Network Security Flashcard

Front

How should a company configure its firewall to secure an internet-facing web server while ensuring only necessary services are accessible? Options: Block all ports and enable a screened subnet for the server., Permit FTP, SSH, and File Integrity Monitoring without a screened subnet., Allow HTTP and HTTPS while implementing a screened subnet for the server., Enable all ports and protocols, disregarding subnet creation.

Back

Allow HTTP and HTTPS while implementing a screened subnet for the server.

Front

Which type of attack causes a switch to behave like a hub by overwhelming its MAC table?

Back

MAC flooding

Front

What is the best placement for a Next Generation Firewall (NGFW) to balance security and operational continuity?

Back

Deploy it in inline mode to analyze all traffic while maintaining connectivity.

Front

Which network control is most effective in protecting ICS and SCADA systems? Options: Regular system updates, Network segmentation, Secure boot mechanisms, Transport encryption protocols

Back

Network segmentation

Front

What occurs when an attacker gains unauthorized access to elevated privileges in a system?

Back

Privilege escalation

Front

Which function assigns appropriate access policies to devices based on their defined roles?

Back

Authorization

Front

What component works alongside the Authentication Header (AH) in IPSec to ensure data confidentiality? Options: Advanced Encryption Standard (AES), Encapsulating Security Payload (ESP), Encryption File System (EFS), Extended Authentication Protocol (EAP)

Back

Encapsulating Security Payload (ESP)

Front

Which VPN tunnel configuration routes only specific traffic through the VPN?

Back

Split tunneling

Front

What is the primary purpose of an email honeypot in mitigating SMTP-based attacks?

Back

To attract and trap attacks for analysis.

Front

What is a characteristic of a nonpersistent NAC agent?

Back

It is loaded into memory temporarily during posture assessment.