Network Security Domain 4 Review

Why Server-Level Antimalware is Crucial:

• Malware on a server can quickly spread to all connected workstations. Servers are critical infrastructure that must be protected

• Real-time scanning and behavioral monitoring on servers can detect and block ransomware before it encrypts shared network drives.

• It allows IT teams to monitor the entire network and push out updates using SCCM or WSUS.

Virus definitions must be updated regularly to enable antivirus software to recognize and block newly discovered malware, viruses, and emerging threats. Because cybercriminals create thousands of new threats daily, outdated signatures leave systems vulnerable to ransomware and data breaches.

The DNS protocol maps IP addresses to Domain names.

DNS PTR records (pointer records) enable reverse DNS lookups—mapping an IP address back to a domain name—to verify that a sending mail server is legitimate and not a fraudulent or compromised host which might send spam or fraudulent emails.

Other DNS record types you should know.

A record - IPv4 addresses

AAAA record- IPv6 addresses

MX record- mail exchange

CNAME record- alias names

NS record - authoritative name server

User education, including regular, simulated phishing tests and interactive training, prevents phishing by transforming employees from passive targets into an active, trained first line of defense who can recognize red flags—such as urgent threats, suspicious links, and generic greetings—and report suspicious emails rather than clicking.

Microsoft Defender SmartScreen Filter prevents phishing by analyzing websites in real-time against a dynamic, Microsoft-updated list of reported phishing and malicious sites. When a user navigates to a suspected fraudulent site, SmartScreen blocks the page, displays a warning, and can prevent the user from entering credentials, thereby stopping credential theft and malware distribution

Sender Policy Framework (SPF) allows administrators to create an list of the authorized IP addresses or hostnames allowed to send email on behalf of their domain.

When a recipient's mail server receives an email, it checks Sender Policy Framework. If the email originates from an IP address not listed in the SPF record, the receiving server can reject the email or mark it as spam, preventing spoofing and unauthorized transmission.

HTTPS is a protocol used for secure web traffic that uses common port number 443. HTTPS traffic is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS).

HTTP is also used for web traffic over common port number 80, but traffic not encrypted, therefore HTTP is considered an insecure protocol.

Private browsing (or Incognito mode) works by creating a temporary, isolated session that does not save browsing history, cookies, site data, or form information on your local device.

Private browsing is designed to hide activity from other users of the same computer, not to provide anonymity from websites, ISPs, or employers.

Your employer and your internet service provider (ISP) will still be able to see your browsing history., even when using private browsing.

Unwanted software could be bundled in with antimalware and antivirus software and may be installed on your device if you are not vigilant.

Bloatware or Adware, can slow the performance of your computer, create annoying pop-up advertisements, an increase the attack surface of your network.