Networks and Security: Quiz 10

s________ z________ are a segment of a network that protects the internal network from the internet. They control who can access different segments of a network. They act as a bar___________ to internal networks, maintain privacy within corporate groups, and prevent issues from spreading to the whole network. One example of network segmentation is a hotel that offers free public Wi-Fi. The unsecured guest network is kept separate from another encrypted network used by the hotel staff.

They are a part of a security technique called network seg_____________ that divides the network into parts Each network part has its own access permissions and security rules.

An organization's network is classified into two types of security zones. First, there's the uncontrolled zone, which is any network outside of the organization's control, like the internet. Then, there's the controlled zone, which is a sub_____ that protects the internal network from the uncontrolled zone.

There are several types of networks within the controlled zone. On the outer layer is the demilitarized zone, or ???, which contains public-facing services that can access the internet. This includes web servers, proxy servers that host websites for the public, and DNS servers that provide IP addresses for internet users. It also includes email and file servers that handle external communications. The ??? acts as a network perimeter to the internal network. The internal network contains private servers and data that the organization needs to protect. Inside the internal network is another zone called the re_________ zone. The re_________zone protects highly confidential information that is only accessible to employees with certain privileges.

The subdivision of a network into logical groups called sub_____. It works like a network inside a network. Subnetting divides up a network add________ range into smaller sub_____ within the network. These smaller sub_____ form based on the IP add________ and network mask of the devices on the network. sub_____ing creates a network of devices to function as their own network. This makes the network more efficient and can also be used to create security zones. If devices on the same sub_____ communicate with each other, the switch changes the transmissions to stay on the same subnet, improving speed and efficiency of the communications.

Classless Inter-Domain Routing (CIDR) is a method of assigning subnet ma________ to IP addresses to create a subnet. Classless addressing replaces classful addressing. Classful addressing was used in the 1980s as a system of grouping IP addresses into classes (Class A to Class E). Each class included a limited number of IP addresses, which were depleted as the number of devices connecting to the internet outgrew the classful range in the 1990s. Classless CIDR addressing expanded the number of available IPv4 addresses. 

CIDR allows cybersecurity professionals to segment classful networks into smaller chunks. CIDR IP addresses are formatted like IPv4 addresses, but they include a slash (“/’”) followed by a number at the end of the address, This extra number is called the IP network pre____. For example, a regular IPv4 address uses the 198.51.100.0 format, whereas a CIDR IP address would include the IP network prefix at the end of the address, 198.51.100.0/24. This CIDR address encompasses all IP addresses between 198.51.100.0 and 198.51.100.255. The system of CIDR addressing reduces the number of entries in routing tables and provides more available IP addresses within networks. You can try converting CIDR to IPv4 addresses and vice versa through an online conversion tool, like

IPAddressGuide.

Subnetting allows network professionals and analysts to create a network within their own network without requesting another network ?? address from their internet service provider. This process uses network bandwidth more efficiently and improves network performance. Subnetting is one component of creating isolated subnetworks through physical isolation, routing configuration, and firewalls.

The definition of a proxy server is a server that fulfills the req__________ of a cli__________ by for__________ them on to other servers. The proxy server is a dedicated server that sits between the internet and the rest of the network. When a request to connect to the network comes in from the internet, the proxy server will determine if the connection request is sa__________. The proxy server is a public IP address that is different from the rest of the private network. This hi__________ the private network's IP address from malicious actors on the internet and adds a layer of security.

When a client receives an HTTPS response, they will notice a distorted IP address or no IP address rather than the real IP address of the organization's web server. A proxy server can also be used to block unsafe websites that users aren't allowed to access on an organization's network. A proxy server uses temporary me__________ to store data that's regularly requested by external servers. This way, it doesn't have to fetch data from an organization's internal servers every time. This enhances security by reducing contact with the internal server.