Chapter 2 Flashcards
What type of firewall is best against a SYN flood attack?
Stateful Packet Inspection SPI
What does NAC do?
A network management solution and that enables only those devices that accept the policy to the network
What does IPsec transport do?
Only encrypts data of packet
What wireless access point has minimal functionality?
Controller-based
What does S/MIME do?
It encrypts emails and digitally signs them.
What is the benefit of SNMP V3?
All data is encrypted
What is good about ANT?
Low power, sleep long time low power
What windows software helps prevent malware by requiring user authorization to run executables?
DEP - Data Execution Prevention
What is Heuristic scanning?
Scans for anomalous behavior
What is enumeration?
the process of extracting user names, machine names, network resources, shares and services from a system.
What is LDAP?
a directory of the network
What is FTPS?
File transfer protocol with SSL/TLS and uses digital certificates to secure file transfer
What is the protocol for transmitting VoIP?
SRTP Secure Real Time Transport Protocol
What is Affinity?
Load balancer will always use the same server for a particular user or a particular application instance.
What is an application proxy?
When the client and the server are incompatible for direct connection to obtain the requested service you use an application proxy
What does the -n command do?
Sets number of ping packets to send
What does the -l command do?
Sets the size of the packets
What is (FRR) False Rejection Rate?
The rate at which authentication attempts are rejected when they should have succeeded.
What is (FAR) False Acceptance Rate?
The rate at people who should not be authenticated are.
What is (CER) crossover error rate?
The rate at which FAR and FRR are equal.
What is ERR equal error rate?
Another name for CER.
What is WORM storage?
Write Once Ream Many. High Capacity, cannot be edited.
What is a credential scan?
Giving testers logins. Also know as privileged scan.
What does Data Execution Prevention do?
Specifically monitors programs from accessing system memory and prevents that.
