Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

CPSA > CPSA > Flashcards

CPSA Flashcards

1
Q

What is on Port 123?

A

Network Time Protocol, NTP. TCP as UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is on Port 110?

A

POP3, getting mails. TCP as UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is on Port 19?

A

Character Generator, TCP as UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is on Port 7?

A

Echo

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is on Port 5432?

A

Postgresql

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is on Port 23?

A

Telnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is on Port 520?

A

Routing Information Protocol, UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is on Port 512?

A

R-exec

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is on Port 513?

A

R-Login

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is on Port 514?

A

R-Shell

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is on Port 79?

A

Finger

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is on Port MSSQL and hidden mode?

A

TCP port 1433 and Hidden 2433

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the default port of Oracle database?

A

1521, TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What port is used for ipsec?

A

500 (Internet Key Exchange)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What does IKE stands for?

A

Internet Key Exchange
In computing, Internet Key Exchange (IKE, sometimes IKEv1 or IKEv2, depending on version) is the protocol
used to set up a security association (SA) in the IPsec protocol suite. IKE builds upon the Oakley protocol and
ISAKMP.[1] IKE uses X.509 certificates for authentication - either pre-shared or distributed using DNS
(preferably with DNSSEC) and a Diffie–Hellman key exchange - to set up a shared session secret from
which cryptographic keys are derived.[2][3] In addition, a security policy for every peer which will connect
must be manually maintained.[2]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What does LSASS stands for?

A

Local Security Authority Subsystem Service (LSASS) is a process in Microsoft Windows operating systems that
is responsible for enforcing the security policy on the system. It verifies users logging on to a Windows
computer or server, handles password changes, and creates access tokens.[1] It also writes to the Windows
Security Log

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does SAM stands for?

A

The Security Account Manager (SAM) is a database file[1] in Windows XP, Windows Vista and Windows 7 that
stores users’ passwords. It can be used to authenticate local and remote users. Beginning with Windows 2000
SP4, Active Directory authenticates remote users. SAM uses cryptographic measures to prevent forbidden
users to gain access to the system.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What does EAP stands for?

A

Extensible Authentication Protocol, or EAP, is an authentication framework frequently used in wireless
networks and point-to-point connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What does WPA stands for?

A

Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) are two security protocols and security
certification programs developed by theWi-Fi Alliance to secure wireless computer networks. The Alliance
defined these in response to serious weaknesses researchers had found in the previous system, Wired
Equivalent Privacy (WEP).[1]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does SMS,SUS,WSUS, MBSA stands for?

A 
Windows Update Agent (WUA)
Systems Management Server (SMS)
Server update services (SUS)
Windows Server Update Services (WSUS)
Microsoft Baseline Security Analyzer (MBSA)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What does OSPF stands for?

A 
Open Shortest Path First (OSPF) is a routing protocol for Internet Protocol (IP) networks. It uses a link state
routing (LSR) algorithm and falls into the group of interior routing protocols, operating within a single
autonomous system (AS).
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does RIP stands for?

A

The Routing Information Protocol (RIP) is one of the oldest distance-vector routing protocols which employ
the hop count as a routing metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What does tkip stands for?

A

Temporal Key Integrity Protocol or TKIP /tikp/ was a stopgap security protocol used in the IEEE 802.11
wireless networking standard.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does STP stands for?

A

The Spanning Tree Protocol (STP) is a network protocol that builds a logical loop-free topology for Ethernet
networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What does PGP stand for?

A

Pretty Good Privacy (PGP) is an encryption program that provides cryptographic privacy and authentication for
data communication.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What does DES stands for ?

A

The Data Encryption Standard (DES, /diis/ or /dz/) is a symmetric-key algorithm for the encryption of electronic
data.
Successor is 3DES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What is the use of EICAR ?

A

EICAR is a text file with a signature recognised by all AV vendors to test if a virus is detected by the AV engine.
EICAR is not a virus by itself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

How does traceroute work?

A

Traceroute works by sending packets with gradually increasing TTL value, starting with TTL value of one. The
first router receives the packet, decrements the TTL value and drops the packet because it then has TTL value
zero. The router sends an ICMP Time Exceeded message back to the source.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What does AJAX stands for?

A

Ajax (also AJAX; /edæks/; short for asynchronous JavaScript and XML)[1][2][3] is a set of web development
techniques using many web technologies on the client-side to create asynchronous Web applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What does SOAP stands for?

