Network security

Network security is the practice of deciding which traffic may flow between which systems, and noticing when traffic does something it should not. In a working week that means reviewing firewall rules, designing segments so one infected laptop has no route to the payroll server, running remote access, and reading what intrusion detection sensors report. It is often the first security job for people coming from network administration, since they already know how routing, switching and name resolution behave and only need to start looking at them with suspicion. The rest of the week is change control: every new application, partner connection or remote office asks for a path through the network, and someone has to decide whether that path is necessary, how narrow it can be, and who will remember to close it.

Controls and the questions they answer

Each control answers a different question, and exam scenarios are built around picking the one whose question matches the situation described. The right-hand column matters as much as the middle one. No row is sufficient on its own, and the design question is always which combination leaves an intruder the fewest useful paths once the first control has been bypassed, because sooner or later one will be.

Blueprints, and a misplaced faith in the firewall

The CISSP gives communication and network security a full domain, examined at architecture level: secure protocols, segmentation strategy, the trade-offs between remote access designs. Security+ spreads network material across its architecture and operations domains and expects you to choose the right appliance and placement for a scenario. VPN questions reliably cost marks, because candidates confuse the corporate tunnel with the consumer privacy product and reason about the wrong one. Zero trust now appears in every blueprint. NIST's architecture guidance describes it as shifting protection off the network boundary and onto individual users, devices and resources, with identity checked and permission granted before each session rather than once at the door.

The classic beginner's error is treating the firewall as the strategy. A rule set that has grown for a decade already permits most of what an intruder needs, and the attacks that matter today come in through the front door: an ordinary HTTPS request to a vulnerable application, or a valid password bought from a broker. Competent network defenders spend as much effort deleting rules as adding them, and they treat identity as part of their own job. From here the natural next topics are identity and access management, where zero trust is actually enforced, and security operations, where your sensors' alerts land. Security+ certifies this level; specialists often add a vendor firewall credential later, and the free Fortinet certificate is a gentle introduction to that world.