Question 1

What are the key layers of network defense?

Accepted Answer

Defense in depth includes perimeter security (firewalls, DMZ), network segmentation (VLANs, micro-segmentation), intrusion detection and prevention systems (IDS/IPS), endpoint protection, network access control (NAC), encrypted communications (VPN, TLS), and continuous monitoring with SIEM. Each layer adds redundancy so a breach at one level does not compromise the entire network.

Question 2

How do intrusion detection systems (IDS) work?

Accepted Answer

IDS monitors network traffic or system activity for suspicious behavior. Signature-based IDS matches traffic against known attack patterns, while anomaly-based IDS establishes a baseline of normal behavior and flags deviations. Modern systems combine both approaches and integrate with SIEM platforms for real-time alerting and automated response through SOAR playbooks.

Network Defense

How to play

Frequently Asked Questions