A

SOAP (Simple Object Access Protocol) is a protocol specification for exchanging structured information in the
implementation of web services in computer networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What does IIS stands for?

A

Internet Information Services (IIS, formerly Internet Information Server) is an extensible web server created by
Microsoft for use with Windows NT family.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What does URI stands for?

A

Uniform Resource Identifier (URI) is a string of characters used to identify a
resource. Such identification enables interaction with representations of the resource over a network, typically
the World Wide Web

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What does HTTP stands for?

A

The Hypertext Transfer Protocol (HTTP) is an application protocol for distributed, collaborative, hypermedia
information systems.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What does FSMO stands for ?

A

Flexible Single Master Operations (FSMO, F is sometimes floating ; pronounced Fiz-mo), or just single master
operation or operations master, is a feature of Microsoft’s Active Directory (AD).[1] As of 2005, the term FSMO
has been deprecated in favour of operations masters.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What does NETBIOS stands for?

A

NetBIOS /ntb.s/ is an acronym for Network Basic Input/Output System. It provides services related to the
session layer of the OSI model allowing applications on separate computers to communicate over a local area
network. As strictly an API, NetBIOS is not a networking protocol.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

B2) Network Architectures

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

WEP (Wired Equivalent Privacy)
64bit WEP Key (40 + 24 (IV) (Initialization Vector)
128bit WEP Key (104 + 24 (IV) (Initialization Vector)

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

B4) Network Mapping & Target Identification

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Map route between engagement point and target:

A
  • traceroute (uses UDP or ICMP echo)
  • tcptraceroute (use TCP SYN)
  • tracert (Windows)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Network sweeping (Ping Sweep)

A

• ICMP sweeps (ICMP ECHO request) is a basic network scanning technique used to determine which of
a range of IP addresses map to live hosts (computers). Whereas a single ping will tell you whether one
specified host computer exists on the network, a ping sweep consists of ICMP (Internet Control
Message Protocol) ECHO requests sent to multiple hosts. If a given address is live, it will return an
ICMP ECHO reply. Ping sweeps are among the older and slower methods used to scan a network.

41
Q

Network sweeping (TCP)

A

With the TCP Sweep technique, instead of sending ICMP ECHO request packets we send TCP ACK or TCK SYN
packets (depending if we have root access or not) to the target network. The port number can be selected to
meet our needs. Usually a good pick would be one of the following ports – 21 / 22 / 23 / 25 / 80 (especially if a
firewall is protecting the targeted network). Receiving a response is a good indication that something is up
there. The response depends on the target’s operating system, the nature of the packet sent and any firewalls,
routers or packet-filtering devices used. Bear in mind that firewalls can spoof a RESET packet for an IP address,
so TCP Sweeps may not be reliable.

42
Q

B5) Interpreting Tool Output

A
43
Q

• Types of Scanning Method

A 
o -sS (TCP SYN scan)
o -sT (TCP connect scan)
o -sU (UDP scans)
o -sY (SCTP INIT scan)
o -sN; -sF; -sX (TCP NULL, FIN, and Xmas scans)
o -sA (TCP ACK scan
44
Q

• Port ranges:

A

o The port numbers in the range from 0 to 1023 are the well-known ports or system ports.
They are used by system processes that provide widely used types of network services. On
Unix-like operating systems, a process must execute with superuser privileges to be able to
bind a network socket to an IP address using one of the well-known ports.

45
Q

• Port ranges:

A

o The range of port numbers from 1024 to 49151 are the registered ports. They are assigned
by IANA for specific service upon application by a requesting entity. On most systems,
registered ports can be used by ordinary users

46
Q

• Port ranges:

A

o The range 49152–65535 (215+214 to 216−1) contains dynamic or private ports that cannot
be registered with IANA. This range is used for private, or customized services or temporary
purposes and for automatic allocation of ephemeral ports.

