Section 13: Network Security Infrastructure

Part 1

Data Center air temps must be between

64.4 degrees F and 80.6 degrees F

Maintain data centers dew points between

41.9 degrees F and 50.0 degrees F

Fighting fires with water in data centers

is not a good idea

Wet Pipe Systems 

contain water in the pipes ready to deploy when a fire strikes

Dry Pipe Systems

do not contain water until a valve opens during a fire alarm and minimizes the risk of a burst pipe.

Chemical systems deprive fire of 

oxygen

Fire requires three supporting elements

Heat, Fire, Oxygen

Network Border Firewalls have three network interfaces

• Internet

• Intranet

• DMZ

Intranet

internal network where most systems reside

DMZ

is a network where you can place systems that must accept connections form the outside world

In a zero trust approach, systems do not gain any trust based solely upon their network location.

True

3 special purpose networks

• Extranet

• Honeynet

• AD-Hoc Network

Extranet

intranet segments extended to business partners

Honeynet

decoy networks designed to attract attackers

AD Hoc Network

temporary networks that may bypass security controls

East-West Traffic

network traffic between systems located in the data center

North-South Traffic

network traffic between systems in the data center and systems on the internet

Switches

connect devices to the network; they reside in wiring closets and connect the computers in a building together

Ethernet Jacks

are at the other end of network cables connected to switches

Wireless Access Points (WAPs)

connect to switches and create Wi-Fi networks

Switches are typically in what Layer of the OSI model?

typically in Layer 2 the data link layer they may also function in Layer 3 the Network Layer

Routers

connect networks to each other, making intelligent packet routing decisions

Virtual LANs (VLANs)

separate systems on a network into logical groups based upon function

VLANS extend

the broadcast domain

Two things to configure VLANS

• Must enable VLAN trucking

• Configure VLANs for each switch port

Used to create network segmentation

VLANS

Switches carry VLANs on a network

True