Network Security

Question 1

Network Security

Answer 1

is the protection of the underlying networking infrastructure from unauthorized access, misuse, or theft. (es la protección de la infraestructura de red subyacente por acceso no autorizado, mal uso o robo.)

Question 2

It involves creating… (Implica crear…)

Answer 2

a secure infrastructure for devices, applications, users, and applications to work in a secure manner. (una infraestructura segura para que dispositivos, aplicaciones, usuarios y aplicaciones funcionen de manera segura.)

Question 3

How does network security work?

Answer 3

Network security combines multiple layers of defenses at the edge and in the network. (La seguridad de la red combina múltiples capas de defensas en el borde y en la red.)

Question 4

Each network security layer… (Cada capa de seguridad de la red…)

Answer 4

implements policies and controls. (implementa políticas y controles.)

Question 5

Authorized users gain access to network resources… (Los usuarios autorizados obtienen acceso a los recursos de la red…)

Answer 5

but malicious actors are blocked from carrying out exploit and threats. (pero los actores maliciosos están bloqueadas para llevar a cabo hazañas y amenazas.)

Question 6

Every organization that wants to deliver the services that customers and employees demand… (Toda organización que quiera ofrecer los servicios que los clientes y empleados exigen…)

Answer 6

must protect its network. (debe proteger su red.)

Question 7

Network security helps…

Answer 7

protect proprietary information from attack. And protects your reputation. (proteger la información propietaria de ataques. Y protege su reputación.)

Question 8

Network security is defined:

Answer 8

as the process of creating a strategic defensive approach that secures a company’s data and its resources across its network. (como el proceso de creación de un enfoque defensivo estratégico que proteja los datos y recursos de una empresa a través de su red.)

Question 9

Irrespective of the organization’s size, industry, or infrastructure…

Answer 9

network security solutions protect it against the ever-evolving threat of cyberattacks. (las soluciones de seguridad de red la protegen contra la amenaza en constante evolución de los ciberataques.)

Question 10

The integrity, confidentiality, and accessibility of these computers are: (La integridad, confidencialidad y accesibilidad de estas computadoras son:)

Answer 10

maintained with network security and software and hardware technologies. (mantenidas con seguridad de red y tecnologías de software y hardware.)

Question 11

A network is considered secure only when it comprises three key components: (Una red se considera segura sólo cuando consta de tres componentes clave:)

Answer 11

confidentiality, integrity and availability. (confidencialidad, integridad y disponibilidad.)

Question 12

This combination, called:

Answer 12

the CIA triad

Question 13

The CIA triad, is a well-know standard used…

Answer 13

while creating network security policies for any organization. (mientras crea políticas de seguridad de red para cualquier organización.)

Question 14

The system is constantly under threat from hackers… (El sistema está constantemente amenazado por hackers…)

Answer 14

who are envolving and constinuosly finding ways to spot vulnerabilities and exploit them. (que están evolucionando y encontrando constantemente formas de detectar vulnerabilidades y explotarlas.)

Question 15

Vulnerabilities exist in several areas such as:

Answer 15

• devices
• data
• applications
• users
• locations
• among others

Question 16

With even the shortest period of downtime… (Incluso con el período de inactividad más corto…)

Answer 16

losses can be immense. (las pérdidas pueden ser inmensas.)

Question 17

Any vulnerability gives hackers the ability to:

Answer 17

• access infrastructure
• install malware
• even steal (incluso robar)
• and modify data (if not destroy or erase it)

Question 18

The vulnerabilities include:

Answer 18

1. Missing data encryption (Cifrado de datos faltantes)
2. Operating system command injection (Inyección de comandos del sistema operativo)
3. SQL injection
4. Missing authentication
5. Unrestricted upload of dangerous file types (Carga sin restricciones de tipos de archivos peligrosos)
6. Other vulnerabilities

Question 19

Missing data encryption

Answer 19

Sometimes, a software does not encrypt or secure sensitive data before transmitting or saving it. (A veces, un software no cifra ni protege los datos confidenciales antes de transmitirlos o guardarlos.)

