer: To monitor network traffic and detect potential security threats or breaches.

An Intrusion Detection System (IDS) plays a vital role by continuously monitoring network traffic and system activity for suspicious patterns, known attack signatures, or policy violations. When potential security threats or breaches are detected, the IDS generates alerts. This allows security teams to investigate and respond promptly, preventing or mitigating damage from cyberattacks.

What does multi-factor authentication (MFA) provide in terms of security?

Answer: MFA requires two or more authentication methods for enhanced security.

Multi-factor authentication (MFA) significantly enhances security by requiring users to verify their identity using two or more distinct authentication methods. These methods typically come from different categories, such as something you know (password), something you have (token), and something you are (biometric). This layered approach makes it much harder for unauthorized individuals to gain access, even if one factor is compromised.

What is network segmentation?

Answer: Dividing a network into smaller, isolated segments to improve security and performance.

Network segmentation involves dividing a larger network into smaller, isolated subnetworks. This strategy improves security by limiting the lateral movement of attackers, as a breach in one segment does not automatically grant access to others. It also enhances network performance by reducing broadcast traffic and allowing for more granular security controls.

What is an SSL/TLS certificate used for?

Answer: To encrypt data transmission and protect sensitive information on websites.

An SSL/TLS certificate is essential for securing communication over the internet, particularly for websites. It enables encrypted data transmission between a user's browser and a web server, protecting sensitive information like login credentials and payment details from interception. The certificate also verifies the authenticity of the website, assuring users they are connecting to the legitimate site.

What is a DDoS attack?

Answer: An attack that floods a network or server with traffic, causing it to become unavailable.

A Distributed Denial of Service (DDoS) attack is a malicious attempt to disrupt the normal traffic of a targeted server, service, or network. It achieves this by overwhelming the target with a flood of internet traffic from multiple compromised computer systems. This excessive traffic consumes bandwidth and resources, making the service unavailable to legitimate users and causing significant operational disruption.