Network Security Operations

Question 1

Network firewall

Answer 1

Barrier that intercepts and inspects traffic moving from one area of the network to another

Question 2

Packet filter

Answer 2

A firewall that operates at OSI layers three and four. Packet filters only inspect the address label of the packet but not the contents. (Payload)

Question 3

Circuit level gateways

Answer 3

Helps conceal the true identity of the client and server. Allows private IPs on the internet.

Question 4

State

Answer 4

The connection state of a conversation between two computers

Question 5

Stateful inspection

Answer 5

Allows a firewall to identify traffic as conversational and automatically creates temporary firewall rules to permit the response traffic to flow back to the sender quicker. Requires OSI layers three, four and five

Question 6

Application level firewall

Answer 6

An OSI layer 7 firewall that acts like a proxy server and actually inspects the packet payloads

Question 7

Intrusion detection systems (IDS)

Answer 7

Monitors the network passively to detect threats.

Question 8

Intrusion prevention systems (IPS)

Answer 8

Monitors the network to detect threats and then intercepts and blocks those threats.

Question 9

Tap mode

Answer 9

Where IDS/IPS is attached to the network as listening devices only. This works well for IDS but not IPS

Question 10

In-line mode

Answer 10

In order for an IPS to stop traffic, it must be positioned in the middle of the traffic stream

Question 11

Unencrypted data

Answer 11

Sent or stored in the clear

Question 12

Encrypted data

Answer 12

Ciphertext