Network security fundamentals and programmability/automation topics tested on the CCNA.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the primary function of a firewall?
- To control and filter network traffic between networks based on configured rules
- What does ACL stand for in networking?
- Access Control List
- Name the two primary types of ACLs
- Standard and Extended
- What does a standard ACL filter on?
- Source IP address only
- What can an extended ACL filter on?
- Source IP, destination IP, protocol type, and port numbers
- What does IDS stand for?
- Intrusion Detection System
- What does IPS stand for?
- Intrusion Prevention System
- How does an IPS differ from an IDS?
- An IPS actively blocks detected threats, while an IDS only detects and alerts
- Name two detection methods used by IDS/IPS systems
- Signature-based detection and anomaly-based detection
- What does VPN stand for?
- Virtual Private Network
- Name two protocols commonly used for VPN connections
- IPsec and TLS/SSL
- What security services does IPsec provide?
- Authentication, encryption, and integrity of IP traffic
- Name the two operation modes of IPsec
- Transport mode and Tunnel mode
- What does IPsec transport mode do?
- Encrypts only the payload, not the IP header
- What does IPsec tunnel mode do?
- Encrypts the entire IP packet including the header