Review Questions
-
Briefly describe the meaning of depth as referred to by the concept of defense in depth and breadth as applied to network security.
-
Briefly describe the meaning of breadth as referred to by the concept of defense in depth and breadth in network security.
-
True or False: Adding additional layers of defense always improves the overall security of the network.
-
True or False: To protect a service, protection may be required both within the services plane and in protection of the services plane to fully mitigate the risk of attacks against a service.
-
Which of the following interfaces are defined as logical interfaces?
- Loopback interface
- Receive interface
- Out-of-band (OOB) interface
- Null0 interface
- Tunnel interface
-
True or False: In an enterprise environment, the IGP carries all network reachability information, including user address space and network infrastructure address space.
-
Briefly describe how the security policies for the enterprise edge and SP Internet edge differ.
-
True or False: In an SP default route-free core, transit traffic can never impact the internal network interfaces.
-
True or False: In an MPLS VPN core network, PE routers isolate the core P routers from direct attack by hiding core addresses from customer traffic through VRF separation.