11. Network Security Fundamentals

Question 1

List out the 4 types of threats

Answer 1

1. Information Theft
2. Data Loss and Manipulation
3. Identity Theft
4. Disruption of Service

Question 2

What will result in when network are being attacked?

Answer 2

1. Loss of Time & Money due to damange
2. Theft important information

Question 3

How does attacker access network? ( )

Answer 3

1. Software Vulnerabilities ( Bug )
2. Hardware Attacks
3. Guessing someone Username and Password
4. Modifying software or exploiting vulnerabilities

Question 4

What is vulnerability ?

Answer 4

1. Degree of weakness in a network or a device

Question 5

What device that may have some vulnerability? ( 5 )

Answer 5

1. Routers
2. Switches
3. Desktops
4. Servers
5. Security Devices

Question 6

List out the 3 primary vulnerabilities or weakness

Answer 6

1. Technological Vulnerabilities
2. Configuration Vulnerabilities
3. Security Policy Vulnerabilities

Question 7

What does Technological Vulnerabilities might include ( 3 )

Answer 7

1. TCP/IP Protocol Weakness
2. Operating System Weakness
3. Network Equipment Weakness

Question 8

What does Configuration Vulnerabilities might include?

Answer 8

1. Unsecured user accounts
2. System accounts with easily guessed passwords
3. Misconfigured internet services
4. Unsecure default settings
5. Misconfigured netwoek equipment

Question 9

What does Security Policy Vulnerabilities might include?

Answer 9

1. Lack of a written security policy, politics
2. Lack of authentication continuity
3. Logical access controls not applied
4. Software and Hardware Installation
5. Changes not following policy
6. Nonexistent disaster recovery plan

Question 10

List out the 4 classes of physical threads

Answer 10

1. Hardware Threats
2. Environment Threads
3. Electrical Threats
4. Maintenance Threats

Question 11

What does Hardware Threads includes?

Answer 11

1. Physical Damage
   
   • Servers
   • Routers
   • Switches
   • Cabling Plant
   • Workstations

Question 12

What does Environment Threats includes?

Answer 12

1. Extreme Temperature
2. Extreme Humidity

Question 13

What does Electrical Threats include?

Answer 13

1. Voltage Spikes
2. Insufficient Supply Voltage
3. Unconditioned Power
4. Total power loss

Question 14

What does Maintenance Threats includes?

Answer 14

1. Poor handling of key electrical components
2. Lack of critical spare parts
3. Poor cabling
4. Poor labeling

Question 15

What is the short form for Malicious Software?

Answer 15

1. Malware

Question 15

What is viruses?

Answer 15

1. A malware that propagates by inserting a copu of itself into, and becoming part of, another program
2. Spreads from one computer to another, leaving infections as it travels

Question 15

What are the types of malware?

Answer 15

1. Viruses
2. Worms
3. Trojan Horses

Question 16

What is worms?

Answer 16

1. Similar to viruses in that they replicate functional copies of themselves and can cause the same type of damage.

Question 17

What is the difference between viruses and worms?

Answer 17

1. Viruses need to spread from an infected host file
2. While worms are standalone software and do not require a host program or human help to propagate

Question 18

What is Trojan Horses?

Answer 18

1. Harmful piece of software that looks legimate

Question 19

Do trojan horses reproduce by infectting other files?

Answer 19

1. No

• It must spread through user interaction ( Opening and email attachment , Downloading a file from the internet )

Question 20

List out 3 major categories for network attacks

Answer 20

1. Reconaissance Attacks
   
   • Discovery and Mapping of Systems, Services or Vulnerabilities
2. Access Attacks
   
   • The unauthorized manipulation of datam system access, or user privileges
3. Denial Of Service
   
   • The disabling or corruption of networks, systems, or services

Question 21

List out the 4 types of access attacks

Answer 21

1. Password Attacks
2. Trust Exploitation
3. Port Redirection
4. Man-in-the middle

Question 22

How does attacker attacks password?

Answer 22

1. Brute Force
2. Trojan Horse
3. Packet Sniffers

Question 23

How does attacker uses trust exploitation for attacking?

Answer 23

1. A threat actor uses unauthorized privileges to gain access to a system, possibly compromising the target

Question 24

How does attacker users port direction for attacking?

Answer 24

1. A threat actor compromised system as a base for attacks against other targets.

• A threat actor using SSH ( Port 22 ) to connect to a compromised host A. Host A is trusted by Host B and, therefore, the threat actor can use Telnet ( port 23 ) to access it

Question 25

How does attacker uses man-in-the middle for attacking?

Answer 25

1. The threat actor is positional in between two legitimate entities in order to rad or modify the date that passes between the 2 parties