Firewalls, VPNs, segmentation, and secure network design concepts tested on Security+.
41 cards · basic cards · AI-written, checked twice. Edit anything.
- What is a firewall?
- A network security device that monitors and controls incoming and outgoing traffic based on configured rules.
- Name two main firewall technologies.
- Stateful and stateless firewalls.
- What does a stateful firewall do?
- Tracks the state of active connections and makes filtering decisions based on connection state.
- What does a stateless firewall do?
- Examines each packet individually without tracking the state of connections.
- What is a firewall rule?
- A policy that specifies whether traffic matching certain criteria should be allowed or denied.
- What does VPN stand for?
- Virtual Private Network.
- What is the primary purpose of a VPN?
- To create an encrypted tunnel over an untrusted network, protecting data from interception.
- Name the two main types of VPNs.
- Site-to-site VPN and remote access VPN.
- Name three VPN protocols.
- IPsec, TLS/SSL, OpenVPN, WireGuard, or L2TP.
- What is IPsec?
- A protocol suite that provides encryption and authentication for IP communications.
- What is network segmentation?
- Dividing a network into smaller, isolated subnets to limit lateral movement and contain threats.
- What is a VLAN?
- A Virtual Local Area Network that logically groups devices across physical networks.
- What is the security benefit of VLANs?
- They isolate traffic and separate network segments to reduce the risk of lateral movement.
- What is a DMZ?
- A perimeter network segment that sits between an organization's internal network and the internet.
- Why is a DMZ used?
- To isolate public-facing services from internal systems and prevent direct attacks on critical infrastructure.