Architecture and Design Flashcards
CompTIA Security +
HVT
High Value Token (online credit card number)
DRM
Digital Rights Management
SSL/TLS Injection
Man in the Middle Attack
DNS Sinkhole
DNS Server that supplies fake results. Can be used to capture bad bots and also used by malicious actors.
Transit Gateway
Connects cloud to on prem
FAR
False Acceptance rate for authentication
FRR
False Rejection rate for authentication
CER
When FRR and FAR are equal to each other
PIV
Personal Identification Verification Card
TOTP
Timed One Time Password
HOTP
HMAC Based one time password
Identification
Who you are such as a username
Authentication
Prooving who you are with password, MFA, etc
Authorization
What you are allowed to access once you’ve identified yourself and authenticated.
RAID
Redundant Array of Inexpensive Disks (On prem shit). Data is mirrored across disks.
Parity
Parity is a calculated value that’s used to restore data from the other drives if one of the drives in the set fails.
Striping
Splitting the data between disks.
RAID 0
Disk Striping - Not Fault Tolerant. Losing one disk would lose them all. Single tower with things split.
RAID 1
Has mirroring. Basically 2 AZ’s mirrored. Think two stacks of discs going back and forth.
RAID 5
Disk striping with parity. 5 towers of disks. The parity algorithm (backup?) lives on a different level in each stack.
RAID 6
Disk Striping with double parity.
RAID 10
Disk Striping that is mirrored
HBA
Host Bus Adapter (like a NIC for fibre channel connectivity)
UPS
Uninterruptable Power Supply (Battery Backup)
Dual Supply
Power is supplied by two independent sources in case one goes down.
PDUs
Managed Power Distribution Units (hardcore surge protector)
RPO
Recovery Point Objective for data recovery
RTO
Recovery Time Objective for data recovery
Differential Backup
Only data changes from last full backup. Each time the backup will get bigger.
Such as a full backup was done on Sunday. Monday will be the diff between Sunday and Monday. Tuesday would be the diff between Sunday and Tuesday. It doesn’t care that you did a diff the day before.
Incremental Backup
Only changes from the last incremental backup. So if done daily, basically a diff of the day. This is confusing. Look at the pictures again. A diff will be bigger each day cause its basing it off the full backup whenever that was. This one will be like you took a backup Monday so I’ll only do changes from Monday to Tuesday. On Wednedsay I’m only going to do changes from Tuesday to Wednesday.
High Availability
Datacenters should be no further than 30-50 miles apart.
Clustering
For redundancy, multiple servers working like they are one.
Hot Spares
Discs that data is copied over to that aren’t used and ready to be turned on if everything goes to hell.
FPGA
Field Programmable Gate Array - Integrated circuit to be programmed after manufacturing.
Arduino
Single board microcontroller - are designed for very specific functions vs a raspberry pi which is fully functional.
SCADA
Supervisory Control and Data Acquisition - refers to centralized systems which monitor and control entire sites or things spread out over areas. Think a lot of infrastructure like water utilities or nuclear facilities.
RTU
Remote Terminal Unit - Connect to sensors that convert the sensor info to digital data (like servers)
PLC
Programmable Logic Controller - Similar to RTUs but more versatile and economical
HMI
Human Machine Interface - Presents data to the people
MTU
Master Terminal Unit - Sends instructions and accepts input from various RTU or PLC devices.
PSTN Network
Old VOIP network, Public Switch Telephone Network, circuit based.
PBX System
New VoIP system which are packet based.
VoIP
MGCP
Media Gateway Control Protocol, used for VoIP
SIP protocol
H.323 protocol