Lesson 2 - Hands On IT and Cyber

Question 1

What is the difference between TCP and UDP, and when should you use each?

Answer 1

TCP is connection-based and ensures data delivery, ideal for reliable communication; UDP is faster and used for real-time applications like streaming.

Question 2

How do you configure a firewall to allow traffic on a specific port?

Answer 2

Define inbound/outbound rules, specify protocol (TCP/UDP), and allow traffic on the specific port in the firewall settings.

Question 3

What is the role of a DNS server in a network?

Answer 3

A DNS server translates domain names into IP addresses, allowing users to connect to websites using human-readable addresses.

Question 4

How do you set up network segmentation for improved security?

Answer 4

Divide the network into smaller segments using VLANs or subnets, and apply access controls between segments to minimize attack surfaces.

Question 5

What is the principle of least privilege, and how does it apply to system security?

Answer 5

Users and systems should only have the minimum permissions necessary to perform their tasks, reducing the risk of insider threats or compromised accounts.

Question 6

How do you perform basic network troubleshooting using ping and traceroute?

Answer 6

Ping checks connectivity between devices; traceroute tracks the path data takes to a destination, helping diagnose network issues or bottlenecks.

Question 7

What is the purpose of using a hypervisor in virtualization?

Answer 7

A hypervisor allows multiple virtual machines (VMs) to run on a single physical server, improving resource utilization and flexibility in system management.

Question 8

What is the difference between symmetric and asymmetric encryption, and where is each used?

Answer 8

Symmetric encryption uses one key for both encryption and decryption (faster, used for data at rest); asymmetric encryption uses two keys (public/private) and is used in SSL/TLS.

Question 9

How does multi-factor authentication (MFA) enhance system security?

Answer 9

MFA requires multiple verification methods (e.g., password + a one-time code), making it harder for attackers to gain access with compromised credentials.

Question 10

How do you create a secure SSH connection to a remote server?

Answer 10

Install an SSH client, generate a key pair (public/private), upload the public key to the server, and connect using SSH with your private key.

Question 11

How do you implement secure password policies for user accounts?

Answer 11

Enforce complexity requirements (uppercase, lowercase, numbers, symbols), regular password changes, and disallow common passwords across systems.

Question 12

How does a VPN secure remote access to a network?

Answer 12

A VPN encrypts data transmitted between the user’s device and the network, ensuring confidentiality and integrity of the connection.

Question 13

What are the common steps for setting up a LAMP stack?

Answer 13

Install Linux, Apache (web server), MySQL (database), and PHP (backend language), then configure each to work together to serve dynamic websites.

Question 14

What is the role of an IDS (Intrusion Detection System) in network security?

Answer 14

An IDS monitors network traffic for suspicious activities or known attack patterns and alerts administrators of potential breaches.

Question 15

How do you implement role-based access control (RBAC) in IT systems?

Answer 15

Define roles based on job functions, assign permissions to roles rather than individuals, and regularly review access rights to maintain security.

Question 16

How does patch management improve system security?

Answer 16

Regularly applying patches and updates fixes vulnerabilities, ensuring that systems are protected against known exploits.

Question 17

What are the key steps in securing a wireless network?

Answer 17

Use strong encryption (WPA2/WPA3), disable SSID broadcasting, set up MAC filtering, and use a strong administrative password on the router.

Question 18

How do load balancers enhance the reliability of IT systems?

Answer 18

Load balancers distribute incoming traffic across multiple servers, ensuring no single server is overwhelmed, improving uptime and performance.

Question 19

What is the purpose of a DMZ in network architecture?

Answer 19

A DMZ isolates external-facing services (web servers) from the internal network, creating an extra layer of security to protect sensitive systems.

Question 20

How do you configure a RAID array for redundancy?

Answer 20

Choose the appropriate RAID level (e.g., RAID 1 for mirroring or RAID 5 for distributed parity), configure the drives in the RAID controller, and monitor for drive failures.

Question 21

How does a web application firewall (WAF) protect web servers?

Answer 21

A WAF filters and monitors HTTP traffic to and from a web application, preventing attacks such as SQL injection, cross-site scripting (XSS), and DDoS.

Question 22

What is the difference between a private key and a public key in asymmetric encryption?

Answer 22

A public key is used to encrypt data and can be shared openly, while the private key is used to decrypt the data and must be kept secret.

Question 23

How do you secure data at rest on a server?

Answer 23

Use encryption (AES-256 or similar), implement strong access controls, and ensure regular backups are securely stored.

Question 24

What are the key benefits of using containers in system architecture?

Answer 24

Containers isolate applications, ensuring consistency across environments and enabling efficient resource usage and rapid deployment.

Question 25

How do you secure API communications in a web service?

Answer 25

Use HTTPS, require API keys or OAuth for authentication, validate inputs to prevent injection attacks, and implement rate limiting to mitigate DDoS attacks.

Question 26

How do you troubleshoot common DNS issues?

Answer 26

Check for proper DNS server configuration, verify DNS propagation, ensure the DNS cache is cleared, and test using tools like nslookup or dig.

Question 27

How do you configure logging for security monitoring on Linux servers?

Answer 27

Set up logging with rsyslog or journalctl, configure log rotation with logrotate, and monitor logs for suspicious activity or errors.

Question 28

How do you harden an operating system against attacks?

Answer 28

Disable unused services, apply security patches, enforce strong passwords, implement firewalls, and regularly audit the system for vulnerabilities.

Question 29

What is the role of a SIEM (Security Information and Event Management) system?

Answer 29

A SIEM collects, analyzes, and correlates security data from multiple sources, providing real-time alerts and insights to identify potential security threats.

Question 30

Sharing underlying hardware between virtual machines

Answer 30

Multi-tenancy

Question 31

What is the term for how you make cloud computing instances larger?

Answer 31

Vertical Scaling