Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Security+ Get Certified Get Ahead SY0-501 > Chapter 1 Mastering Security Basics > Flashcards

Chapter 1 Mastering Security Basics Flashcards

1
Q

A ___ _____ describes a goal that an organization wants to achieve.

A

Use case

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False : A common naming strategy for a use case is in the verb-noun format.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

List some elements of a use case

A
  1. Actors
  2. Preconditions - must occur before the process can begin
  3. Trigger - what starts a use case
  4. Postconditions - occurs after the process is triggered
  5. Normal flow
  6. Alternate flow
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

True or False : A common use case that any organization has is to support confidentiality.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

_________ prevents the unauthorized disclosure of data.

A

Confidentiality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

_________ scrambles data to make it unreadable by unauthorized personnel.

A

Encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

True or False : Identification, authentication, and authorization combined provide access controls and help ensure that only authorized personnel can access data.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

List the key elements of access control

A
  1. Identification
  2. Authentication
  3. Authorization
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

True or False : Another method you can use for confidentiality is steganography.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

_________ obscures the data and can be used in a use case to support obfuscation.

A

Steganography

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False : Many people refer to steganography as hiding data in plain sight.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

________ provides assurances that data has not changed.

A

Integrity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

True or False : You can use hashing techniques to enforce integrity.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A ____ is simply a number created by executing a hashing algorithm against data, such as a file or message.

A

Hash

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True or False : If the data never changes, the resulting hash will always be the same.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

List three different meanings for MAC

A
  1. Media Address Control - physical address assigned to NICs (burned in address)
  2. Mandatory Access Control - access control model
  3. Message Authentication Code - provides integrity similar to hash
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

True or False : Two key concepts related to integrity are:

  1. Integrity provides assurances that data has not been modified, tampered with, or corrupted.
  2. Hashing verifies integrity.
A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

True or False : Digital signatures require the use of certificates and a Public Key Infrastructure (PKI). Certificates include keys used for encryption and the PKI provides the means to create, manage, and distribute certificates.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

__________ indicates that data and services are available when needed.

A

Availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

True or False : Organizations commonly implement redundancy and fault-tolerant methods to ensure high levels of availability for key systems.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

_________ adds duplication to critical systems and provides fault tolerance.

A

Redundancy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

True or False : If a critical component has a fault, the duplication provided by the redundancy allows the service to continue without interruption.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A common goal of fault tolerance and redundancy techniques is to remove each ______ _____ __ ________

A

Single point of failure (SPOF).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

True or False : Availability ensures that systems are up and operational when needed and often addresses single points of failure. You can increase availability by adding fault tolerance and redundancies, such as RAID, failover clusters, backups, and generators. HVAC systems also increase availability.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Another method of ensuring systems stay available is with _______.

A

Patching

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

One of the basic goals of implementing IT security is to reduce ____.

A

Risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

____ is the possibility or likelihood of a threat exploiting a vulnerability resulting in a loss.

A

Risk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

A ______ is any circumstance or event that has the potential to compromise confidentiality, integrity, or availability.

A

Threat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

A __________ is a weakness.

A

Vulnerability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

A _______ _______ is an adverse event or series of events that can negatively affect the confidentiality, integrity, or availability of an organization’s information technology (IT) systems and data.

A

Security incident

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Risk __________ reduces the chances that a threat will exploit a vulnerability.

A

Mitigation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

True or False : You can’t prevent most threats.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

List control types in CompTIA objectives

A
  1. Technical controls
  2. Administrative controls
  3. Physical controls
  4. Preventive controls - attempt to prevent an incident from occurring
  5. Detective controls - detect incidents after they have occurred
  6. Corrective controls
  7. Deterrent controls - attempt to discourage individuals from causing an incident
  8. Compensating controls - alternative controls used when a primary control is not feasible
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

True or False : Most security controls can be classified as technical (implemented with technology), administrative (implemented using administrative or management methods), or physical (items you can touch).

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

_______ controls use technology to reduce vulnerabilities.

A

Technical

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

List a few examples of technical controls

A
  1. Encryption
  2. Antivirus software
  3. Intrusion detection systems (IDS) and intrusion prevention systems (IPS)
  4. Firewalls
  5. Least privilege
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

True or False : Technical controls use technology to reduce vulnerabilities. Some examples include encryption, antivirus software, IDSs, IPSs, firewalls, and the principle of least privilege. Technical physical security and environmental controls include motion detectors and fire suppression systems.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

__________ controls use methods mandated by organizational policies or other guidelines.

A

Administrative

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

List some common administrative controls

A
  1. Risk assessments
  2. Vulnerability assessments
  3. Penetration tests
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

True or False : Many administrative controls are also known as operational or management controls.

