Network Attacks
This attack floods a website or network so people cannot use it.
What is a denial-of-service attack?
This control manages user logins from one central system.
What is centralized authentication?
This divides a network into separate parts to help stop attacks from spreading.
What is segmentation?
This device or program allows or blocks network traffic using security rules.
What is a firewall?
This tool watches network traffic and sends alerts.
What is a NIDS?
This attack tricks devices into sending network traffic to the attacker.
What is ARP poisoning?
This secure tool is safer than Telnet for remote access.
What is SSH?
This separates devices on one switch into different logical networks.
What is a VLAN?
This list of firewall rules tells the firewall which traffic to allow or deny.
What is an access control list, or ACL?
This tool can automatically block suspicious network traffic.
What is a NIPS?
A DoS attack uses one source. A DDoS attack uses this.
What are many devices?
This VPN setting lets some internet traffic skip the VPN.
What is split tunneling?
This divides a network into smaller IP address ranges.
What is subnetting?
This firewall checks packets one at a time and does not remember past traffic.
What is a stateless firewall?
A real attack happens, but the system does not alert anyone. What is this?
What is a false negative?
This attack fills a switch’s address table with fake addresses.
What is MAC flooding?
This wireless security option is strongest among those listed in the class material.
What is WPA3?
This is a separate area for public-facing servers, kept apart from the internal network.
What is a DMZ?
This firewall remembers active connections so it can recognize traffic that belongs to an ongoing conversation.
What is a stateful firewall?
This detection method compares network activity to a list of known attack patterns.
What is signature-based detection?
This attack uses fake source addresses and many ping replies to overwhelm a victim.
What is a Smurf attack?
Hiding a Wi-Fi name does not do this to the data.
What is encrypt it?
What is one important rule for guest Wi-Fi in a school network?
What is block guest Wi-Fi from reaching internal school systems?
This firewall checks packet contents and can look for threats inside the data.
What is a next-generation firewall?
This type of detection looks for unusual behavior, including new attacks.
What is anomaly-based detection?