Section A — 1 Mark Questions
1. Define the primary goal of confidentiality in network security. [1 Mark]
Answer: Confidentiality ensures that data is accessed only by authorized parties and remains secret from unauthorized users.
2. What is the main objective of message integrity? [1 Mark]
Answer: To ensure that the content of a message has not been altered, tampered with, or corrupted during transmission.
3. What is a firewall? [1 Mark]
Answer: A firewall is a network security device that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
4. Identify the core principle of non-repudiation in cryptography. [1 Mark]
Answer: It provides proof of the origin and integrity of data, ensuring that a sender cannot deny having sent a message.
5. What does an authentication process establish? [1 Mark]
Answer: It verifies the identity of the communicating parties or the source of a message.
6. Name one type of firewall. [1 Mark]
Answer: Packet-filtering firewall.
7. What is the purpose of availability in network security? [1 Mark]
Answer: To ensure that systems and data are accessible to authorized users when needed.
8. What is the role of a secret key in symmetric cryptography? [1 Mark]
Answer: The same key is used by both the sender and receiver for both encryption and decryption.
9. Define the concept of a digital signature. [1 Mark]
Answer: A digital signature is a cryptographic mechanism used to verify the authenticity and integrity of digital data.
10. What is a primary threat to e-mail security? [1 Mark]
Answer: Phishing or malicious attachments.
11. Does a stateful inspection firewall track the state of active connections? [1 Mark]
Answer: Yes, it tracks the state of active network connections to make security decisions.
12. What does encryption convert plaintext into? [1 Mark]
Answer: Ciphertext.
13. Which security goal is violated if a message is intercepted and read? [1 Mark]
Answer: Confidentiality.
14. What is the purpose of a proxy firewall? [1 Mark]
Answer: It acts as an intermediary between the internal network and the external network, masking the true source of traffic.
15. What is the function of a hash function in message integrity? [1 Mark]
Answer: It generates a fixed-size digest from a variable-length message to detect any changes.
16. Can a firewall block unauthorized internal access? [1 Mark]
Answer: Yes, firewalls can be configured to restrict internal traffic flow.
17. Define the term 'plaintext' in cryptography. [1 Mark]
Answer: Plaintext is the readable message before it has been encrypted.
18. What is the core mechanism of public key cryptography? [1 Mark]
Answer: It uses a pair of keys: a public key for encryption and a private key for decryption.
19. What is the main drawback of simple packet filtering? [1 Mark]
Answer: It lacks context about the state of the connection and can be vulnerable to IP spoofing.
20. Why is e-mail security challenging? [1 Mark]
Answer: Because e-mail is inherently an open, distributed system susceptible to interception and spoofing.
Section B — 2/3 Mark Questions
1. Differentiate between symmetric and asymmetric cryptography. [2 Marks]
Answer: Symmetric cryptography uses a single shared key for both encryption and decryption. Asymmetric cryptography uses a public key for encryption and a distinct private key for decryption.
2. List three major goals of network security. [3 Marks]
Answer: The three major goals are: (1) Confidentiality: keeping data secret; (2) Integrity: ensuring data has not been altered; (3) Availability: ensuring systems and data are accessible to authorized users.
3. Briefly explain how a packet-filtering firewall works. [2 Marks]
Answer: It inspects individual packets against a set of rules based on header information like source/destination IP addresses and port numbers. If the packet matches a rule, it is either allowed or dropped.
4. What is the role of hashing in ensuring message integrity? [3 Marks]
Answer: A hash function takes a message as input and produces a unique fixed-length digest. If any bit of the message changes, the output digest changes. The receiver calculates the hash of the received message and compares it to the transmitted hash to verify integrity.
5. Explain the concept of a stateful firewall. [2 Marks]
Answer: A stateful firewall maintains a table of active connections and monitors the state of these sessions, allowing or denying traffic based on whether the packet belongs to an established, legitimate connection.
6. Describe two threats associated with insecure e-mail. [2 Marks]
Answer: (1) E-mail spoofing where an attacker sends a message appearing to be from someone else. (2) Eavesdropping, where the contents of an e-mail are intercepted during transit.
7. Why is authentication critical in a secure network? [2 Marks]
Answer: Authentication ensures that users or devices are who they claim to be, preventing unauthorized entities from accessing protected resources or impersonating legitimate users.
8. Compare application-level firewalls with packet-filtering firewalls. [3 Marks]
Answer: Packet-filtering firewalls operate at the network layer, inspecting headers only. Application-level firewalls operate at the application layer, examining the actual content of the communication, offering deeper inspection but typically with higher processing overhead.
