6 Network Security Free Online FlashCards

What does the CIA triad represent in network security?

Confidentiality, integrity, and availability: protecting data from unauthorized disclosure or change while keeping services accessible.

What is the goal of a denial-of-service attack?

A denial-of-service attack floods a service or exhausts its resources so legitimate users cannot access it.

What is defense in depth?

Defense in depth combines complementary controls, so if one fails, others can reduce the chance or impact of a compromise.

How do authentication and authorization differ?

Authentication establishes who or what is requesting access; authorization determines what that identity is permitted to do.

Why is a VLAN not automatically a security boundary?

A VLAN separates Layer 2 broadcast domains, but it is not automatically a security boundary; routing and firewall rules must restrict traffic between VLANs.

How does symmetric encryption use its key?

Symmetric encryption uses the same secret key to encrypt and decrypt data. It efficiently protects large amounts of data, but the key must be shared securely.

What does hashing produce, and can it be reversed?

Hashing produces a fixed-length digest for integrity checks. It is not encryption and cannot be reversed to recover the original data.

How does an IDS differ from an IPS?

An IDS monitors and alerts; an IPS can block or otherwise stop detected traffic.

What does least functionality mean in network design?

Disable unnecessary ports, protocols, services, and accounts to reduce the network's attack surface.

What is a DMZ, and what does it not replace?

A DMZ is a separate network for public-facing services. Firewalls control traffic between it, the Internet, and the internal network; it does not replace protecting its servers.

What is the core principle of zero trust?

Zero trust grants no implicit trust based only on network location: verify identity and device context, authorize access to specific resources, and reassess access as appropriate.

What makes an authentication method multifactor?

MFA requires evidence from at least two different factor categories: something you know, have, or are.