Module 4 Review

A firewall acts as a gatekeeper, filtering network traffic based on rules.

NAT allows multiple devices on a private network to share one public IP address.

Zenmap is a graphical interface for the Nmap network scanner.

Snort is a network watchdog that detects and can block attacks.

HTTPS encrypts data between your browser and websites to keep it secure.

Tracert shows the path data takes from your computer to a website.

Whois lets you find out who owns a domain or IP address.

Nmap is a tool used to scan networks and find open ports.

VPN hides your online activity and encrypts your internet connection.

SIEM software collects security alerts from across an organization in one place.

NetFlow is used to collect and analyze network traffic data.

IDS blocks suspicious network traffic in real time.

SIEM tools help detect threats faster by combining logs and alerts from different systems.

The Cybersecurity Incident Response Team’s main job is to recover from attacks and investigate incidents.

A router connects devices within a network and directs traffic to the internet.

Ping tests if a device is reachable on the network by sending packets.

IPS only detects suspicious traffic but does not block it.

The last step of penetration testing is analysis and reporting.

Telnet sends data encrypted to ensure secure remote access.

NAT exposes every device on your network to the internet using its own public IP address.