CompTIA Security+ Flashcards

Question

How do you prevent eavesdropping attacks?

Answer 1

Use tokens and timestamps

Answer 2

Where all the flags in a network packets headers are set to 1111111- some systems crash and cant handle the fact that all flags have been set

Answer 3

A service that translates common domain name into an IP Address for the purpose of network routing

Answer 4

Disrupting normal DNS operations by providing false results. Attacker inserts incorrect DNS records at any point along the hierarchy. They can then redirect traffic to the attackers system. The attackers system includes a web server designed to closely resemble the legit server.

Answer 5

A protocol that translates logical IP addresses into the hardware MAC address on LANs

Answer 6

Disrupting normal ARP operations by providing false results. Attacker inserts false ARP records so they can redirect traffic back to their server. Only works on LANs

Answer 7

An attack that relies on people making simple typing mistakes. Consists of registering similar domain names in hopes that the user will make a typo.

Answer 8

It alters hardware addresses. Anyone with Admin access to a system can change its MAC address

Answer 9

Alters the IP address. Anyone with system admin privileges can alter an IP address.

Answer 10

Blocks incoming traffic from external networks bearing an internal source IP address.

Answer 11

Blocks outbound traffic from internal network bearing a source IP address you don't control.

Answer 12

Can remove publicly accessible EXE > Passwords are stored in shadow files. They can be locked down and are highly restricted.

Answer 13

- Must produce a completely different output for each input - Must be computationally difficult to retrieve the input from the output - Must be computationally difficult to find 2 different inputs that generate the same output.

Answer 14

An occurrence where the collisions become rather common with large samples.

Answer 15

Attacker guesses all possibilities for the password and keeps battering the system.

Answer 16

Try all English words first

Answer 17

Adds variations to the tries EG: Year, Day, Season etc

Answer 18

Precomputes hashes to try and crack the password

Answer 19

Attacker separately guesses the keys that are being used. Also known as Ciphertext attacks.

Answer 20

With a shift of 1, A's become B's, B's become C's etc.

Answer 21

The set of all possible encryption keys usable with an algorithm. EG: 56 bit DES = 72 quadrillion keys Flawed algorithms may still be susceptible to brute force attacks.

Answer 22

Detects patterns in Cypher text - studies the patterns of letters in cypher text.

Answer 23

Attacker has access to an unencrypted message

Answer 24

Attacker can create an encrypted message of his/her choice.

Answer 25

Attacker forces 2 systems to use weak cryptographic implementations.

Answer 26

Websites spread malware effectively. - Users trust websites they frequently visit - Browsers and addons have vulnerabilities - Users are conditioned to just click "OK" Limits: - Attackers can't just build their own websites - Why would users visit the attackers sites - Content filtering can block known malware sites How a watering hole attack works: 1) Identify and compromise a highly used site 2) Chose a client exploit and bundle in a botnet 3) Place the malware on the compromised site 4) Sit back and wait for infected systems to phone home.

Answer 27

Governed by IEEE 802.11 standard. Uses plaintext service set identifies (SSID) Uses beaconing to advertise to other devices.

Answer 28

Wireless networking uses radio signals that anyone can pluck out of the air

Answer 29

Protects confidentiality of communication. Prevents eavesdropping. Allows use of insecure transmission methods.

Answer 30

1) Use no Encryption 2) Wired equivalent privacy (WEP) - uses a static key 3) Wi-Fi protected access (WPA) - Uses temportal jet integrity protocol (TKIP) 4) WPA2 uses advanced encryption standard (AES) via CCMP WEP attacks depend on capturing initialisation vectors (IVs)

Answer 31

- Known attacks allow injection of packets and some limited decryption - These attacks work against TKIP principals - Play it safe and use WPA2

Answer 32

- WPS allows quick set up of devices - 2 methods for establishing connections: - Pressing the button on devices - Use 8 WPS pin

Answer 33

Flaws in WPS make it trivial to guess the pin. Though there are 10,000,000 possibilities, a flaw requires only 11000 guesses. Got the pin? You can now get WEP/WPA/WPA2 key Pin can't be changed.

Answer 34

- Denial of service attacks are easy on wireless - The radio spectrum is open, but in a limited account - The loudest signal always wins, so it doesn't take much to interfere with signals.

Answer 35

Attackers cruise neighbourhoods and commercial areas, using tools that capture Wi-Fi networks.

Answer 36

Can bypass other wireless authentication methods.

Answer 37

Enterprise grade wireless has built in intrusion detection capabilities. Unknown radios on the network can be identified. Handheld tools can pinpoint these.

Answer 38

Easy victims: Linksys, Homes

Answer 39

- Automates the evil twin process - Searches for adjacent networks - Creates a matching fake network - Redirects traffic to phony sites and captures credentials

Answer 40

Immediately disconnects clients Source: Wireless AP Destination: Laptop Process Deauthenticate

Answer 41

- Gather authentication information for cryptographic attacks - Conduct denial of service attacks on wireless networks

Answer 42

It is used for very short range links between devices (30-50 feet). Most common attack is on bluetooth

Answer 43

- An attacker sends bluetooth spam to users devices - The attacker tries to entice the user into taking some action - This is essentially Bluetooth spam and phishing

Answer 44

Attacker exploits firmware flaw in older bluetooth devices. Attacker forces pairing between devices. The connection grants access to the device.

