Domain 3: Security

Question 1

What is a VPN and its purpose?

Answer 1

A Virtual Private Network (VPN) encrypts internet traffic to secure communications and data privacy.

Question 1

What are the three main types of firewalls?

Answer 1

Packet-filtering firewalls, stateful inspection firewalls, and proxy firewalls.

Question 2

Explain the concept of a DMZ in network security.

Answer 2

A Demilitarized Zone (DMZ) is a subnetwork that separates an internal network from untrusted external networks, providing an additional layer of security.

Question 3

What is the role of IDS/IPS systems?

Answer 3

Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) detect and prevent malicious activities on a network.

Question 4

What are common types of malware?

Answer 4

Viruses, worms, Trojans, ransomware, spyware, and adware.

Question 5

Explain the concept of network segmentation.

Answer 5

Dividing a network into smaller segments to improve security and manageability by isolating and controlling traffic between segments.

Question 6

What is the principle of least privilege?

Answer 6

Granting users only the access necessary to perform their job functions to minimize the risk of unauthorized actions.