Question 20

Operating system command injection

Answer 20

Through an operating system command injection, a hacker can execute a random OS, corrupting the server running an application and compromising its functioning completely. (A través de una inyección de comando del sistema operativo, un hacker puede ejecutar un sistema operativo aleatorio, corrompiendo el servidor que ejecuta una aplicación y comprometiendo su funcionamiento por completo.)

Question 21

SQL injection

Answer 21

A hacker uses an SQL injection to intercept queries that an application makes to its server. (Un hacker utiliza una inyección SQL para interceptar las consultas que una aplicación realiza a su servidor.)

Question 22

Missing authentication

Answer 22

Sometimes, a software does not conduct any authentication of user identity or the resources being utilized. (A veces, un software no realiza ninguna autenticación de la identidad del usuario o de los recursos que se utilizan.)

Question 23

Unrestricted upload of dangerous file types

Answer 23

Where a software permits a hacker to upload dangerous files and run them on the software’s environment. (Cuando un software permite que un hacker cargue archivos peligrosos y los ejecute en el entorno del software)

Question 24

Other vulnerabilities

Answer 24

Include:
- weak passwords
- buffer overflow
- missing authorization
- cross-site scripting and forgery
- download of codes without integrity checks
- use of broken algorithms
- URL redirection to untrusted sites
- path traversal
- bugs

Question 25

Since attacks can occur to any layer of a network’s set-up… (Dado que los ataques pueden ocurrir a cualquier capa de la configuración de una red…)

Answer 25

all network hardware, software and policies related to network security must be created to address each layer. (todo el hardware, software y políticas de red relacionados con la seguridad de la red deben crearse para abordar cada capa.)

Question 26

The fundamentals of network security include:

Answer 26

1. Access control
2. Identification
3. Authentication
4. Authorization
5. Accounting
6. Physical network security
7. Technical network security
8. Administrative network security

Question 27

Access control

Answer 27

Access control is the system used to restrict access to data. (El control de acceso es el sistema utilizado para restringir el acceso a los datos.)

Question 28

Identification

Answer 28

Utilizing usernames and identity numbers to confirm user identity, processes, or devices that may be requesting access to the network. (Utilizar nombres de usuario y números de identidad para confirmar la identidad del usuario, los procesos o los dispositivos que pueden estar solicitando acceso a la red.)

Question 29

Authentication

Answer 29

Verifying credentials, authorization is provided to those requesting access to specfic data on the network. (Al verificar las credenciales, se proporciona autorización a quienes solicitan acceso a datos específicos en la red.)

Question 30

Accounting

Answer 30

Accounting tracks all actions carried out by a user on the network, which helps identity all authorized and unauthorized actions. (La contabilidad rastrea todas las acciones realizadas por un usuario en la red, lo que ayuda a identificar todas las acciones autorizadas y no autorizadas.)

Question 31

Physical network security

Answer 31

Is used to prevent unauthorized individuals from gaining physical access to components such as routers or cabling cupboards. (Se utiliza para evitar que personas no autorizadas obtengan acceso físico a componentes como enrutadores o armarios de cableado.)

Question 32

Technical network security

Answer 32

Protects all the data stored on a network. This can be data coming into the network, going out, or even transiting though it. (Protege todos los datos almacenados en una red. Pueden ser datos que entran, salen o incluso transitan por la red.)

Question 33

Administrative network security

Answer 33

Administrative security controls comprise security policies and processes used to control user behavior. (Los controles administrativos de seguridad comprenden políticas y procesos de seguridad utilizados para controlar el comportamiento del usuario.)

Question 34

Types of network security:

Answer 34

• Firewalls
• Intrusion prevention systems
• Workload security
• NetWork security
• SecureX
• Network segmentation
• VPN
• Access control
• Application security
• Behavioral analytics
• Cloud security
• Data loss prevention
• Email security
• Industrial network security
• Mobile device security
• Security information and event management
• Web security
• Wireless security