Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Security+ > 1.0 Network Security > Flashcards

1.0 Network Security Flashcards

1
Q

What does security mean?

A

Security is the degree of protection against danger, damage, loss, and criminal activity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does CIAN stand for?

A

CIAN stands for Confidentiality Integrity Availability Non-repudiation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the steps of an attack?

A

Then steps of an attack generally include Reconnaissance, Breach, Escalate privilages, Stage, Exploit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What defense methodology is Layering?

A

Layering involves implementing multiple security measures to protect the same asset.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What defense methodology is the principle of least privilege?

A

The principle of least privilege states that users or groups are given only the access they need to do their job and nothing more.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What does access control mean?

A

Access control is the ability to permit or deny privileges that users have when accessing resources on a network or computer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What processes are included in access control?

A

Some processes that are included in access control are Identification, Authentication, Authorization, and Auditing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the MAC access control model?

A

The MAC access control model is Mandatory Access Control which uses authorization policies to determine if a resource can be accessed by a specific user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is the DAC access control model?

A

The DAC access control model is Discretionary Access Control which assigns access directly to users based on the discretion of the owner of the resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the RBAC access control model?

A

The RBAC access control model is Role-Based Access Control where access is allowed based on the role of the user in an organization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does authorization mean?

A

Authorization is the process of controlling access to resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is an Access Control List?

A

An Access Control List identifies users or groups who have specific security assignments to an object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a DACL type of access list?

A

A DACL access list is a Discretionary Access Control List which is the implementation of Discretionary Access Control (DAC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is a SACL type of access list?

A

A SACL access list is a System Access Control List which is used by Microsoft for auditing to identify past actions performed by users on an object.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are Effective Permissions?

A

Effective permissions are the combined inherited permissions and explicit permissions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Define ‘Need to know’.

A

Need to know describes the restriction of data that is highly sensitive and is usually referenced in government and military context.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Define ‘Separation of duty”.

A

Separation of duty is the concept of having more than one person required to complete a task.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Define ‘Job rotation’.

A

Job rotation is a technique where users are cross-trained in multiple job positions, and where responsibilities are regularly rotated between personnel.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Define ‘Defense-in-depth’.

A

Defense-in-depth is an access control method which implements multiple access control methods instead of relying on a single method.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is creeping privileges?

A

Creeping privileges occurs when a user’s job position is changed and they are granted a new set of access privileges and their previous access privileges are not removed or modified.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the four stages in the remote access process?

A

The four stages in the remote access process are Connection, Authentication, Authorization, and Accounting.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Explain RADIUS.

A

Remote Authentication Dial-In User Service is used to centralize remote access administration. A RADIUS server combined authentication, authorization, and accounting and can use PPP, CHAP, and PAP. RADIUS uses UDP port 1812 and 1813.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Explain TACACS+

A

Terminal Access Controller Access-Control System Plus is used to centralize remote access administration. TACACS+ provides authentication, authorization, and accounting with the ability to host each service on separate servers. TACACS+ uses TCP port 49.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is Telephony?

A

Telephony is the transmission of voice communications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What is 'convergence'?
Convergence refers to the intermingling of voice and data services on networks.
26
What are the layers of the OSI model?
``` Layer 7: Application Layer 6: Presentation Layer 5: Session Layer 4: Transport Layer 3: Network Layer 2: Data Link Layer 1: Physical ```
27
What are two types of Reconnaissance?
Organization (conducting research about a company to find information and create a profile about the organization) and Technical (using electronic means to scan systems to collect configuration and security data).
28
What is the difference between passive reconnaissance and active scanning?
Passive reconnaissance is characterized by gathering data while active scanning is coming into contact with the system.
29
What is a ping flood?
A ping flood is a simple DoS attack where the attacker overwhelms the victim with ICMP Echo Request packets.
30
What is the ping of death?
The ping of death is a DoS attack that uses the ping program to send oversized ICMP packets.
31
What is a smurf attack?
A smurf attack is a form or DRDoS attack that spoofs the source address in ICMP packets.
32
What is a SYN flood attack?
A SYN flood attack exploits the TCP three-way handshake by not sending the last message that would close the message.
33
What is a LAND attack?
A LAND attack is one in which the attacker floods the victim's system with packets that have forged headers.
34
What is a Christmas Tree attack?
A Christmas tree attack uses an IP packet with every option turned on for the protocol being used.
35
What is a bastion host?
A bastion or sacrificial host is any host that is exposed to attack and that has been hardened against those attacks.
36
What is a demilitarized zone?
A demilitarized zone or DMZ is a buffer network that sits between the private network and an untrusted network.
37
What is a screening router?
A screening router is the router that is most external to your network and closest to the Internet.
38
What is a duel-homed gateway?
A dual-homed gateway is a firewall device that typically has three network interfaces: one connected to the internet, one connected to a private network, and one connected to a public network.
39
What is a screened host gateway?
A screened host gateway resides within the DMZ, requiring users to authenticate in order to access resources within the DMZ or the intranet.
40
What is the difference between a network-based firewall and a host-based firewall?
A host-based firewall inspects the traffic when it is received by a host while a network-based firewall inspects the traffic while it comes into the network.
41
What is a packet filtering firewall?
A packet filtering firewall makes decisions about which traffic to allow by examining information in the IP packet header.
42
What is a stateful firewall?
A stateful firewall makes decisions about which traffic to allow based on virtual circuits or sessions.
43
What is an application firewall?
An application firewall makes security decisions based on information contained within the data portion of a packet.
44
What is a NAT router?
A Network Address Translation (NAT) router translates multiple private addresses the single registered IP address.
45
What is a VPN?
A Virtual Private Network (VPN) is a remote access connection that uses encryption to securely send data over an untrusted network.
46
Explain what PPTP is.
Point-to-Point Tunneling Protocol (PPTP) was one of the first VPN protocols. It uses CHAP or PAP for authentication and MPPE for encryption. PPTP uses TCP port 1723.
47
Explain what L2TP is.
Layer 2 Tunneling Protocol (L2TP) is an open standard for securing multi-protocol routing. It operates at the data-link layer and uses IPSec for encryption. L2TP uses TCP port 1701 and UDP port 500.
48
Explain what IPSec is.
Internet Protocol Security provides authentication and encryption and can be used in conjunction with L2TP or by itself as a VPN solution. IPSec uses Authentication Header (AH) for authentication and Encapsulating Security Payload (ESP) for encryption.
49
Explain what SSL is.
Secure Sockets Layer (SSL) is a protocol that has long been used to secure traffic generated by other IP protocols. SSL encrypts the entire communication session and uses port 443.
50
What is NAP?
Network Access Protection (NAP) is a collection of components that allow administrators to regulate network access or communication based on a computer's compliance with health requirement policies.
51
What is a NAP client and a NAP server?
A NAP client is a computer that has NAP-aware software while a NAP server is responsible for keeping track of health requirements and verifying that clients meet those requirements.
52
What is an enforcement server?
An enforcement server is the connection point for clients to the network.
53
What are remediation servers?
Remediation servers are a set of resources that non-compliant computers can access on the limited-access network.
54
What is a DHCP enforcement server?
The DHCP enforcement server controls access by leasing addresses only to computers that meet the health requirements.
55
What is a Remote Desktop Gateway server?
A Remote Desktop Gateway server can be combined with NAP to allow or deny access based on health compliance.
56
What is WEP?
Wired Equivalent Privacy (WEP) is an optional component of the 802.11 specification and is available in 64-bit and 128-bit implementations. WEP uses RC4 with a 40-bit key for encryption and CRC-32 for data integrity.
57
What is WPA?
Wi-Fi Protected Access (WPA) is the implementation name for wireless security besed on initial 802.11i drafts and uses TKIP for encryption. WPA provides dynamic keys and dynamic key rotation.
