Chapter 6. Networked Hosts

Question/Scenario

Answer/Definition

What simultaneous connection limit is typically hardcoded onto Windows client operating systems, making a dedicated file server necessary for larger networks?

20 maximum concurrent connections

What compact network appliance provides centralized file storage and collaboration utilities directly to a LAN, usually running a specialized variant of Linux?

Network-Attached Storage (NAS)

What server role centrally handles information caching, document spooling, printer pooling, and security permissions for multiple network printers?

Print server

What specialized server acts as a network go-between to cache web pages, hide internal client IP addresses, and perform outbound content filtering?

Proxy server

What security mechanism intercepts inbound traffic destined for a web server, masking the server's identity while providing load balancing and SSL/TLS decryption?

Reverse proxy

Which server is responsible for resolving human-readable hostnames to IP addresses, as well as handling reverse lookups?

DNS (Domain Name System) server

What protocol and server type allow routers and network devices to centralize and store logged event messages, driver failures, and diagnostics in real time?

Syslog (System Logging Protocol) server

What network service allows routers, switches, and servers to synchronize their internal clocks with an atomic clock or GPS time source for accurate log correlation?

NTP (Network Time Protocol)

What security framework does AAA stand for?

Authentication (confirming identity), Authorization (granting access), and Accounting (tracking resource usage/audit trails)

What security concept describes a state where an administrator has indisputable cryptographic or log-based proof of a user's action, preventing them from denying it?

Nonrepudiation

What type of specialized AAA server acts as a centralized backend authentication host for wireless networks and 802.1X port-based access controls?

RADIUS (Remote Authentication Dial-In User Service) server

What is the primary function of a dedicated network hardware firewall?

To close unused inbound ports and filter traffic based on Access Control Lists (ACLs) to prevent unauthorized intrusion

What security appliance combines a traditional network firewall with antivirus, antispam, URL content filtering, and an intrusion prevention system (IPS)?

UTM (Unified Threat Management) gateway

What is the difference between an Intrusion Detection System (IDS) and an Intrusion Prevention System (IPS)?

An IDS only detects and alerts an administrator to unauthorized access; an IPS actively detects, alerts, and blocks/thwarts the attack

What email security appliance or software solution is deployed directly behind an organization's firewall to intercept and sanitize incoming junk email?

Spam gateway (or email security gateway)

What device or software solution optimizes network capacity by distributing incoming layer 4 or layer 7 traffic evenly across a cluster of backend servers?

Load balancer

What are the two common load-balancing traffic algorithms used to distribute incoming connections?

Round-robin (sequential distribution) and Least connections (routing traffic to the server with the fewest concurrent sessions)

What specialized industrial control system uses coded radio or digital signals to remotely monitor and control automated physical infrastructure?

SCADA (Supervisory Control And Data Acquisition)

How do legacy embedded system architectures differ from modern desktop hardware regarding their internal processing and storage design?

They use ultra-low specification single-board designs (often measured in MHz and MB) with integrated CPU/RAM and no traditional local hard drive

What power-efficient wireless technology is frequently embedded inside smart home automation and IoT devices to collect data while conserving battery life?

BLE (Bluetooth Low Energy)

What are three critical best practices a technician must implement to reduce security vulnerabilities on a deployment of network-connected IoT devices?

Isolate IoT devices on a separate network segment, use strong custom passwords/MFA, and regularly update the device firmware and control apps