Network Security Fundamentals

Understand what network security actually protects: confidentiality, integrity and availability.

beginnernetwork-securityfundamentalscia-triad

What is it?

Network security is the set of controls, policies and technologies that protect data as it moves across a network. Every control exists to protect one or more of three things — the CIA triad: Confidentiality (only authorised people see the data), Integrity (data is not altered in transit), and Availability (the service stays reachable for legitimate users).

Why should I learn it?

Every other topic in this section — firewalls, ACLs, VPNs, segmentation — is just a tool that protects one part of the CIA triad. If you cannot say which part a control protects, you cannot explain why it exists.

How it works

Traffic enters the network → a security control evaluates it against policy → allowed traffic proceeds, unauthorised traffic is blocked or logged → the outcome is reviewed and policy is adjusted.

Real-world example

A VPN protects confidentiality (encrypts traffic on an untrusted path). A firewall rule protects confidentiality and integrity (blocks unauthorised access to a database). A DDoS protection service protects availability (keeps the service reachable under attack).

Troubleshooting mindset

When a control blocks something unexpectedly, first identify what it was protecting — confidentiality, integrity or availability — before deciding whether to change it.

Common mistake

Do not memorise the definition without connecting it to packet flow, device state and verification. Ask: what should happen, what actually happened, and which command or capture can prove the difference?

Quick recap

  • Understand the job of the protocol or feature.
  • Know where it sits in the traffic path.
  • Verify behaviour instead of guessing.
  • Connect the topic to the next networking layer.

Interview connection

Explain the concept in simple words first. Then give one practical example or troubleshooting check. That is stronger than repeating a textbook definition.

References & Further Reading

  • AddySec original content — written for the Network Security track to build practical, interview-ready understanding.
CONTINUE LEARNING