3.2 Given a scenerio, apply security principles to secure enterprise infrastructure

What is the difference between a fail-open and a fail-closed failure mode?

Fail-open: If a system fails, the data is still able to flow.

Fail-closed: If a system fails, the data will not continue to flow.

What is a jump server?

A jump server is a term used to define a internal server that allows only certain users to connect to it from the outside if the outside user needs to make a configuration change with the internal network or just connect to the internal network from outside. These servers need to be very secure and if it does get compromised, the entire network infrastructure could be crippled.

What’s the difference between a forward proxy and reverse proxy?

Forward Proxy: This proxy controls outbound traffic to the internet from user requests.

Reverse Proxy: This proxy controls inbound traffic from the internet to the users. It will determine if the information is not malicious to the user before sending it back to the user.

What does active/active load balancing do?

Active/Active load balancing is when every server is using the load balancer on the load balancer.

What does Active/Passive load balancing do?

Active/Passive load balancing is where some servers are active, while the rest are on standy. So, if a active server fails, the load balancer will then forward the traffic to a standy server while the failed server gets repaired or replaced.

What is EAP and what does this do?

EAP stands for Extensible Authentication Protocol. This protocol is designed to support multiple different authentication methods in network environments.

What is a WAF and what does this do?

WAF stands for Web Application Firewall. This type of firewall applies rules to HTTP/HTTPS traffic. This can either allow or deny input in an application. An example would be someone trying to do a SQL injection by typing in their own code to the SQL query and the WAF blocking it.

What is the term used that manages VPN traffic and is responsible for creating, managing and terminating one or multiple VPN connections?

This is called a VPN Concentrator.

What is SASE and what does this do?

SASE stands for Secure Access Service Edge that is a cloud-based architecture that unifies networking and security services into a single, integrated platform. This is essentially a smart and secure “backbone” to your cloud.