4.1 Explain the importance of basic network security concepts. Flashcards
1
Q
Explain logical security in terms of “data in transit”.
A
- Data transmitted over the network
- Also called “data in motion”
- Not much protection as it travels (switches, routers, devices)
- The security comes from other equipment (firewall, IPS)
2
Q
Explain logical security in terms of “data at rest”.
A
- The data on a storage device (hard drive, SSD, Flash drive, etc.)
- Encrypting the information as your write it to the storage drive.
- Apply permissions to the data that you have stored (also ACLs).
3
Q
Digital Certificates
A
- A public key certificate
- Binds a public key with a digital signature and other details about the key holder.
- Adds trust to the PKI
- Certificate creation can be built into the OS.
4
Q
What is PKI?
A
- Public Key infrastructure
- Policies, procedures, hardware, software, and people form digital certificates.
5
Q
What is “self-signed” mean?
A
- Internal certificates don’t need to be signed by a public CA
- Your company is the only one going to use it.
- Build your own CA to issue your own certificates signed by your own CA.
6
Q
What is IAM?
A
- Identity and Access Management
- Identify lifecycle management; every entity (human or non-human) gets a digital identity.
- AAA (Access Control, Authentication, Authorization)
- Identity Governance
7
Q
What is MFA?
A
- Multi-factor Authentication
- Using different methods to prove who you are.
- Something you know (password), something you have (mobile app), something you are (biometric), somewhere you are (GPS location.
8
Q
What is SSO?
A
- Single Sign-on
- You will only need to provide your credentials one time with no additional authentication required.
- Usually a time frame so that you do not stay logged in all the time.
9
Q
What is RADIUS?
A
- Remote Authentication Dial-in User Service
- One of the more common AAA protocols
- Centralize authentication for users (routers, switches, firewalls, server authentication, remote VPN access.
10
Q
What role does LDAP play in authentication?
A
- Lightweight Directory Access Protocol
- Protocol for reading and writing directories over an IP network
- An organized set of records, like a phone directory
- X.500 specification was written by the International Telecommunications Union (ITU).
- It allows you to add more attributes for additional context about a particular device to build a hierarchy of devices within your network.
11
Q
What is SAML?
A
- Security Assertion Mark-up Language
- Open standard for authentication and authorization
- You can authenticate through a third-party to gain access
- Not originally designed for mobile apps (biggest roadblock)
12
Q
What is TACACS+?
A
- Terminal Access Controller Access Control System Plus
- Remote authentication protocol
- More authentication requests and response codes
- Very Cisco-centric model of remote authentication
13
Q
What is time-based authentication?
A
- TOTP (Time-based One-time Password algorithm)
- Use a secret key and the time of day
- No incremental counter.
- The secret key is configured ahead of time.
14
Q
What does it mean to grant the least-privileged access to something?
A
- Rights and permissions should be set to the bare minimum
- You only get exactly what’s needed to complete your objective.
- All user accounts must be limited.
15
Q
What is role-based access control?
A
- You have a role in your organization (manager, director, team lead, project manager).
- Rights and permissions will be different based on their role.
- Administrators provide the access based on those roles.
