Network security fundamentals and programmability/automation topics tested on the CCNA.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary function of a firewall?
Show answer
To control and filter network traffic between networks based on configured rules
- What does ACL stand for in networking?
Show answer
Access Control List
- Name the two primary types of ACLs
Show answer
Standard and Extended
- What does a standard ACL filter on?
Show answer
Source IP address only
- What can an extended ACL filter on?
Show answer
Source IP, destination IP, protocol type, and port numbers
- What does IDS stand for?
Show answer
Intrusion Detection System
- What does IPS stand for?
Show answer
Intrusion Prevention System
- How does an IPS differ from an IDS?
Show answer
An IPS actively blocks detected threats, while an IDS only detects and alerts
- Name two detection methods used by IDS/IPS systems
Show answer
Signature-based detection and anomaly-based detection
- What does VPN stand for?
Show answer
Virtual Private Network
- Name two protocols commonly used for VPN connections
Show answer
IPsec and TLS/SSL
- What security services does IPsec provide?
Show answer
Authentication, encryption, and integrity of IP traffic
- Name the two operation modes of IPsec
Show answer
Transport mode and Tunnel mode
- What does IPsec transport mode do?
Show answer
Encrypts only the payload, not the IP header
- What does IPsec tunnel mode do?
Show answer
Encrypts the entire IP packet including the header