Answer 45

Turn off discoverable mode when not in use. Apply firmware updates Watch out for suspicious activity

Answer 46

Business wants strong authentication and encryption to protect to protect the integrity of the RFID system. Consumers want privacy safeguards to protect their personal info.

Answer 47

Use proper authentication Encrypt sensitive data Validate user input Avoid and remediate known issues

Answer 48

- Type and scope of encryption - Users with access to the application - Access granted to authorised users - Security of underlying infrastructure Configurnig baselines allows quick identification and remediation of security gaps

Answer 49

Validate all user input

Answer 50

LDAP injection XML injection Command injection (Arbitrary code execution)

Answer 51

This attack occurs when an attacker embeds malicious scripts into 3rd party websites that are later run by visitors to that site.

Answer 52

the tag allows devs to embed code into a page EG: Alert (“This site is under construction”) ;

Answer 53

XSRF attacks leverage the fact that users are often logged into multiple sites at the same time and use one site to trick the browser into sending malicious requests to another site without the user knowing.

Answer 54

Re-architect web applications Prevent the use of HTTP GET requests Advise users to log out of sites Automatically log out users after an idle period

Answer 55

An attack where the attacker hides elements of a web page behind other elements so that a user cannot see what he or she is actually clicking.

Answer 56

A specialised form of clickjacking that tricks the user about the cursors location on the screen

Answer 57

- Use input validation to prevent the inclusion of periods in user requests - Implement strict file access controls to limit the web servers ability to read files

Answer 58

Occurs when develops dont put limits of what can be selected in a field within a web application. An attacker could enter a number with 10000000 digits in which is far beyond the limits of a web server and could cause it to show sensitive information.

Answer 59

Small pieces of content that can track users between sites. They are essentially data stored by websites in browsers. They are useful to recognise users. They are used to remember information.

Answer 60

Cookies can be used across different websites. Can track user activity If you log into a site, everything is de-anonymised.

Answer 61

Cookie values are weak if guessable. We can figure out users authentication cookies by looking at trends and similarities between cookies. Once you have worked out the authentication cookie, you can login to the account using header manipulation - You can change the JSESSIONID to include the authentication cookie at the end.

Answer 62

Also known as extensions Add new functionality to browsers and other software Are written and developed by 3rd parties

Answer 63

You may not know who wrote the code Trojans may perform malicious secondary activity Permissions may be overly broad

Answer 64

They occur when an attacker exploits a vulnerability in a system that allows the attacker to run commands on that system EG: A public facing web server must open port 80 and 443 to work, which could open the opportunity for attackers to exploit vulnerabilities in unpatched servers

Answer 65

Code execution attacks where the attacker runs commands of his/her choice.

Answer 66

Code execution attacks that take place over a network connection

Answer 67

- Install malicious code - Join a system to a botnet - Steal sensitive information - Create accounts for later access

Answer 68

Limit admin access | Patch systems and applications

Answer 69

Serves as the software interface between hardware devices and the operating system Device drivers require low level access to the operating system

Answer 70

Modifying a driver to carry out malicious activities | This requires access to the drivers source code

Answer 71

Wrapping a legitimate driver with a malicious shim | Does not require access to the source code of the driver.

Answer 72

Code signing protects against malicious drivers

Answer 73

Avoids unpredictable states by providing the computer with explicit instructions if something unpredictable were to happen

Answer 74

Use psychological tricks to manipulate people into divulging information or performing an action that undermines security

Answer 75

1) Authority - People defer to authority 2) Intimidation - Scaring people into doing what you want 3) Consensus - The herd mentality 4) Scarcity - Getting the last one 5) Urgency - Time is running out 6) Familiarity - We say yes to people we like

Answer 76

Unsolicited commercial Emails

Answer 77

Targeting users to steal credentials

Answer 78

a Very targeted Phish

Answer 79

Targeting executives with phishing emails

Answer 80

Using Fake websites and going to great lengths to make it look legitimate

Answer 81

Voice Phishing

Answer 82

Instant Messaging spam

Answer 83

Faking an identity

Answer 84

Attacker simply looks over the shoulder of the victim

Answer 85

Social engineers love going through peoples trash to see what they can find

Answer 86

This can be as simple as holding doors open to let attackers gain access to areas

Answer 87

- Passive tools - Obscure activity - Active tools - Interact with machines

Answer 88

Attractive decoy machines put in by administrators

Answer 89

Decoy networks, similar to honeypots

Answer 90

Peek into network traffic (EG: wireshark)

Answer 91

1. Port Scanners 2. Vulnerability scanners 3. Application scanners