9. What are the primary responsibilities of operational security? [2 Marks]
Answer: It involves the implementation and management of security policies, procedures, and tools, such as firewalls and access controls, to maintain a secure environment during day-to-day operations.
10. Explain the purpose of a 'private key' in security. [3 Marks]
Answer: A private key is a secret component in asymmetric cryptography. It is used to decrypt data encrypted with the corresponding public key and is also used to generate digital signatures to prove the identity of the owner.
Section C — 5 Mark Questions
1. Explain the fundamental principles of cryptography and its role in network security. [5 Marks]
Introduction
Cryptography is the science of secure communication, providing methods to protect information from unauthorized access and alteration.
Core Principles
- Confidentiality: Using encryption to ensure only authorized parties can read the data.
- Authentication: Proving the identity of the sender and receiver.
- Integrity: Using hashing techniques to ensure data remains unchanged.
- Non-repudiation: Creating cryptographic proof that a specific sender sent a specific message.
Role in Network Security
Cryptography acts as the backbone for secure internet protocols. By converting readable data into complex ciphertext, it ensures that even if traffic is intercepted, it cannot be interpreted without the appropriate cryptographic keys, thereby safeguarding sensitive information across public networks.
2. Describe the different types of firewalls and their operational characteristics. [5 Marks]
Introduction
Firewalls are essential components of operational security that act as a barrier between secure internal networks and untrusted external networks.
Types of Firewalls
- Packet-Filtering Firewalls: These examine individual packets based on headers (IP, port, protocol). They are fast but lack session context.
- Stateful Inspection Firewalls: These track the state of network connections, ensuring that incoming packets are part of an authorized, established session.
- Application-Level Gateways (Proxy Firewalls): These function at the application layer. They inspect the actual data payload and hide the internal network structure by acting as an intermediary.
Conclusion
Selecting the right firewall depends on the level of security required and the network performance constraints, as higher-layer inspection offers more security but requires more processing power.
3. Discuss the importance of message integrity and how it is achieved in networks. [5 Marks]
Introduction
Message integrity ensures that the information received is exactly the same as the information sent, free from accidental or malicious modification.
How Integrity is Achieved
- Hash Functions: A cryptographic hash algorithm creates a digest (a digital fingerprint) of the message. If any bit changes during transmission, the recalculation of the hash at the receiver end will not match the sent hash.
- Digital Signatures: By signing a hash with a private key, the sender provides both integrity (via the hash) and authentication (via the signature).
- Message Authentication Codes (MACs): These combine a secret key with the data before hashing to ensure both integrity and authenticity between two parties sharing a secret key.
Importance
Without integrity, malicious actors could alter bank transaction amounts, modify system instructions, or inject false data into secure communication streams, leading to severe security breaches.
4. Explain the challenges associated with e-mail security and common methods to mitigate them. [5 Marks]
Challenges
E-mail is a legacy protocol that often sends data in plaintext, making it vulnerable to interception. Common threats include phishing, where attackers masquerade as legitimate entities to steal credentials, and the injection of malware via attachments.
Mitigation Strategies
- Encryption: Protocols like PGP or S/MIME can be used to encrypt the body of the message, ensuring only the intended recipient can read it.
- Digital Signatures: These ensure the integrity of the email and verify that the sender is authentic.
- Gateway Security: Organizations often deploy email firewalls and spam filters at the gateway level to scan for malicious content and suspicious sender patterns before messages reach the end-user.
Summary
Securing e-mail requires a layered approach, combining user education with strong technical measures like encryption and automated content inspection.
5. Elaborate on the goals of network security and why they are necessary. [5 Marks]
Introduction
Network security is designed to protect the integrity, privacy, and accessibility of digital infrastructure against cyber threats.
Main Goals
- Confidentiality: Necessary to protect sensitive intellectual property, personal user information, and private communication from unauthorized access.
- Integrity: Crucial for maintaining the accuracy of data. If systems cannot guarantee integrity, users cannot trust the information they receive.
- Availability: Vital for modern businesses that rely on 24/7 uptime. Attacks like Distributed Denial of Service (DDoS) violate this goal by crashing services.
- Authentication and Non-repudiation: Necessary to maintain accountability, ensuring users cannot deny their actions and that only authorized users access the system.
Conclusion
These goals form the CIA triad (Confidentiality, Integrity, Availability), which serves as the foundational framework for all network security policies, helping organizations evaluate risks and deploy appropriate protective controls.