Network Security Quiz & Flashcards

A firewall's main function is to block unauthorized access to ensure network security.

Encryption makes data unreadable to unauthorized users, protecting its confidentiality.

A VPN creates a private tunnel, ensuring secure data transmission over public networks.

Strong passwords are complex and lengthy, making them harder to guess or crack.

An IDS detects threats, whereas an IPS takes action to prevent them.

Two-factor authentication adds an extra layer of security by requiring two forms of verification.

A Denial of Service (DoS) attack overwhelms services with traffic, causing unavailability.

Digital certificates verify the ownership of a public key, ensuring secure communications.

A proxy server acts as an intermediary between a client and a server, enhancing security.

Malware is software designed to harm or exploit devices or networks.

Network segmentation divides a network into smaller parts, improving control and security.

A zero-day exploit targets a vulnerability that has no known fix at the time of attack.

Honeypots attract attackers to gather intelligence on their methods without risking real assets.

The principle of least privilege limits user access to only what is necessary for their role.

A security audit assesses the effectiveness of security policies and measures in place.

Network sniffing involves intercepting and analyzing data packets on a network.

A brute force attack systematically tries all possible passwords to gain unauthorized access.

The attacker intercepts communication between two parties without their knowledge.

A security token provides authentication for accessing a system, enhancing security.

Patch management involves updating software to fix vulnerabilities and prevent security issues.

NAC restricts access to network resources based on authentication and compliance with policies.

Social engineering involves manipulating individuals to divulge confidential information.

Cookies can store sensitive data that, if intercepted, could lead to unauthorized access.

An APT is a prolonged, stealthy attack aimed at stealing data from or monitoring a network.

A DDoS attack involves multiple systems flooding a target, while DoS originates from a single source.

Defense in depth employs multiple layers of security measures to protect against threats.

Encryption keys are crucial for encrypting and decrypting data, ensuring secure communications.

A security policy is a formal set of rules that governs how an organization protects its information assets.

User training educates employees on security practices, reducing the risk of human error and cyber threats.

A vulnerability assessment identifies and evaluates security weaknesses in a network or system.

Firewalls filter network traffic, while antivirus software detects and removes malicious software.

SIEM systems collect and analyze security data to detect, respond to, and manage threats.

TLS encrypts data in transit, ensuring secure communication over networks.

Symmetric encryption uses a single key for encryption and decryption, while asymmetric uses two keys.

Digital signatures verify the authenticity and integrity of a message, ensuring it hasn't been altered.

A security breach is an incident where unauthorized access to data occurs, compromising security.

CAPTCHAs require human verification, preventing automated bots from accessing services.

RBAC assigns access permissions based on a user's role within an organization.

Network monitoring tracks performance and detects anomalies, indicating potential security incidents.

An attack vector is a method used by hackers to gain unauthorized access to a network or system.

The zero trust model assumes breaches will occur and verifies every request as if it originates from an open network.

A SOC monitors and manages security incidents in real-time, responding to potential threats.

DLP tools detect and prevent unauthorized data transmission, protecting sensitive information.

A honeynet is a network set up with intentional vulnerabilities to attract and study attackers.

A packet filter inspects and filters packets, allowing or blocking them based on specific rules.

Security patches fix vulnerabilities in software to prevent exploitation by cybercriminals.

A network proxy acts as an intermediary, forwarding requests and responses between clients and servers.