Network and Security Administration Flashcards

Which type of malware encrypts a victim's files and demands payment for the decryption key?

Answer: Ransomware

Ransomware encrypts files or locks systems and demands a ransom payment, typically in cryptocurrency, to restore access.

What does 'defense in depth' mean in network security?

Answer: Applying multiple overlapping security layers so no single failure causes a breach

Defense in depth uses layered controls (firewall, IPS, endpoint security, etc.) so that if one layer fails, others still protect the environment.

Which command on a Linux system displays the current routing table?

Answer: ip route show

`ip route show` (or `route -n` on older systems) displays the kernel's IP routing table on Linux.

A security team discovers an attacker has compromised a low-privilege account and is attempting to gain admin rights. What type of attack is this?

Answer: Privilege escalation

Privilege escalation occurs when an attacker with limited access exploits vulnerabilities or misconfigurations to gain higher-level permissions.

Which RAID level provides striping with parity distributed across all drives, tolerating one disk failure?

Answer: RAID 5

RAID 5 stripes data and parity across three or more disks, allowing the array to reconstruct data if one drive fails.

What is the purpose of a DMZ (Demilitarized Zone) in network architecture?

Answer: To host public-facing services isolated from the internal network

A DMZ is a network segment that hosts internet-facing services (web, mail, DNS) while keeping them isolated from the trusted internal network.

Which protocol replaces Telnet for secure remote administration of network devices and servers?

Answer: SSH

SSH (Secure Shell) provides encrypted remote command-line access, replacing the plaintext Telnet protocol.