Device Security

Question 1

Firewalls

Answer 1

Firewalls → Security devices that filter traffic based on rules; Next-Generation Firewalls (NGFW) add deep inspection, application awareness, and threat detection for stronger protection.

Question 2

Nmap

Answer 2

Network Mapper (Nmap) → A security scanning tool used to discover open ports, running services, and vulnerabilities on devices to help secure the network.

Question 3

Change Default Credentials

Answer 3

Change Default Credentials → The process of replacing factory-set usernames and passwords to prevent attackers from accessing devices using well-known defaults.

Question 4

Port Security

Answer 4

Port Security → A switch feature that restricts which Media Access Control (MAC) addresses may connect to a specific switch port, preventing unauthorized devices.

Question 5

MAC Filtering

Answer 5

Media Access Control (MAC) Filtering → A method of allowing or denying network access based on the device’s MAC address; provides basic access control.

Question 6

Key Management System

Answer 6

Key Management System → A system that securely stores, distributes, and manages encryption keys used for protecting data and communications.

PKI (Public Key Infrastructure) is a type of Key Management System

Question 7

ACL

Answer 7

Access Control List (ACL) → A set of rules on a router, switch, or firewall that allows or denies traffic based on Internet Protocol (IP) addresses, ports, or protocols.

Question 8

Firewall Rules

Answer 8

Firewall Rules → Instructions that determine which traffic is allowed or blocked based on criteria such as Internet Protocol (IP) address, port number, or application type.

Question 9

Implicit Deny

Answer 9

Implicit Deny → A default firewall rule that blocks all traffic unless it is explicitly allowed by another rule.

Question 10

URL Filtering

Answer 10

URL Filtering → Controls access to websites based on their Uniform Resource Locator (URL), blocking categories like gambling, adult content, or malicious sites.

Question 11

Content Filtering

Answer 11

Content Filtering → Inspects and blocks specific types of content such as keywords, file types, malware, or scripts within web traffic or emails.

Question 12

Screened Subnet

Answer 12

Screened Subnet → A small, isolated network (often called a DMZ) placed between an internal network and the Internet, protected by firewalls on both sides.

Question 13

Security Zones

Answer 13

Security Zones → A firewall feature that groups interfaces into categories (like inside, outside, DMZ) and applies different security policies between them.