📖 What is Air Gap?
An Air Gap is a security measure that ensures a computer or network is physically isolated from all other networks, including the public internet. This physical separation prevents remote attacks and unauthorized data exfiltration, making it ideal for highly sensitive systems.
"Be careful—air gaps can still be bypassed via physical media like USB drives, which is a common scenario used in exam questions."
📚 Certification: Certified in Cybersecurity (CC)
🔑 What are the Key Concepts of Air Gap?
- ▸ Complete physical isolation from all external networks, eliminating the possibility of remote network-based attacks or unauthorized remote access to the system.
- ▸ Commonly implemented in high-security environments like nuclear power plants or military command centers to protect critical infrastructure from cyber warfare.
- ▸ Reliance on 'sneakernet' for data transfer, meaning information is moved physically using removable media such as USB drives, CDs, or external hard disks.
- ▸ Vulnerability to physical attack vectors, where malware is introduced via infected peripherals or by malicious insiders with direct physical access.
🎯 How does Air Gap appear on the CC Exam?
A scenario might describe a government agency protecting top-secret data that must be unreachable from the internet; you will be asked to identify an air gap as the primary control.
You may be asked to identify the most likely way a virus could infect a physically isolated system, with the correct answer focusing on removable media like USB sticks.
Expect questions comparing air gaps to firewalls, where you must explain that while firewalls filter and manage network traffic, an air gap removes the communication path entirely.
❓ Frequently Asked Questions
Is an air gap more effective than a strong firewall?
Yes, for preventing remote attacks, because a firewall still leaves a network path open that could be exploited. However, air gaps introduce significant operational overhead for updates and maintenance.
How is malware typically introduced to an air-gapped system?
The most common vector is through removable media. An employee might plug in an infected USB drive, allowing malware to jump the gap and execute on the isolated machine.