Lesson 10: Network Access Security

Question 1

A list of rules or policies programmed into a router or other device to control what can gain access to a network. When used in servers ___s are used to control what resources are available to specific users or devices. When used in routers and firewalls, ___s are used to define what protocols are allowed in a network and what content various protocol packets are allowed to bring into the network.

Answer 1

Access Control List (ACL)

Question 2

Rules that define who is permitted access to the network, what methods are permitted to gain that access, and which resources users are permitted to access.

Answer 2

Access Policies

Question 3

A mathematical formula that is applied to a data packer or packet header so that the information contained in the packet or header can be encrypted, compressed, checked for errors, or manipulated in some other fashion.

Answer 3

Algorithm

Question 4

A type of network protection device that works with protocols and services located on the Application layer of the TCP/IP protocol stack. Administrators can use ___________ ____ ________s to block TELNET, DNS, FTP, HTTP, and any other protocols or services located on the Application layer. Such firewalls are also sometimes known as proxy servers.

Answer 4

Application Layer Firewalls

Question 5

A security protocol that is part of the IPsec suite. _ _ provides packet integrity and origin authentication, but it cannot provide encryption.

Answer 5

Authentication Header (AH)

Question 6

An assessment recommending the most appropriate method for performing a certain task based on observations of and experience with that task.

Answer 6

Best Practices

Question 7

In cryptography, a mathematical formula or algorithm that encrypts the clear text or plaintext of a message in a data packet or packet header.

Answer 7

Cipher

Question 8

A service that looks at the actual content of the data coming into the device and evaluates it against a predefined set of guidelines about what is allowed through.

Answer 8

Content Filtering

Question 9

A unique pattern that identifies a threat such as malicious software or a network attack. Various network and system defense software programs use definitions to detect and identifY the virus or attack in order to counter the threat.

Answer 9

Definition

Question 10

The area created between two firewalls, which functions as a buffer between internal and external networks.

Answer 10

Demilitarized Zone (DMZ)

Question 11

A locally-run database service that contains information about network users and resources, typically used to control access to those resources.

Answer 11

Directory Services

Question 12

A network defense mechanism that consists of two separate firewalls, one providing protection to the internal network and one providing protection from the outer network. The area between the firewalls is called a demilitarized zone, or DMZ.

Answer 12

Dual Firewall Configuration

Question 13

The directory services environment created by Novell for use on Linux and other operating systems.

Answer 13

e-Directory

Question 14

A security protocol that is part of the IPsec suite. _ _ _ provides packet integrity, origin
authenrication, and data encryption.

Answer 14

Encapsulating Security Payload (ESP)

Question 15

A process that allows either the header or the entire data packet to be encoded using a predetermined algorithm in such a way that if an eavesdropper on the network can intercept the data as it’s transmitted, he still can’t understand it without knowing how to decode it.

Answer 15

Encryption

Question 16

A data manipulation technique that firewalls use to protect a network from malicious attacks by preventing data packets that meet certain criteria from entering into the system or network.

Answer 16

Filtering

Question 17

A networking device designed
to prevent a hacker or other security
threats from entering the network or -barring
that- limit the ability of threats
to spread through the network using
intrusion detection software generally
into rhe ________ device.

Answer 17

Firewall

Question 18

A mechanism
by which humans interact with a
computer using graphics, icons, and windows
instead of simple text characters.

Answer 18

Graphical User Interface (GUI)

Question 19

A software package that
runs on a computer platform and evaluates
packets that arrive on the host to
determine whether they are malicious.

Answer 19

Host-Based Firewalls

Question 20

Software firewalls installed on
a host computer.

Answer 20

Host-Based Intrusion Detection System (HIDS)/System Intrusion Detection Software (SIDS)

Question 21

A host-based intrusion detection
system (HIDS) that also has the
ability to prevent an intrusion or take
action against a detected intrusion.

Answer 21

Host-Based Intrusion Prevention System (HIPS)/System Intrusion Prevention Software (SIPS)

Question 22

A type of
communication session in which one
host, such as a workstation, connects to
another host. An example of this type
of communication is a private chat
session.

