Infrastructure Considerations

Question 1

What is a Security Zone?

Answer 1

Distinct segment within a network often created by logically isolating the segemnt using firewall or other security device

Question 2

What is a Screened Subnet?

Answer 2

Hosts public-facing services such as web servers, email servers, and DNS servers and safeguards against security breaches by preventing attackers from gaining direct access to the sensitive core internal network

Question 3

What is an Attack Surface of a Network?

Answer 3

Refers to all the points where an unauthorized user can try to enter to or extract data from an environment

Question 4

What does a Wired device do?

Answer 4

Offers stability and speed but restricts mobility

Question 5

What does a Wireless device do?

Answer 5

Provides flexibility but may suffer from interference and security issues

Question 6

What is an Active Device (Intrusion Prevention System)?

Answer 6

Monitors and acts on network traffic

Question 7

What is a Passive Device (Intrusion Detection System)?

Answer 7

Observes and reports without altering traffic

Question 8

What is Fail-Open?

Answer 8

Allows traffic to pass during a failure, maintaining connectivity but reducing security

Question 9

What is Fail-Closed?

Answer 9

Blocks all traffic during a failure, prioritizing security over connectivity