47
Q

TTL

A
48
Q

AIX

A

60 30

49
Q

DEC Pathworks V5

A

30 30

50
Q

FreeBSD 2.1R

A

64 64

51
Q

HP/UX 9.0

A

30 30

52
Q

HP/UX 10.01

A

64 64

53
Q

Irix 5.3

A

60 60

54
Q

Irix 6.x

A

60 60

55
Q

Linux

A

64 64

56
Q

MacOS/MacTCP 2.0.x

A

60 60

57
Q

OS/2 TCP/IP 3.0

A

64 64

58
Q

OSF/1 V3.2A

A

60 30

59
Q

Solaris 2.x

A

255 255

60
Q

SunOS 4.1.3/4.1.4

A

60 60

61
Q

Ultrix V4.1/V4.2A

A

60 30

62
Q

VMS/Multinet

A

64 64

63
Q

VMS/TCPware

A

60 64

64
Q

VMS/Wollongong

A

128 30

65
Q

VMS/UCX

A

128 128

66
Q

MS WFW

A

32 32

67
Q

MS Windows 95

A

32 32

68
Q

MS Windows NT 3.51

A

32 32

69
Q

MS Windows NT 4.0

A

128 128

70
Q

B6) Filtering Avoidance Techniques

A
71
Q

Ingress:

A

Network traffic that originates from outside of the network’s routers and proceeds toward a destination inside
of the network.

72
Q

What is running on Port 1524?

A

Ingress

73
Q

Egress:

A

Network traffic that begins inside of a network and proceeds through its routers to a destination somewhere
outside of the network.
As a security-in-depth measure not only ingress should be restricted but also egress traffic. This would make it
harder for an attacker to start a reverse shell on the server, if only the services running on the server are
allowed to connect to the outside world.

74
Q

B8) OS Fingerprinting

A
75
Q

Active fingerprinting:

A

Active fingerprinting is the process of transmitting packets to a remote host and analysing corresponding
replies.

76
Q

Passive fingerprinting:

A

Passive fingerprinting is the process of analysing packets from a host on a network. In this case, fingerprinter
acts as a sniffer and doesn’t put any traffic on a network.

77
Q

Active fingerprinting by using nmap:

A

• OS defection (-O) and versions scan (-sV)
- Nmap -O -sV -v
• Use IPv6 (-6)
- Nmap -6 -O -sV -v

78
Q

B9) Application Fingerprinting and Evaluating Unknown Services

A

• nmap -sV -sC -T4 -F
-sV is for version scanning
-sC is to scan using some default nmap script
Recall that -T4 causes Nmap to go faster (more aggressive timing) and -F tells Nmap to scan only ports
registered in nmap-services.

79
Q

B11) Cryptography

A
80
Q

Which of the following is a Symmetric encryption? MD2, MD5, AES

A

MD2, MD5 and SHA1 are hashing algorithms.

AES (Advanced Encryption Standard) is symmetric encryption algorithm.

81
Q

Differences between encryption and encoding.

A

If data is encrypted it can be decrypted again into the original, clear text but only by the person that is in
possession of the secret/key.
Encoding is the process of applying a specific code, such as letters, symbols and numbers, to data for
conversion into an equivalent cipher. Only the encoding needs to be known (such as Base64) to decode the
data back into the clear text.

82
Q

Symmetric / asymmetric encryption

A

Symmetric-key algorithms are algorithms for cryptography that use the same cryptographic keys for both
encryption of plaintext and decryption of ciphertext. The keys may be identical or there may be a simple
transformation to go between the two keys.
Asymmetric Encryption is a form of Encryption where keys come in pairs. What one key encrypts, only the
other can decrypt. Frequently (but not necessarily), the keys are interchangeable, in the sense that if key A
encrypts a message, then B can decrypt it, and if key B encrypts a message, then key A can decrypt it.

83
Q

Data Encryption Standard (DES)

A

The Data Encryption Standard (DES) is a symmetric-key algorithm for the encryption of electronic data.
Although now considered insecure, it was highly influential in the advancement of modern cryptography.

84
Q

Triple Data Encryption Standard (3DES, or officially the Triple Data Encryption Algorithm TDEA or Triple DEA)

A

The original DES cipher’s key size of 56 bits was generally sufficient when that algorithm was designed, but the
availability of increasing computational power made brute-force attacks feasible. Triple DES provides a
relatively simple method of increasing the key size of DES to protect against such attacks, without the need to
design a completely new block cipher algorithm.

85
Q

Advanced Encryption Standard (AES

A

AES, also known as Rijndael[4][5] (its original name), is a specification for the encryption of electronic data
established by the U.S. National Institute of Standards and Technology (NIST) in 2001.[6]

86
Q

RSA (Rivest, Shamir, Adleman)

A

RSA is one of the first practical public-key cryptosystems and is widely used for secure data transmission. In
such a cryptosystem, the encryption key is public and differs from the decryption key which is kept secret. In
RSA, this asymmetry is based on the practical difficulty of factoring the product of two large prime numbers,
the factoring problem.
RSA is a relatively slow algorithm, and because of this it is less commonly used to directly encrypt user data.
More often, RSA passes encrypted shared keys for symmetric key cryptography which in turn can perform bulk
encryption-decryption operations at much higher speed.

