Exam 7: Designing a Secure Wireless Network
What are the benefits of layering security?
At any given time a bank may have tens of thousands of dollars in cash on hand. What security is used to protect the money from theft? There is not a single type of security, such as a front door with a strong lock. Rather, there are several types of security. In addition to a front door with a strong lock, there may also be video cameras, armed guards, motion detectors, and a vault.
Each of these types of bank security is designed to coordinate with the other types of security to create layers of protection around the money.A front door with a strong lock may be the first layer of security, followed by video cameras, motion detectors, armed guards, and finally the vault.The philosophy behind layering security is that an attacker who is able to penetrate one layer (by breaking down the front door) would then face additional layers of security (an armed guard, motion detectors, and a vault) before reaching the money. A layered approach has the advantage of creating a barrier of multiple defenses that can thwart a thief who is able to break through one layer. In addition, layers can prevent a variety of attacks: layers of security at a bank can stop both a midnight break-in as well as a holdup in broad daylight.
How can you create network segments in a wired network?
The boundaries of a network segment can be created by devices that have the capacity to regulate the flow of packets into and out of the segment. In a wired network these devices are generally classified by their relation to the OSI model. Devices that function at Layer 1, the Physical layer, do not filter any packets and instead simply pass them on to all other network devices and therefore cannot perform segmentation. Repeaters and hubs are typically Layer 1 devices. Other devices operate at Layer 2, the Data Link layer, and can perform filtering to create network segments. Bridges, switches, and routers are Layer 2 devices. Routers, which are also Layer 3 (Network layer) devices, can segment networks by directing packets based on their IP number.
A network ____________________ is a subset of a larger network.
segment
With ____, instead of giving each outgoing packet a different IP address, each packet is given the same IP address but a different port number.
____ is used to create smaller segments for security purposes.
The drawback of antivirus software is that its ____ must be continuously updated to recognize new viruses.
VLANs do not require that all of the devices be physically located together.
Sending a packet to all network devices is called a ____ transmission.
____ keeps a record of the state of a connection between an internal computer and an external server and then makes decisions based on the connection as well as the rule base.
A(n) ____________________ is a logical grouping of network devices within a larger network.
A ____ is designed to prevent malicious packets from entering the network or computer.
In addition to a hardware firewall that protects the network, each wireless device should have its own software firewall installed, sometimes known as a(n) ____.
The Cisco Systems' ____ protocol is an alternative to IEEE 802.1q.
____ is the practice of dividing the network into smaller units.
Filters
- Essay(0)
- Multiple Choice(0)
- Short Answer(0)
- True False(0)
- Matching(0)