A

True

41
Q

True or False : Operational controls include the following families:

  1. Awareness training
  2. Configuration and change management
  3. Contingency planning
  4. Media protection
  5. Physical and environmental protection
A

True

42
Q

_______ controls are any controls that you can physically touch.

A

Physical

43
Q

True or False : A fire suppression system is a physical security control because you can touch it. However, it’s also a technical control because it uses technologies to detect, suppress, or extinguish fires.

A

True

44
Q

True or False : Another way of classifying security controls is based on their goals in relationship to security incidents. Some common classifications are preventive, detective, corrective, deterrent, and compensating. The following sections describe them in more depth.

A

True

45
Q

The primary goal of _________ controls—to prevent security incidents.

A

Preventive

46
Q

List some examples of preventive controls

A
  1. Hardening - making a system more secure than its default configuration
  2. Security awareness and training
  3. Security guards
  4. Change management
  5. Account disablement policy
47
Q

True or False : Preventive controls attempt to prevent security incidents. Hardening systems increases their basic configuration to prevent incidents. Security guards can prevent unauthorized personnel from entering a secure area. Change management processes help prevent outages from configuration changes. An account disablement policy ensures that accounts are disabled when a user leaves the organization.

A

True

48
Q

________ controls attempt to detect when vulnerabilities have been exploited, resulting in a security incident.

A

Detective

49
Q

List some examples of detective controls

A
  1. Log monitoring
  2. Trend analysis
  3. Security audit
  4. Video surveillance
  5. Motion detection
50
Q

True or False : A detective control can predict when an incident will occur and it can prevent it.

A

False

It can’t predict nor prevent an incident

51
Q

__________ controls attempt to reverse the impact of an incident or problem after it has occurred.

A

Corrective

52
Q

An _______ _______ ______ attempts to detect attacks and then modify the environment to block the attack from continuing.

A

Intrusion prevention system (IPS)

53
Q

_______ ensure that personnel can recover data if it is lost or corrupted.

A

Backups

54
Q

System _______ procedures ensure administrators can recover a system after a failure.

A

Recovery

55
Q

________ controls attempt to discourage a threat.

A

Deterrent

56
Q

True or False : You can often describe many deterrent controls as preventive controls.

A

True

57
Q

True or False :
Some physical security controls to deter threats are:

  1. Cable locks
  2. Hardware locks
A

True

58
Q

_____________ controls are alternative controls used instead of a primary control.

A

Compensating

59
Q

True or False : Control types (technical, administrative, and physical) and control goals (preventive, detective, corrective, deterrent, and compensating) are not mutually exclusive. In other words, you can describe most controls using more than one category.

A

True

60
Q

___________ allows you to host one or more virtual systems, or virtual machines (VMs), on a single physical system.

A

Virtualization

61
Q

The software that creates, runs, and manages the VMs is the ________.

A

Hypervisor

62
Q

The physical system hosting the VMs is the ____.

A

Host

63
Q

Operating systems running on the host system are _____ or ____ machines.

A

Guests or guest

64
Q

True or False : Elasticity and scalability refer to the ability to resize computing capacity based on the load.

A

True

65
Q

Type ___ hypervisors run directly on the system hardware.

A

One

66
Q

Type___ hypervisors run as software within a host operating system.

A

Two

67
Q

True or False : Application cell virtualization or container virtualization runs services or applications within isolated application cells (or containers).

A

True

68
Q

True or False : A benefit of container virtualization is that it uses fewer resources and can be more efficient than a system using a traditional Type II hypervisor virtualization.

A

True

69
Q

One drawback is that containers must use the operating system of the ____.

A

Host

70
Q

A _______ provides you with a copy of the VM at a moment in time, which you can use as a backup.

A

Snapshot

71
Q

True or False : After taking a snapshot, the hypervisor keeps a record of all changes to the VM. If the VM develops a problem, you can revert the VM to the state it was in when you took the snapshot.

A

True

72
Q

True or False : Risky operations include applying patches or updates, testing security controls, and installing new applications.

A

True

73
Q

In a virtual desktop infrastructure (VDI) or virtual desktop environment (VDE), a user’s _____ ________ ______ runs as a VM on a server.

A

Desktop operating system

74
Q

A primary consideration when running virtual desktops is whether they will support _________ or ___-________.

A

Persistence or non-persistence

75
Q

True or False : In a persistent vde users each have a custom desktop. In a non-persistent vde users use a single desktop configuration that reverts back to pre-configuration each time they log off.

A

True

76
Q

True or False: VMs are files

A

True

77
Q

__ _____ is an attack that allows an attacker to access the host system from within the virtual system.

A

VM escape

78
Q

True or False : Most virtual systems run on a physical server with elevated privileges, similar to administrator privileges. A successful VM escape attack often gives the attacker unlimited control over the host system and each virtual system within the host.

A

True

79
Q

__ ______ occurs when an organization has many VMs that aren’t managed properly.

A

VM sprawl

80
Q

True or False : VM Sprawl increases vulnerability risk and mismanaged resources

A

True

81
Q

True or False : Linux is a version of Unix and commands that can be run in a Unix terminal can also be run in a Linux terminal.

