Network access control (NAC) primarily aims to enforce policies to ensure that devices comply with security requirements before accessing the network.

A threat assessment focuses on identifying potential threats and their impact on the organization.

A DMZ provides an additional layer of security by isolating public-facing services from the internal network.

An internal threat often comes from employees within the organization who have access to sensitive information.

A zero-day attack exploits a vulnerability on the same day that it is discovered and before a fix is released.

RADIUS is commonly used to provide secure access to network resources using a central server.

TACACS+ provides centralized authentication and authorization for users accessing network devices.

Multifactor authentication involves the use of multiple forms of verification.

Confidentiality ensures that sensitive information is not accessed by unauthorized individuals.

Role-based access control assigns permissions to users based on their roles within an organization.

Kerberos provides secure authentication and communication over a network using tickets.

Single sign-on (SSO) ensures that users are authenticated only once and can access multiple systems without re-entering credentials.

Network segmentation is used to isolate different parts of a network to enhance security.

The primary purpose of a SIEM system is to collect, analyze, and report on security-related data from across the network.

A zero-day vulnerability is a security flaw that is unknown to the software vendor and has no available patch.

A vulnerability assessment aims to identify and quantify security weaknesses in a network.

LDAP is commonly used for secure communication and directory services in network authentication.

Separation of duties involves assigning specific tasks to different individuals to reduce the risk of fraud and errors.

A posture assessment evaluates the overall security posture of an organization, including policies and procedures.

The principle of least privilege ensures that users have only the minimum access necessary to perform their job functions.

A honeypot is used to lure attackers and analyze their behavior.

Security Information and Event Management (SIEM) systems detect and respond to network threats in real-time.

The main objective of defense in depth is to provide multiple layers of security to protect network resources.

Network segmentation involves dividing network resources to limit the scope of access for users.

The Zero Trust model emphasizes that no one inside or outside the network can be trusted by default.