Network Security Exam Review

Course Information

• Course Title: Network Security
• Course Code: ITNETW1
• Exam Dates: December 2nd, 4th, 9th, 11th, and 12th, 2024

Exam Details

• Exam Type: Pen and Paper
• Topics: IP Addresses and Subnets, Network Simulation, and Network Security

Guide Questions

• What is Network Security?
• Why do we need to secure the network?
• What makes a secured network?

Network Security Definition

• Network security uses technologies, processes, and devices to protect the integrity, confidentiality, and accessibility of computer networks.
• Important for organizations of all sizes to protect against evolving cyber threats.

Cyber Attack Definition

• A cyber attack is a set of actions performed by threat actors.
• These actors aim to gain unauthorized access, steal data, or cause damage to computer networks or systems.
• Attacks can be launched from any location and involve individuals or groups utilizing multiple tactics, techniques, and procedures (TTPs).

Importance of Network Security

• Preventing Unauthorized Access: Security protocols ensure only authorized users can access critical systems and data.
• Protecting Data Integrity: Security measures prevent data tampering, ensuring data accuracy and reliability. This is crucial for sensitive info like financial data, personal records, and intellectual property.
• Ensuring Business Continuity: Effective network security strategies help mitigate risks from cyberattacks like DDoS attacks, ensuring the continued operation of services and maintaining availability.
• Compliance with Regulations: Many industries require strict data protection measures. Network security helps organizations comply with standards like GDPR, HIPAA, and PCI-DSS; avoiding penalties and maintaining customer trust.

Network Security Threats and Attacks

• Malware: Programs designed to attack information systems. Various types include ransomware (encrypts files), spyware (spies on victims), and Trojans (infiltrate systems).
• Phishing: A type of fraud where threat actors impersonate reputable entities (e.g., via email) to spread malicious attachments or links and extract account info or login credentials.
• Bots: Small programs that automate web requests with various malicious goals, disrupting applications, websites, end-users, or APIs.
• DDoS Attacks: Employ multiple compromised systems to flood a target with messages or requests, causing a denial of service and disrupting operations. DDoS attacks target websites, servers, and other network resources.
• Advanced Persistent Threats (APTs): Targeted and prolonged attacks involving unauthorized access to a network. Threat actors typically aim to steal data rather than cause immediate damage. They remain undetected for extended periods.
• Drive-by Downloads: Unintentional download of malicious code to a device (computer or mobile) exposing the user to a cyberattack; not requiring user interaction to enact the malicious code.
• DNS Attacks: Exploiting vulnerabilities in the domain name system; aiming to disrupt systems or cause issues. Communication between clients and servers is vulnerable and can be exploited by threat actors.
• Misconfiguration Exploits: Improper configuration of network systems, applications, or devices. Common sources include default settings, lack of updates, and human error.

Challenges of Network Security

• Rapidly Evolving Threat Landscape: Attackers constantly develop new methods to exploit networks and organizations must implement new defenses.
• Bigger Attack Surface: The broader scope of organizations' security strategies can be challenging to manage. All network users play a role in security maintenance.
• BYOD (Bring Your Own Device) and Remote Work: Distributed nature, personal devices (increased attack surface), and the reliance on public networks makes security management more complex.
• Cloud Security: Organizations need to address cloud security, managing the responsibility of cloud vendors versus the organization's security policies for the data and applications running in the cloud.

Firewall (Triad)

• How Firewalls function
• Use of firewalls within home networks
• Security mechanisms used in typical home networks
• Reasoning for implementation
• Practical procedures for setup

Types of Firewall (Part 2)

• Detailed Information on firewall types.

Prepare for your exam on Network Security with this quiz. It covers essential topics such as IP Addresses, Subnets, and the importance of securing networks against cyber threats. Test your knowledge on the definitions and practices vital for maintaining network integrity.