Network Security Quiz

Course Information

• Course Title: NETWORK SECURITY
• Course Code: ITNETW1
• Final Weeks: December 2nd, 4th, 9th, and 11th, 2024
• Final Exam: Thursday, December 12th, 2024 (pen and paper)
• Exam Topics: IP Address and Subnet, Network Simulation, Network Security

Guide Questions

• What is Network Security?
• Why do we need to secure the network?
• What makes a secured network?

What is Network Security?

• Network security combines technologies, processes, and devices.
• The goal is to protect the integrity, confidentiality, and accessibility of computer networks.
• Security is essential for organizations of all types and sizes.

What is a Cyber Attack?

• A cyber attack is a series of actions performed by threat actors.
• These actors attempt to gain unauthorized access, steal data, or cause damage to computers, networks, or other systems.
• Attacks can originate from any location and be performed by individuals or groups using various tactics, techniques, and procedures (TTPs).

Why Is Network Security Important?

• Preventing unauthorized Access: Security protocols prevent unauthorized access, ensuring only authorized users can access critical systems and data.
• Protecting Data Integrity: Security measures prevent data tampering and ensure data accuracy and reliability. This is important for sensitive data (financial, personal, and intellectual property).
• Ensuring Business Continuity: Effective security strategies mitigate risks like DDoS attacks, ensuring operational continuity.
• Compliance with Regulations: Security is crucial for complying with industry regulations (e.g., GDPR, HIPAA, PCI-DSS), thereby avoiding legal penalties and maintaining trust.

Network Security Threats and Attacks

• Malware: A program designed to harm information systems. Malware types: ransomware, spyware, Trojans.
• Phishing: A type of fraud where threat actors impersonate reputable entities via email or other forms of communication to spread malicious attachments/links.
• Bots: Automated programs that perform tasks like web requests, scanning websites, testing stolen credit card numbers. Bot attacks are used to disrupt platforms.
• DDoS Attacks: Distributed Denial of Service attacks flood the target systems with messages or requests to overwhelm them and disrupt services.
• Advanced Persistent Threats (APTs): Targeted and prolonged attacks to gain unauthorized access to a network and steal data, often undetected for extended periods.
• Drive-by Downloads: Unintentional downloads of malicious code. Users do not need to actively engage in an attack.
• DNS Attacks: Attacks exploit vulnerabilities in Domain Name Systems (DNS) for communication between clients and servers. DNS attacks can redirect traffic.
• Misconfiguration Exploits: Occur when network systems, applications, or devices are improperly configured, exposing vulnerabilities. Examples include default settings, lack of timely updates, and human errors.

What are the Challenges of Network Security?

• Rapidly Evolving Threat Landscape: Cyber threats evolve quickly, requiring continuous updates to security protocols.
• Bigger Attack Surface: The increasing scope of security strategies, including all users, makes security more challenging.
• Bring Your Own Device (BYOD) and Remote Work: Wireless security is important for remote employees accessing company resources via insecure networks outside the physical network.
• Cloud Security: Responsibility for securing data and applications in cloud environments is typically shared between organizations and cloud vendors.

Firewall (Triad)

• How Firewalls Work: Illustrate and discuss the use of firewalls in home networks.
• List Security Mechanisms: List and discuss mechanisms used in typical home networks.

Types of Firewall (Part 2)

• This section continues the discussion about different types of firewalls.

Test your knowledge on Network Security, including key concepts like IP addressing, subnetting, and cyber attack strategies. This quiz will cover essential topics needed for successful completion of the final exam in the NETWORK SECURITY course.