87
Q

RC4

A

In cryptography, RC4 (Rivest Cipher 4 also known as ARC4 or ARCFOUR meaning Alleged RC4, see below) is a
stream cipher. While remarkable for its simplicity and speed in software, multiple vulnerabilities have been
discovered in RC4, rendering it insecure.[3][4] It is especially vulnerable when the beginning of the output
keystream is not discarded, or when nonrandom or related keys are used. Particularly problematic uses of RC4
have led to very insecure protocols such as WEP.[5]

88
Q

MD5

A

The MD5 algorithm is a widely used hash function producing a 128-bit hash value. Although MD5 was initially
designed to be used as a cryptographic hash function, it has been found to suffer from extensive
vulnerabilities. It can still be used as a checksum to verify data integrity, but only against unintentional
corruption.
Like most hash functions, MD5 is neither encryption nor encoding. It can be reversed by brute-force attack and
suffers from
extensive vulnerabilities.

89
Q

SHA-1 (Secure Hash Algorithm 1)

A

In cryptography, SHA-1 (Secure Hash Algorithm 1) is a cryptographic hash function designed by the United
States National Security Agency and is a U.S. Federal Information Processing Standard published by the United
States NIST.[2] SHA-1 produces a 160-bit (20-byte) hash value known as a message digest. A SHA-1 hash value
is typically rendered as a hexadecimal number, 40 digits long.

90
Q

Hash-based message authentication code (HMAC)

A

In cryptography, a keyed-hash message authentication code (HMAC) is a specific type of message
authentication code (MAC) involving a cryptographic hash function (hence the ‘H’) in combination with a secret
cryptographic key. As with any MAC, it may be used to simultaneously verify both the data integrity and the
authentication of a message. Any cryptographic hash function, such as MD5 or SHA-1, may be used in the
calculation of an HMAC; the resulting MAC algorithm is termed HMAC-MD5 or HMAC-SHA1 accordingly. The
cryptographic strength of the HMAC depends upon the cryptographic strength of the underlying hash function,
the size of its hash output, and on the size and quality of the key.

91
Q

B12 Applications of Cryptography

A
92
Q

Transport Layer Security (TLS)

A

cryptographic protocol designed to provide communications security over a computer network. The protocol is widely used in applications such as email, instant messaging, and voice over IP, but its use in securing HTTPS remains the most publicly visible.

93
Q

Secure Sockets Layer

A

an encryption-based Internet security protocol. It was first developed by Netscape in 1995 for the purpose of ensuring privacy, authentication, and data integrity in Internet communications. SSL is the predecessor to the modern TLS encryption used today.

94
Q

IPSec

A

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications that
works by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols
for establishing mutual authentication between agents at the beginning of the session and negotiation of
cryptographic keys to be used during the session.

95
Q

Authentication Header (AH)

A

is a member of the IPsec protocol suite. AH guarantees
connectionless integrity and data origin authentication of IP packets. Further, it can optionally protect
against replay attacks by using the sliding window technique and discarding old packets

96
Q

Encapsulating Security Payload (ESP)

A

) is a member of the IPsec protocol suite. In IPsec it provides
origin authenticity, integrity and confidentiality protection of packets. ESP also supports encryption-only
and authentication-only configurations, but using encryption without authentication is strongly discouraged
because it is insecure.

97
Q

Secure Shell (SSH)

A 
Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an
unsecured network.[1] The best known example application is for remote login to computer systems by users.
98
Q

Pretty Good Privacy (PGP)

A

Pretty Good Privacy (PGP) is an encryption program that provides cryptographic privacy and authentication for
data communication. PGP is often used for signing, encrypting, and decrypting texts, e-mails, files, directories,
and whole disk partitions and to increase the security of e-mail communications. It was created by Phil
Zimmermann in 1991.[2]

99
Q

WEP

A

Wired Equivalent Privacy (WEP) is a security algorithm for IEEE 802.11 wireless networks. Introduced as part of
the original 802.11 standard ratified in 1997, its intention was to provide data confidentiality comparable to
that of a traditional wired network.[1] WEP, recognizable by the key of 10 or 26 hexadecimal digits, was at one
time widely in use and was often the first security choice presented to users by router configuration tools.

CPSA (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions