4.3 Network Security Features/Techniques

Question 1

Device Hardening

Answer 1

The process of securing a system by reducing its surface of vulnerability (e.g., patching, disabling unneeded services).

Question 2

Disable Unused Ports/Services

Answer 2

A hardening technique where non-essential logical ports (e.g., Telnet, HTTP) and physical switch ports are shut down to prevent unauthorized access.

Question 3

Change Default Passwords

Answer 3

The most basic hardening step; prevents attackers from using factory-set credentials found in online manuals.

Question 4

Network Access Control (NAC)

Answer 4

A set of solutions that inspects a device’s ‘health’ (antivirus status, patches) before allowing it onto the network.

Question 5

Port Security

Answer 5

A switch feature that limits the number of MAC addresses allowed on a single port; can disable the port if an unauthorized device is plugged in.

Question 6

802.1X

Answer 6

A port-based authentication protocol that requires a user to provide credentials (usually to a RADIUS server) before the switch port opens.

Question 7

MAC Filtering

Answer 7

A security method that only allows specific, pre-approved MAC addresses to connect to a switch or wireless AP; easily spoofed.

Question 8

Key Management

Answer 8

The practice of securely generating, storing, and rotating cryptographic keys (used for VPNs, TLS, and SSH).

Question 9

Access Control List (ACL)

Answer 9

A set of rules on a router or firewall that permits or denies traffic based on IP address, protocol, or port number.

Question 10

URL Filtering

Answer 10

A security feature that blocks access to specific websites based on their web address (URL) or domain name.

Question 11

Content Filtering

Answer 11

A security feature that inspects the actual data inside a web page (keywords, categories) to block inappropriate or malicious material.

Question 12

Trusted vs. Untrusted Zones

Answer 12

Trusted zones are internal networks you control (LAN); Untrusted zones are external networks you don’t control (Internet).

Question 13

Screened Subnet (DMZ)

Answer 13

A semi-private zone located between the internal network and the internet; holds public-facing servers like Web, Mail, or DNS.