A

True

82
Q

True or False : Most Windows commands are not case sensitive.

A

True

83
Q

True or False : Linux commands are case sensitive

A

True

84
Q

____ is a basic command used to test connectivity for remote systems. You can also use it to verify a system can resolve valid host names to IP addresses, test the NIC, and check the security posture of a network.

A

Ping

85
Q

True or False : The ping command checks connectivity by sending Internet Control Message Protocol (ICMP) echo request packets. Remote systems answer with ICMP echo reply packets and if you receive echo replies, you know that the remote system is operational.

A

True

86
Q

True or False : You can ping the host name of a remote system and verify that name resolution is working.

A

True

87
Q

True or False : To protect systems, firewalls commonly block ICMP traffic to prevent these attacks from succeeding.

A

True

88
Q

True or False : You can use ping to simulate an attack from a couple of computers to repeatedly send ping requests. If the IPS is working, it will block these attacks and the pings will stop receiving replies.

A

True

89
Q

The _______ command (short for Internet Protocol configuration) shows the Transmission Control Protocol/Internet Protocol (TCP/IP) configuration information for a system. This includes items such as the computer’s IP address, subnet mask, default gateway, MAC address, and the address of a Domain Name System (DNS) server.

A

ipconfig/ifconfig

90
Q

True or False : Common ipconfig/ifconfig commands

  1. ipconfig
  2. ipconfig /all
  3. ipconfig /displaydns
  4. ipconfig /flushdns
  5. ifconfig eth0
  6. ifconfig eth0 promisc - enables promiscuous mode. allows a NIC to process all traffic it receives
  7. ifconfig eth0 allmulti - enables multicast mode and allows to process all multicast traffic received
A

True

91
Q

True or False : Instead of ifconfig Linux devs recommend using ip command

A

True
ifconfig was deprecated in 2009 for Debian distros

  1. ip link show - shows the interfaces along with some details
  2. ip link set eth0 up - enables a network interface
  3. ip -s link - shows stats on the network interfaces
92
Q

The _____ command (short for network statistics) allows you to view statistics for TCP/IP protocols on a system.

A

Netstat

93
Q

True or False : Some of the common commands you can use with netstat are:
• Netstat. Displays a listing of all open TCP connections.
• Netstat -a. Displays a listing of all TCP and User Datagram Protocol (UDP) ports that a system is listening on, in addition to all open connections. This listing includes the IP address followed by a colon and the port number, and you can use the port number to identify protocols. As an example, if you see an IP address followed by :80, it indicates the system is listening on the default port of 80 for HTTP. This indicates this system is likely a web server.
• Netstat –r. Displays the routing table.
• Netstat -e. Displays details on network statistics, including how many bytes the system sent and received. • Netstat -s. Displays statistics of packets sent or received for specific protocols, such as IP, ICMP, TCP, and UDP.
• Netstat -n. Displays addresses and port numbers in numerical order. This can be useful if you’re looking for information related to a specific IP address or a specific port.
• Netstat -p protocol. Shows statistics on a specific protocol, such as TCP or UDP. For example, you could use netstat -p tcp to show only TCP statistics.

A

True

94
Q

True or False :

Some of the common states are:
• ESTABLISHED. This is the normal state for the data transfer phase of a connection. It indicates an active open connection.
• LISTEN. This indicates the system is waiting for a connection request. The well-known port a system is listening on indicates the protocol.
• CLOSE_WAIT. This indicates the system is waiting for a connection termination request.
• TIME_WAIT. This indicates the system is waiting for enough time to pass to be sure the remote system received a TCP-based acknowledgment of the connection.
• SYN_SENT. This indicates the system sent a TCP SYN (synchronize) packet as the first part of the SYN, SYN-ACK (synchronize-acknowledge), ACK (acknowledge) handshake process and it is waiting for the SYN-ACK response.
• SYN_RECEIVED. This indicates the system sent a TCP SYNACK packet after receiving a SYN packet as the first part of the SYN, SYN-ACK, ACK handshake process. It is waiting for the ACK response to establish the connection. An excessive number of SYN_RECEIVED states indicate a SYN attack where an attacker is flooding a system with SYN packets but never finalizes the connection with ACK packets.

A

True

95
Q

The _____ command lists the routers between two systems. In this context, each router is referred to as a hop.

A

tracert

96
Q

True or False : Network administrators typically use tracert to identify faulty routers on the network.

A

True

97
Q

What does RTT stand for?

A

Round trip time

98
Q

___ is a command-line tool that is related to the Address Resolution Protocol (ARP) but is not the same. It resolves IP addresses to MAC addresses and stores the result in the ARP cache.

A

Arp

Security+ Get Certified Get Ahead SY0-501 (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions