Network Security

Question 1

DES

Answer 1

Data Encryption Standard

SYMMETRIC

● Developed in the mid-1970s

● 56-bit key

● Used by SNMPv3

● Considered weak today

Question 2

3DES

Answer 2

3DES (Triple DES)

SYMMETRIC

● Uses three 56-bit keys (168-bit total)

● Encrypt, decrypt, encrypt

Question 3

AES

Answer 3

AES (Advanced Encryption Standard)

SYMMETRIC

● Preferred symmetric encryption standard

● Used by WPA2

● Available in 128-bit, 192-bit, and 256-bit keys

Question 4

RSA

Answer 4

ASYMMETRIC

Used with PKI

Question 5

MD5

Answer 5

▪ Message digest 5 (MD5)

● 128-bit hash digest

Question 6

SHA-1

Answer 6

Secure Hash Algorithm 1 (SHA-1) ● 160-bit hash digest

Question 7

SHA-2

Answer 7

Secure Hash Algorithm 256 (SHA-256) ● 256-bit hash digest

Question 8

CRAMMD5

Answer 8

Challenge-Response Authentication Mechanism Message Digest 5 (CRAMMD5)

● Common variant often used in e-mail systems

Question 9

RADIUS

Answer 9

Open Standard, UDP based authentication protocol

UDP port 1812/1813

Question 10

TACACS+

Answer 10

Cisco proprietary, TCP-based Authentication protocol

TCP port 49

Question 11

Kerberos

Answer 11

Authentication in Windows

Ticket based

Question 12

AUP

Answer 12

Acceptable Use Policy

Question 13

DLP

Answer 13

Data Loss Prevention

Question 14

System Lifecycle

Answer 14

● Conceptual Design

● Preliminary Design

● Detailed Design

● Production and Installation

● Operations and Support

● Phase Out

● Disposal

Question 15

NGFW

Answer 15

NextGen Firewalls (NGFW)
▪ Third generation firewalls that conduct deep packet inspection and packet filtering
▪ Operates at higher levels of the OSI model than traditional stateful firewalls
▪ Web Application Firewalls are a good example of these, as they inspect HTTP traffic

Question 16

ACL

Answer 16

Access Control List (ACL)
▪ Set of rules typically applied to router interfaces that permit or deny certain traffic
▪ ACL filtering criteria includes:

● Source IP, Port, or MAC

● Destination IP, Port, or MAC

Question 17

UTM

Answer 17

Unified Threat Management (UTM) Devices
▪ Device that combines firewall, router, intrusion detection/prevention system, antimalware, and other security features into a single device
▪ Agent is run on an internal client and can be queried by the UTM before allowing connection to the network
▪ UTM can be purchased as a physical device to install in your network, or you can look to a cloud solution