click below
click below
Normal Size Small Size show me how
compare+vocab M5
Module 5 comparisons and vocabulary
| Term | Definition |
|---|---|
| VLAN | A logical network segmentation that separates devices into different broadcast domains on the same physical network. |
| Security zones | - A grouping of systems or resources with similar security requirements where traffic between zones is controlled |
| defense in depth | - A layered security strategy that places multiple security controls throughout a network |
| forward proxy | - A proxy that represents internal servers to external users. |
| reverse proxy | - A proxy that represents internal servers to external users. |
| fail open | A configuration that prioritizes availability by allowing traffic to continue if a security device fails |
| fail closed | A configuration that prioritizes security by stopping traffic if a security device fails. |
| IDS intrustion detection systems | - A system that detects suspicious activity and generates alerts but does not automatically stop attacks |
| IPS intrustion prevention systems | - A system that detects and actively blocks or mitigates attacks |
| Jump servers | - A secured administrative server used as a centralized point for managing other systems |
| why are vlans useful for security | VLANs separate devices into different broadcast domains, reducing unnecessary communication and limiting access between groups of devices. |
| what is the difference between ah and esp | AH provides authentication and integrity but does not encrypt data. ESP provides encryption and can also provide integrity protection. |
| why is a layer 7 firewall more powerful than basic packet filtering | A Layer 7 firewall performs deep packet inspection and analyzes application-layer traffic, while a packet filter only examines addressing and port information. |
| how does load balancer improve availability | It distributes traffic among multiple servers, preventing overload and allowing services to remain available if one server fails. |
| why is out of brand management considered more secure | It uses a separate management network, reducing exposure to attacks and maintaining access during production network outages. |
| switch VS router | Switch uses MAC addresses; Router uses IP addresses |
| vlan VS security zone | VLANs segment networks logically; Security zones control trust boundaries |
| IDS vs IPS | IDS detects; IPS detects and blocks |
| forward VS reverse proxy | Forward protects clients; Reverse protects servers |
| layer 4 VS layer 7 firewalls | Layer 4 filters connections; Layer 7 inspects application traffic |
| AH vs ESP | AH = integrity/authentication; ESP = encryption |
| transport VS tunnel | Transport = host-to-host; Tunnel = site-to-site/client VPN |
| RDP vs SSH | RDP provides GUI access; SSH provides command-line access |
| fail-open VS fail-closed | Availability vs Security |
| A company deploys a reverse proxy, WAF, IPS, and load balancer in front of its public web servers. Explain how each device contributes a diƯerent layer of defense. | Reverse proxy hides the internal servers from direct access. WAF filters malicious web application traƯic. IPS identifies and blocks network attacks. Load balancer distributes traƯic and improves availability. |