C836 CHAPTER 10 WGU, Exam Review Questions & Answers, VERIFIED.

C836 CHAPTER 10 WGU, Exam Review Questions & Answers, VERIFIED. security in network design - -This method of security involves a well-configured and patched network, and incorporating elements such as network segmentation, choke points, and redundancy network segmentation - -The act of dividing a network into multiple smaller networks, each acting as its own small network (subnet) choke points - -certain points in the network, such as routers, firewalls, or proxies, where we can inspect, filter, and control network traffic redundancy - -a method of security that involves designing a network to always have another route if something fails or loses connection firewall - -a mechanism for maintaining control over the traffic that flows into and out of our networks packet filtering - -A firewall technology that inspects the contents of each packet in network traffic individually and makes a gross determination (based on source and destination IP address, port number, and the protocol being used) of whether the traffic should be allowed to pass SPI (Stateful Packet Inspection) - -a firewall that can watch packets and monitor the traffic from a given connection DPI (Deep Packet Inspection) - -a firewall technology that can analyze the actual content of the traffic that is flowing through proxy server - -a specialized type of firewall that can serve as a choke point, log traffic for later inspection, and provides a layer of security by serving as a single source of requests for the devices behind it DMZ (demilitarized zone) - -a combination of a network design feature and a protective device such as a firewall. Often used for systems that need to be exposed to external networks but are connected to our own network (such as a web server) NIDS (Network intrusion detection system) - -A system that monitors network traffic and alerts for unauthorized activity