Network Security techniques 4.3

Question 1

Port security

Answer 1

Close unnecessary ports and services, configure ports based on mac addresses

Question 2

Interface security

Answer 2

Change default passwords, disable unused interfaces, use NAC

Question 3

NAC

Answer 3

Requires authentication to access network. MAC filtering

Question 4

Key management system

Answer 4

Management of encryption keys. Create keys for services or users, log key usage, automatically rotate keys

Question 5

ACL

Answer 5

Allow or disallow types of traffic based on IP, destination, port number, time, application, etc

Question 6

Firewall rules

Answer 6

Goes from top to bottom, most specific to most general. Implicit deny if there’s no match

Question 7

URL filtering

Answer 7

Filter URL from usage. Could use list

Question 8

Content filtering

Answer 8

If content is detected, it’s filtered out. Parental control or malware filtering for ex

Question 9

Screened subnet

Answer 9

Subnet only for public facing things, separate from internal network

Question 10

Security zones

Answer 10

Zone based security tech, more flexible than IP address ranges. Trusted or untrusted, internal or external, types of devices