Network Security

Correct Answer: Transport Layer Security (TLS)

Transport Layer Security (TLS) is the best answer for ensuring sensitive data is protected from eavesdropping attacks during network transmission. TLS provides encryption of data between the client and server, making it unreadable if intercepted. Stateful Packet Inspection (SPI) is a firewall feature that monitors the state of network connections, but does not provide encryption. Network Address Translation (NAT) is used to map private IP addresses to public ones, but does not secure data. Quality of Service (QoS) prioritizes network traffic based on importance, but also does not encrypt data.

Correct Answer: Intrusion Detection System (IDS)

An Intrusion Detection System (IDS) is the best technology to implement for detecting anomalies and suspicious activity on a network in real-time. An IDS monitors network traffic, analyzing it for patterns that may indicate a security breach or attack. It can identify potential threats such as unauthorized access attempts, malware infections, and policy violations. A Domain Name System (DNS) is used for translating domain names to IP addresses, a Border Gateway Protocol (BGP) is a routing protocol used for exchanging routing information between autonomous systems, and a Network Time Protocol (NTP) is used for clock synchronization between computer systems. While these technologies have their uses, they are not primarily designed for real-time anomaly detection like an IDS is.

Correct Answer: Password complexity and expiration policy

The best solution to enhance security when multiple users are using the same password for their accounts is to implement a 'Password complexity and expiration policy'. This policy will ensure that users have different, complex passwords that change on a regular basis, making it much harder for unauthorized users to gain access. 'Password reuse' isn't a good management technique for this case because it would still allow several users to utilize the same password. 'Password length reduction' would make the passwords easier to crack, thereby reducing security. Finally, 'Password case insensitivity' also reduces password security because it decreases the number of potential password combinations.