VPN

Question 1

What is a VPN?

Answer 1

VPNs (Virtual Private Networks) are commonly used in access control systems to provide secure and private access to network resources.

By now you know that VPNs provide a secure and private connection between two devices over the internet. VPNs use encryption and authentication for internet traffic, making it difficult for third parties to intercept or eavesdrop on the traffic.

Question 2

What are the benefits of VPN?

Answer 2

-Secure remote access
-Protection of senstive data
-Granular control over access control
-Compliance with regulatory requirements

Question 3

What is Terminal Access Controller Access Control System Plus (TACACS+)?

Answer 3

This is a security protocol that provides centralized authentication, authorization, and accounting services. TACACS+ separates the authentication, authorization, and accounting functions, allowing for more granular control over access to network resources.

Question 4

What is Lightweight Directory Access Protocol (LDAP)?

Answer 4

It’s an open, cross-platform protocol used to manage and access directory services. It’s essentially a way for applications to communicate with directory servers, which store information about users, computers, and other resources on a network. LDAP enables tasks like authentication, authorization, and searching for specific information within a directory.

Question 5

What is Remote Authentication Dial-In User Service (RADIUS)?

Answer 5

It is an authentication protocol that uses a centralized server to authenticate and authorize users. You also learned how RADIUS provides a way to manage network access by controlling who is allowed to access the network and what they can access. Further to this, RADIUS servers can also provide accounting services, which track user access to network resources and generate reports for billing or auditing purposes.

Question 6

What is auditing?

Answer 6

This is the process of monitoring and recording activities related to access control. It involves keeping track of who has accessed what resources and when. It monitors what actions they have taken whilst accessing those resources.
The purpose of auditing is to create an audit trail that can be used to:
* Further investigate security incidents
* Identify potential security breaches
* Ensure compliance with regulations and policies

Question 7

What to look for in VPN misuse?

Answer 7

-Unusual VPN activity
-Suspicious login attempts
-Change in user behavior
-Accessing sensitive information
-Inconsistent geolocation
-Unusual traffic network