Firewalls, VPNs, segmentation, and secure network design concepts tested on Security+.
41 cards · basic cards · AI-written, checked twice. Edit anything.
- What is a firewall?
Show answer
A network security device that monitors and controls incoming and outgoing traffic based on configured rules.- Name two main firewall technologies.
Show answer
Stateful and stateless firewalls.- What does a stateful firewall do?
Show answer
Tracks the state of active connections and makes filtering decisions based on connection state.- What does a stateless firewall do?
Show answer
Examines each packet individually without tracking the state of connections.- What is a firewall rule?
Show answer
A policy that specifies whether traffic matching certain criteria should be allowed or denied.- What does VPN stand for?
Show answer
Virtual Private Network.- What is the primary purpose of a VPN?
Show answer
To create an encrypted tunnel over an untrusted network, protecting data from interception.- Name the two main types of VPNs.
Show answer
Site-to-site VPN and remote access VPN.- Name three VPN protocols.
Show answer
IPsec, TLS/SSL, OpenVPN, WireGuard, or L2TP.- What is IPsec?
Show answer
A protocol suite that provides encryption and authentication for IP communications.- What is network segmentation?
Show answer
Dividing a network into smaller, isolated subnets to limit lateral movement and contain threats.- What is a VLAN?
Show answer
A Virtual Local Area Network that logically groups devices across physical networks.- What is the security benefit of VLANs?
Show answer
They isolate traffic and separate network segments to reduce the risk of lateral movement.- What is a DMZ?
Show answer
A perimeter network segment that sits between an organization's internal network and the internet.- Why is a DMZ used?
Show answer
To isolate public-facing services from internal systems and prevent direct attacks on critical infrastructure.
FlashKeepers