Chapter 6: Security Assessment and Testing

Question 1

Vulnerability Assesment

Answer 1

looking for weaknesses in everything etc.

Question 2

PEN Testing

Answer 2

Looking to exploit weaknesses or ethical hacking..

Question 3

zero knowledge

Answer 3

black box testing - for someone with no internal knowledge.

Question 4

Partial knowledge

Answer 4

limited access on network

Question 5

full knowledge

Answer 5

full knowledge of network…rouge administrator.

Question 6

Vulnerability Scanning

Answer 6

Identifying

• Active hosts on network
• active and vulneable servies/ports on hosts
• applications
• operating systems
• vulnerabilities associated with discovered OS & Apps
• Misconfigured Settings

testing for compliance

establish foundation for PEN testing

Question 7

Attack methodology

Answer 7

Question 8

attack methodology part 2

Answer 8

Question 9

Pen testing consideration

Answer 9

3 basic requirements:

• Meetin with Senior mgmt to determine the goal of the Assessment
• Document Rules of Engagement
• Get sign off from Senior mgmt.

It could disrupt productivity and systems

Purpose is to determine subjects ability to withstan an attack and determine effectiveness of current security measures.

***test should test and document*** not fix or suggest.. don’t violate seperation of duties.

Question 10

IDS

Answer 10

intrusion detection system - passive in actons

part of a layered defense passive in activity.

needs an interface in promiscous mode - packet sniff whole network…card can capture all traffic.

port span or mirroring needs to be enabled to view all traffice on switch port.

IPS is active

Question 11

IDS Categories

Answer 11

Host Based

Network Based

the anlysis engine is what makes it an IDS>

Question 12

HIDS

Answer 12

Host based intrusion detection system.

cane be operating system and application specifi- might understand the latest attack against a certain service on a host

they can look at data post-encryption.

cons

systems resources, not scalable, it can be disabled if attacked..

Question 13

network base ids

Answer 13

look for DOS

IPS port number

brue force tunnneling etc.

Question 14

ids analysis engine

Answer 14

pattern matching based on signature

profile matching system profile matching base on normal behavior…

Question 15

evasion attack

Answer 15

flying under the RADAR many small attacks from different directions

Question 16

insertion attack

Answer 16

geared towards signature based systemes adding meaningless info to a known attack.