1.5 Flashcards
What is EAP-TLS?
EAP over TLS. Also available as EAP-TTLS, a tunneled version.
Strong security, widely adopted
What is the difference between WPA2-Personal and WPA2-Enterprise?
Personal uses a pre-shared key; everyone uses the same key.
Enterprise authenticates uses an 802.1X authentication server, such as RADIUS. Everyone has their own credentials which can be changed or revoked individually.
What is a logic bomb, and how should they be dealt with?
A type of malware that is set to take harmful effect under certain conditions, such as a specified time or event.
Because each is unique and has no predefined signature, they are best prevented by formal change control and automated change alerting.
What is 802.1X?
IEEE 802.1X is the most common standard of Network Access Control.
A form of port-based access control (physical ports, not TCP/UDP ports). Requires authentication before allowing access to any interface on the switch.
What is Wardriving?
Collecting information about area networks while driving / travelling, by using a WiFi monitor and GPS.
What is a “deauthentication” attack?
An DOS attack that causes a device to disconnect from a resource, typically a wireless network, and prevents it from reconnecting.
What is VLAN hopping?
Connecting to a VLAN other than the one you’re on.
Two primary methods:
• Switch spoofing
• Double tagging
What is Double Tagging?
A form of VLAN hopping.
- The device sends traffic with multiple VLAN tags, to get through multiple switches. The first switch removes the first tag, but sends it to the next switch with the second tag.
- The communication is only one way, so no responses will be received back.
- Useful for a DOS.
What is Switch Spoofing?
A form of VLAN hopping.
- Some switches support auto-configuration to determine if a port is connected to a device or a trunk.
- A device can take advantage of this by pretending to be a trunk link (a switch), which allows TX and RX with any VLAN.
- This can be prevented by disabling automatic trunk negotiation.
What is ARP Poisoning?
Sending out ARP data that tells target systems that you have the MAC address which actually belongs to another device.
Used for Man-in-the-Middle attacks.
