SECURITY IN NETWORK DESIGN CHAPTER 10
HIGH-YIELD CYBERSECURITY TOPICS
SUMMARY 2026
◉ 802.1X.
Answer: A vendor-independent IEEE standard for securing
transmission between nodes according to the transmission's port,
whether physical or logical. 802.1X, also known as EAPoL, is
commonly used with RADIUS authentication.
- allows only EAPoL traffic over any switch or AP port connected to a
wired or wireless client until that client has authenticated with the
authentication server. This is called PNAC (port-based network
access control), or sometimes port-based authentication
- Today it is primarily used on wireless LANs.
◉ AAA (authentication, authorization, and accounting).
Answer: A category of protocols that establish a client's identity,
authorize a user for certain privileges on a system or network, and
keep an account of the client's system or network usage.
◉ access control.
Answer: One or more security techniques for managing users' access
to a network and its resources.
,◉ accounting.
Answer: In the context of network security, the process of logging
users' access and activities on a network.
- asks, "What did you do?"
- The records that are kept in these logs are later audited, either
internally or by an outside entity, to ensure compliance with existing
organizational rules or external laws and requirements.
◉ ACL (access control list).
Answer: A list of statements used by a router or other device to
permit or deny the forwarding of traffic on a network based on one
or more criteria.
- acts like a filter to instruct the router to permit or deny traffic
according to one or more of the following variables:
- Network layer protocol (for example, IP or ICMP)
- Transport layer protocol (for example, TCP or UDP)
- Source IP address
- Destination IP address (which can restrict or allow certain
websites)
- TCP or UDP port number
- Each time a router receives a packet, it examines the packet and
refers to this to determine whether the packet meets criteria for
permitting or denying travel on the network
,- each interface must be assigned a separate one, and different ones
may be associated with inbound and outbound traffic. When these
are installed on routers, each one is assigned a number or name.
- is not automatically installed on a router.
- the more statements or tests a router must scan (in other words,
the longer the ACL), the more time it takes a router to act, and,
therefore, the slower the router's overall performance.
◉ AES (Advanced Encryption Standard).
Answer: A private key encryption algorithm that uses a
sophisticated family of ciphers along with multiple stages of data
transformation.
◉ agent.
Answer: A software routine that collects data about a managed
device's operation or compliance with security benchmarks, and
provides this information to a network management application.
◉ agentless authentication.
Answer: An authentication process in which the user is
authenticated rather than the device. The device is then scanned to
determine compliance with access control requirements.
- used with Active Directory
, ◉ alert.
Answer: A message generated when a pre-defined event occurs,
which is then logged by the system
- used in SIEMs
◉ authentication server.
Answer: In EAP, The authority on computer names and their IP
addresses for computers in their domains.
- The server that performs the authentication
◉ authenticator.
Answer: In Kerberos authentication, the user's time stamp
encrypted with the session key. The authenticator is used to help the
service verify that a user's ticket is valid.
◉ authorization.
Answer: The process that determines what a user can and cannot do
with network resources.
- asks the question, "What are you allowed to do?"
- restrictions affect Layer 2 segmentation, Layer 3 filtering, and
Layer 7 entitlements.
- 2 categories:
1. the privilege or right to execute, install, and uninstall software
HIGH-YIELD CYBERSECURITY TOPICS
SUMMARY 2026
◉ 802.1X.
Answer: A vendor-independent IEEE standard for securing
transmission between nodes according to the transmission's port,
whether physical or logical. 802.1X, also known as EAPoL, is
commonly used with RADIUS authentication.
- allows only EAPoL traffic over any switch or AP port connected to a
wired or wireless client until that client has authenticated with the
authentication server. This is called PNAC (port-based network
access control), or sometimes port-based authentication
- Today it is primarily used on wireless LANs.
◉ AAA (authentication, authorization, and accounting).
Answer: A category of protocols that establish a client's identity,
authorize a user for certain privileges on a system or network, and
keep an account of the client's system or network usage.
◉ access control.
Answer: One or more security techniques for managing users' access
to a network and its resources.
,◉ accounting.
Answer: In the context of network security, the process of logging
users' access and activities on a network.
- asks, "What did you do?"
- The records that are kept in these logs are later audited, either
internally or by an outside entity, to ensure compliance with existing
organizational rules or external laws and requirements.
◉ ACL (access control list).
Answer: A list of statements used by a router or other device to
permit or deny the forwarding of traffic on a network based on one
or more criteria.
- acts like a filter to instruct the router to permit or deny traffic
according to one or more of the following variables:
- Network layer protocol (for example, IP or ICMP)
- Transport layer protocol (for example, TCP or UDP)
- Source IP address
- Destination IP address (which can restrict or allow certain
websites)
- TCP or UDP port number
- Each time a router receives a packet, it examines the packet and
refers to this to determine whether the packet meets criteria for
permitting or denying travel on the network
,- each interface must be assigned a separate one, and different ones
may be associated with inbound and outbound traffic. When these
are installed on routers, each one is assigned a number or name.
- is not automatically installed on a router.
- the more statements or tests a router must scan (in other words,
the longer the ACL), the more time it takes a router to act, and,
therefore, the slower the router's overall performance.
◉ AES (Advanced Encryption Standard).
Answer: A private key encryption algorithm that uses a
sophisticated family of ciphers along with multiple stages of data
transformation.
◉ agent.
Answer: A software routine that collects data about a managed
device's operation or compliance with security benchmarks, and
provides this information to a network management application.
◉ agentless authentication.
Answer: An authentication process in which the user is
authenticated rather than the device. The device is then scanned to
determine compliance with access control requirements.
- used with Active Directory
, ◉ alert.
Answer: A message generated when a pre-defined event occurs,
which is then logged by the system
- used in SIEMs
◉ authentication server.
Answer: In EAP, The authority on computer names and their IP
addresses for computers in their domains.
- The server that performs the authentication
◉ authenticator.
Answer: In Kerberos authentication, the user's time stamp
encrypted with the session key. The authenticator is used to help the
service verify that a user's ticket is valid.
◉ authorization.
Answer: The process that determines what a user can and cannot do
with network resources.
- asks the question, "What are you allowed to do?"
- restrictions affect Layer 2 segmentation, Layer 3 filtering, and
Layer 7 entitlements.
- 2 categories:
1. the privilege or right to execute, install, and uninstall software