58
What is WPA2?
Wi-Fi Protected Access 2 (WPA2) or 802.11i usesCBC-MAC for data integrity and AES with either TKIP or CCMP for encryption. WPA2 supports dynamic key generation and rotation through CCMP.
59
What is a rouge access point?
A rouge access point is any unauthorized access point added to a network.
60
What is the difference between wardriving and warchalking?
Wardriving involves an attacker scanning an area looking for available wireless networks where warchalking involves drawing symbols in public places to advertise the existence and status or wireless networks.
61
What is EAP?
Extensible Authentication Protocol (EAP) is a set of interface standards that allows you to use various authentication methods.
62
What is LEAP?
Light-weight Extensible Authentication Protocol (LEAP) is considered to be the weakest 802.1x protocol. It does not use SSL/TLS to encapsulate authentication data.
63
What is PEAP?
Protected Extensible Authentication Protocol (PEAP) provides authentication in an SSL/TLS tunnel with a sungle certificate on the server.
64
What is MAC flooding?
MAC flooding overloads the switch's MAC forwarding table to make the switch function like a hub.
65
What is ARP spoofing/poisoning?
ARP spoofing/poisoning associates the attacker's MAC address with the IP address of victim devices.
66
What is MAC spoofing?
MAC spoofing is changing the source MAC address on frames sent by the attacker.
67
What is DTP?
Dynamic Trunking Protocol (DTP) is where switches have the ability to automatically detect ports that are trunk ports and to negotiate the trunking protocol used between devices.
68
What is a VLAN?
A Virtual LAN (VLAN) is a logical grouping of computers based on switch ports.
69
What is MAC filtering/port security?
With switch port security, the devices that can connect to a switch through the port are restricted by MAC address.
70
What is port authentication?
Port authentication is provided by the 802.1x protocol, and allows only authenticated devices to connect to the LAN through the switch.
71
What is FTP?
File Transfer Protocol (FTP) uses IPSec or a VPN tunnel to transfer data. It uses port 20 for data transfer and 21 for logons.
72
What is TFTP?
Trivial File Transfer Protocol (TFTP) provides no authentication, encryption or error detection to transfer files.
73
What is SCP?
Secure Copy Protocol (SCP) uses SSH to secure file transfers and logon credentials.
74
What is SFTP?
Secure Shell File Transfer Protocol (SFTP) is a file transfer protocol that uses SSH to secure data transfers. SFTP is not FTP that uses SSH but rather a secure transfer protocol that is separate from FTP.
75
What is Secure FTP?
Secure FTP tunnels FTP traffic through an SSH tunnel.
76
What is FTPS?
FTP Secure (FTPS) is FTP that uses SSL to secure logon credentials and encrypt data transfers.
77
What is Virtualization?
Virtualization is the ability to install and run multiple operating systems concurrently on a single physical machine.
78
What is included in virtualization?
Typically, components of virtualization are a physical machine, a virtual machine, a virtual hard disk, and a hypervisor.
79
What is a 'hot site'?
A hot site is a redundant facility that is immediately available, requiring only a few minutes to hours to activate.
80
What is a 'warm site'?
A warm site is a partially configured redundant facility that takes a few days to a few weeks to activate.
81
What is a 'cold site'?
A cold site takes a few weeks to a few months to activate.
82
What is clustering?
Clustering is the connection of a group if independent computers to increase the availability to applications and services.
83
What is a high availability cluster?
A high availability cluster is a group of computers that are configured with the same service.
84
What is a load balancing cluster?
A load balancing cluster disperses a workload between two or more computers or resources to achieve optimal resource utilization, throughput or response time.
85
What is SSL?
Secure Sockets Layer (SSL) secures messages being transmitted on the internet. It uses RSA or KEA for secure exchange of encryption keys and uses port 443.
86
What is TLS?
Transport Layer Security (TLS) is the successor to SSL 3.0. TLS uses Diffie-Hellman or RSA to exchange session keys.
87
What is SSH?
Secure Shell (SSH) allows for secure interactive control of remote systems.
88
What is Authentication Header?
Authentication Header (AH) provides authenticity, non-repundiation, and integrity.
89
What is ESP?
Encapsulating Security Payload (ESP) provides all security of AH plus confidentiality.
90
What is a public cloud?
A public cloud can be accessed by anyone.
91
What is a private cloud?
A private cloud provides resources to a single organization.
92
What is a community cloud?
A community cloud is designed to be shared by several organizations.
93
What is a hybrid cloud?
A hybrid cloud is composed of a combination of public, private, and community cloud resources from different service providers.
94
What is IaaS?
Infrastructure as a Service (IaaS) delivers infrastructures to the client, such as processing, storage, networks, and virtualized environments.
95
What is PaaS?
Platform as a Service (PaaS) delivers everything a developer needs to build an application.
96
What is SaaS?
Software as a Service (SaaS) delivers software applications to the client either over the Internet or on a local area network.
97
What is a protocol analyzer?
A protocol analyzer is hardware or software for monitoring and analyzing digital traffic over a network.

Security+ (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions