Network Security Essentials

What is the primary function of a firewall?

• To control network traffic and protect against unauthorized access.

• To enhance internet speed and performance.

• To provide a backup for network devices.

• To store user data securely.

How does an intrusion detection system (IDS) differ from a firewall?

• An IDS monitors and alerts on suspicious activity, while a firewall blocks or allows traffic based on security rules.

• An IDS and a firewall perform the same function in network security.

• An IDS blocks traffic while a firewall monitors activity.

• An IDS is used only for network security, while a firewall is for application security.

What are the common types of firewalls?

• Application firewall

• Virtual private network

• Packet-filtering, Stateful inspection, Proxy, Next-generation firewalls

• Network intrusion detection system

Define malware and provide examples of its types.

• Malware is a type of hardware.

• Types of malware include viruses, worms, trojan horses, ransomware, spyware, adware, and rootkits.

• Malware refers to physical devices used in computing.

• Types of malware include firewalls and antivirus software.

What is the purpose of threat analysis in cybersecurity?

• To monitor user activity on networks.

• To identify and prioritize potential threats to information systems.

• To create new cybersecurity policies.

• To enhance the performance of information systems.

How can malware be detected on a network?

• By disabling firewalls on the network

• Using outdated software versions

• Malware can be detected by monitoring network traffic, using IDS, analyzing logs, employing antivirus software, and conducting vulnerability assessments.

• Ignoring user reports of suspicious activity

What role do antivirus programs play in network security?

• Antivirus programs only enhance internet speed.

• Antivirus programs are designed to improve user interface design.

• Antivirus programs protect networks by detecting and removing malware, preventing infections, and maintaining data integrity.

• Antivirus programs are primarily used for data backup.

Explain the concept of a zero-day exploit.

• A zero-day exploit is an attack that occurs on the same day a vulnerability is discovered, before a fix is available.

• A zero-day exploit is a type of malware that is released after a vulnerability is patched.

• A zero-day exploit is a security measure implemented to prevent attacks on known vulnerabilities.

• A zero-day exploit is an attack that occurs after a fix is available for a vulnerability.

What are the signs that a network may be compromised?

• Regular software updates

• Increased user satisfaction

• Unusual network traffic, unexpected system behavior, unauthorized access attempts, frequent crashes, unknown devices.

• Consistent network performance

How can organizations protect themselves from malware attacks?

• Implement a multi-layered security approach including software updates, employee training, antivirus solutions, firewalls, and security audits.

• Use outdated software to save costs.

• Rely solely on employee passwords for security.

• Ignore security audits as they are unnecessary.