Deck D Prt. 1

Question 1

Asymmetric Cryptography

Answer 1

Is Computationally Expensive in Comparison with Symmetric Encryption. However, it is well Suited to Securely Negotiate Keys for use with Symmetric Cryptography

Question 2

Audit Feature

Answer 2

Determining The Impact of Enabling the AUDIT Feature on a Server should be the First Step to take Before you Enable Audit Feature.

Question 3

BBProxy

Answer 3

Is Used for Blackjacking Attack in which the Attacker Could Circumvent Perimeter Defenses and Gain Access. Blackjacking is a TECHNIQUE Used to Connect Internally to a Corporate Network using a Typical BES Device

Question 4

Backups

Answer 4

To SECURE the Backups Tapes in Transit, You Should Encrypted the Backup Tapes and Transport Them in a Lock Box.

Question 5

Biometric Processing

Answer 5

Is the Amount of Time it takes to be Either Accepted or Rejected from when an Individual Provides Identification and Authentication Information.

Question 6

Botnet Attack

Answer 6

Is Easy to Spot when you see Large Number of OUTBOUND Connections and Internal IP is Communicating with a Blacklisted Public IP

Question 7

Brute Force

Answer 7

Method of Password Cracking Takes the Most time and Effort

Question 8

C++

Answer 8

Programming Languages is most susceptible to buffer Overflow Attacks, due to its Lack of Build in Bounds Checking Mechanism

Question 9

Clickjacking Attack

Answer 9

Occurs when the USER thinks He/She is clicking on a NORMAL URL but actually He/She Clicks on the content or URL that exists in the Transparent “Iframe” which is setup by the Attacker.

Question 10

Counter Based Authentication System

Answer 10

A Counter Based Authentication System is an Authentication System that Creates ONE TIME PASSWORDS that are Encrypted with Secret Keys

Question 11

DNS Spoofing

Answer 11

Occurs when that attackers Gain Access to the DNS Server and redirect the direction of a website like www.google.com to their OWN IP ADDRESS

Question 12

Digital Signature

Answer 12

Two Important Conditions of a Digital Signature is that is Has to be Unforgeable and has to be Authentic.

Question 13

ESP Transport Mode

Answer 13

ESP(Encapsulating Security Payload) Transport Mode is the Mode of IPSEC that Provides you with Security and Confidentiality of Data Within the Same LAN(NETWORK)

Question 14

Encryption Protocols

Answer 14

Using ENCRYPTION Protocols to Secure Network Communications is the Vest way to Defend Against Network Sniffing.

Question 15

Bettercap

Answer 15

Is a TOOL that is USED by ATTACKERS to inject HTML Code to Embed Malicious Applets into HTTP Connections Using A Rogue wireless AP in Order to carry out an MITM Attack and Inject an HTML Code to Embed a Malicious Applet in all HTTP Connections.

Question 16

False Positive

Answer 16

Example Of False Positive is an ALERT Created when the External Router Was Accessed from the ADMINISTRATOR’S Computer to update the Router Configuration since the External and Internal Routers and Firewall is Supposed to be Managed by the ADMIN, and it was updated and managed by the ADMIN Computer, There is no INTRUSION. It is a FALSE POSITIVE. True Positive IDS Referring a behavior as an Attack, in real Life it is. True Negative-IDS Referring a behavior not an attack and in real life it is not. False Positive - IDS Referring a behavior as an Attack, in real life it is not. False Negative- IDS Referring a behavior not an Attack, but in real Life is an Attack

Question 17

File System Permission

Answer 17

Vulnerability Allows Hacker to place Several UNKNOWN Files in the Root Directory of the LINUX FTP Server.

Question 18

FireWall Rule

Answer 18

The Firewall RULE “If (SOURCE MATCHES 10.10.10.0/24 and Destination Matches 10.20.20.1 and port Matches 443) then permit” will ensure that workstation in network 10.10.10.0/24 can only reach the appropriate web site 10.20.20.1 using HTTPS.

Question 19

Google Search Query

Answer 19

The Google Search Query “Site:Target.com-Site:Marketing.Target.com accounting” will return results matching “accounting” in Domain target.com but not on the site Marketing.target.com

Question 20

Gray-Box Testing

Answer 20

The Gray Box Testing Methodology Enforces Restriction Such that the Internal Operation of a System in only Partly Accessible to the Tester.

Question 21

Hash

Answer 21

HASHING Provides INTEGRITY

Question 22

IPSec

Answer 22

Is a Security Protocol that Work on Layer 3 (Network Layer) and NOT LAYER 2 (Data Link Layer)

Question 23

IPSec

Answer 23

Is a Layer 3 (Network Layer) Protocol that ALLOWS for End-To-End Encryption of the Connection.

Question 24

Ideal Server Placement

Answer 24

Is the Situation when a Web Server Facing the Internet is Placed in the DMZ, an Application Server on The Internal Network is Placed behind the DMZ, WHEREAS a Database server on the Internal Network is Placed Behind the DMZ.

Question 25

Kube Scheduler

Answer 25

Is the Master Component in Kubernetes Cluster Architecture which Scans newly Generated Pods and Allocates a NODE to Them. This Component can also Assign Nodes based on Factors Such as The Overall Resource Requirement, Data Locality, Software/Hardware/Policy Restrictions