Answer 22

Host-to-Host Communications

Question 23

A protocol
in the IPSec suite that handles the
negotiation of protocols and algorithms
and to generate encryption and authentication
keys.

Answer 23

Internet Key Exchange (IKE)

Question 24

A
suite of protocols designed to provide
security options to IP.

Answer 24

Internet Protocol Security (IPSec)

Question 25

A tunneling protocol developed by Cisco Systems that encapsulates the PPP data generated by virtual private networks for safe transmission over the Internet.

Answer 25

Layer 2 Forwarding (L2F)

Question 26

A protocol, designed as an extension of the Point-to-Point Protocol (PPP), that allows PPP to establish a Layer 2 (Data Link layer) connection so that the endpoints can reside on two different devices as long as they are connected by a packet-switched network.

Answer 26

Layer 2 Tunneling Protocol (L2TP)

Question 27

An application protocol that is the basis for various directory services environments, such as Microsoft's Active Directory and Novell's e-Directory.

Answer 27

Lightweight Directory Access Protocol (LDAP)

Question 28

A component of PPP that enables it to establish and configure a data-link layer connection between two systems.

Answer 28

Link Control Protocol (LCP)

Question 29

A technology in which only a preprogrammed MAC address is allowed access to a specific wireless access point (WAP).

Answer 29

MAC Address Filtering

Question 30

A type of firewall residing on the network that prevents a threat from actually entering the network it's protecting.

Answer 30

Network-Based Firewalls

Question 31

A component of PPP that enables it to establish and configure different protocols functioning at the network layer of the OSI reference model.

Answer 31

Network Control Protocol (NCP)

Question 32

Network software designed to look for evidence of threats and report it. Similar to an intrusion detection system (IDS) except that it works for the entire network rather than a single host.

Answer 32

Network Intrusion Detection System (NIDS)

Question 33

Network software designed to look for evidence of threats, report it, and act to stop the threat. Similar to an intrusion protection system (IPS). NIPSs work on the entire network instead of a single device.

Answer 33

Network Intrusion Prevention System (NIPS)

Question 34

A type of network protection device that functions on the network layer of the OSI model and primarily targets packet communications.

Answer 34

Network Layer Firewall

Question 35

A detailed document outlining a large variety of guidelines related to the security of a company or organization's network.

Answer 35

Network Security Policy

Question 36

A type of communication that occurs when a router on one network communicates with a host, or workstation on another network. An example of this type of communication is remote access.

Answer 36

Network-to-Host Communications

Question 37

A type of communication that occurs when a router on one network communicates with a router on a different network.

Answer 37

Network-to-Network Communications

Question 38

Another term for a Network layer firewall that targets packet traffic.

Answer 38

Packet Filters

Question 39

A collection of standardized criteria that make a password acceptable for network use.

Answer 39

Password Policies

Question 40

An unencrypted communication packet, message, or password.

Answer 40

Plaintext

Question 41

A Data Link layer protocol that helps ensure that packets arrive at their destination in sequence without having to find their own routes to the destination.

Answer 41

Point-to-Point Protocol (PPP)

Question 42

A protocol that allows PPP to be used in an Ethernet environment.

Answer 42

Point-to-Point Protocol over Ethernet (PPPoE)

Question 43

A tunneling protocol developed by Microsoft for use with virtual private networks (VPNs).

Answer 43

Point-to-Point Tunneling Protocol (PPTP)

Question 44

A component of network management that concerns how the network is documented.

Answer 44

Policy

Question 45

A function of Cisco switches that is designed to counter the ability of attackers to share a switch port with the legitimate user to gain access to network resources.

Answer 45

Port Security

Question 46

A component of network management that lays out how the network should be maintained, what should happen should failure or other such issues occur, and how to implement established policies.

Answer 46

Procedure

Question 47

A server (a computer system or an application) that acts as an intermediary for requests from clients seeking resources from other servers.

Answer 47

Proxy Server

Question 48

A group of technologies used to facilitate remote access to a computer network.

Answer 48

Remote Access Services (RAS)

Question 49

A service that provides a method of centralized AAA (authentication, authorization, accounting) between a computer and a managed network.

Answer 49

Remote Authentication Dial-In User Service (RADIUS)

Question 50

The client program for Microsoft's proprietary Remote Desktop Protocol (RDP).

Answer 50

Remote Desktop Connection

Question 51

A proprietary protocol from Microsoft used to create a graphical interface from one computer to another.

Answer 51

Remote Desktop Protocol (RDP)

Question 52

The server program for Microsoft's proprietary Remote Desktop Protocol (RDP).

Answer 52

Remote Desktop Service

Question 53

The ability of a firewall to scan packets and protocols for specific threats.

Answer 53

Scanning Services

Question 54

A networking protocol that, in conjunction with other protocols, provides security for Internet-based communications.

Answer 54

Secure Sockets Layer (SSL)

Question 55

A specific implementation of a virtual private network (VPN) that allows secure VPN sessions to be set up from within a browser.

Answer 55

Secure Sockets Layer VPN (SSL VPN)

Question 56

Unique patterns of threats, whether viruses or network attacks, that uniquely identifY them.

Answer 56

Signature

Question 57

A process that many firewalls, IDSes, and antivirus programs use to identifY threats.

Answer 57

Signature Identification

Question 58

A simple securiry configuration that uses only one firewall to protect the network.

Answer 58

Single Firewall Configuration

Question 59

A type of network protection device which uses stateful packet inspection to filter communications.

Answer 59

Stateful Firewall

Question 60

A form of packet filtering that is based on a packet's state which includes as IP address, port number, sequence number, what session it is part of, and packet type.

Answer 60

Stateful Inspection

Question 61

A type of packer inspection that treats each packet as if it were a separate entity without regard to session or state.

Answer 61

Stateless Packet Inspection

Question 62

A server component in Windows that is now referred to as Remote Desktop Services.

Answer 62

Terminal Services

Question 63

The equivalent of remote desktop connection (RDC) in earlier versions of windows.

Answer 63

Terminal Services Client

Question 64

An operational mode of lPSec in which only the payload or the data in a packet is encrypted.

Answer 64

Transport Mode

Question 65

An operational mode of IPSec that encrypts the entire packet and then surrounds it with a new IP packet containing a new IP header.

Answer 65

Tunnel Mode

Question 66

A suite of algorithms designed to add security on top of what wired equivalent privacy (WEP) provides.

Answer 66

Temporal Key Integrity Protocol (TKIP)

Question 67

The process of establishing a connection through a public nerwork that looks like a point-to-point connection to the devices on either end of it, but in reality is not.

Answer 67

Tunneling

Question 68

A term originally used by Cisco to describe virtual private networks.

Answer 68

Virtual Dial-Up

Question 69

An open-source standard that gives users remote access to a desktop computer, much like Microsoft's Remote Desktop Protocol (RDP).

Answer 69

Virtual Network Computing (VNC)

Question 70

A technology used to establish a connection from a client computer outside a local nerwork to an enterprise LAN using the Internet or other public nerwork. ___ is commonly used by corporations to allow their users to gain remote access to their corporate servers.

Answer 70

Virtual Private Network (VPN)

Question 71

A device created by Cisco that is designed ro concentrate multiple virtual private network (VPN) connections into a single device.

Answer 71

VPN concentrator

Question 72

A specific implementation of virtual private networking rhar allows secure VPN sessions ro be set up from within a browser.

Answer 72

Web VPN

Question 73

A specification or certification that ensures a certain level of securiry for every wireless device that claims ro be WPA.

Answer 73

Wi-Fi Protected Access (WPA)

Question 74

A deprecated securiry algorithm for IEEE 802.11 to make wireless communications just as secure and private as wired communications.

Answer 74

Wired Equivalent Privacy (WEP)

Question 75

A part of the underlying components used by the various Linux GUis, such as GNOME. Other underlying components include X-Windows, and X-Server.

Answer 75

X11

Question 76

A rype of router firewall based on interface groups instead of on individual interfaces, unlike other firewalls.

Answer 76

Zone-Based Firewall