Domain 4: Network Security

Question 1

Application programming interface (API)

Answer 1

A set of routines, standards, protocols, and tools for building software applications to access a web-based software application or web tool.

Question 2

Bit

Answer 2

The most essential representation of data (zero or one) at Layer 1 of the Open Systems Interconnection (OSI) model.

Question 3

Broadcast

Answer 3

Broadcast transmission is a one-to-many (one-to-everyone) form of sending internet traffic.

Question 4

Byte

Answer 4

The byte is a unit of digital information that most commonly consists of eight bits.

Question 5

Cloud computing

Answer 5

A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. NIST 800-145

Question 6

Community cloud

Answer 6

A system in which the cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns (e.g., mission, security requirements, policy and compliance considerations). It may be owned, managed and operated by one or more of the organizations in the community, a third party or some combination of them, and it may exist on or off premises. NIST 800-145

Question 7

Denial-of-Service (DoS)

Answer 7

The prevention of authorized access to resources or the delaying of time-critical operations. (Time-critical may be milliseconds or it may be hours, depending upon the service provided.) Source: NIST SP 800-27 Rev A

Question 7

De-encapsulation

Answer 7

The opposite process of encapsulation, in which bundles of data are unpacked or revealed.

Question 8

Hybrid cloud

Answer 8

A combination of public cloud storage and private cloud storage where some critical data resides in the enterprise’s private cloud while other data is stored and accessible from a public cloud storage provider.

Question 8

Internet Protocol (IPv4)

Answer 8

Standard protocol for transmission of data from source to destinations in packet-switched communications networks and interconnected systems of such networks. CNSSI 4009-2015

Question 8

Encapsulation

Answer 8

Enforcement of data hiding and code hiding during all phases of software development and operational use. Bundling together data and methods is the process of encapsulation; its opposite process may be called unpacking, revealing, or using other terms. Also used to refer to taking any set of data and packaging it or hiding it in another data structure, as is common in network protocols and encryption.

Question 8

Fragment attack

Answer 8

In a fragment attack, an attacker fragments traffic in such a way that a system is unable to put data packets back together.

Question 8

File Transfer Protocol (FTP)

Answer 8

The internet protocol (and program) used to transfer files between hosts.

Question 8

Hardware

Answer 8

The physical parts of a computer and related devices.

Question 8

Man-in-the-Middle

Answer 8

An attack where the adversary positions himself in between the user and the system so that he can intercept and alter data traveling between them. Source: NISTIR 7711

Question 8

Domain Name Service (DNS)

Answer 8

This acronym can be applied to three interrelated elements: a service, a physical server and a network protocol.

Question 9

Encryption

Answer 9

The process and act of converting the message from its plaintext to ciphertext. Sometimes it is also referred to as enciphering. The two terms are sometimes used interchangeably in literature and have similar meanings.

Question 10

Internet Control Message Protocol (ICMP)

Answer 10

An IP network protocol standardized by the Internet Engineering Task Force (IETF) through RFC 792 to determine if a particular service or host is available.

Question 10

Infrastructure as a Service (IaaS)

Answer 10

The provider of the core computing, storage and network hardware and software that is the foundation upon which organizations can build and then deploy applications. IaaS is popular in the data center where software and servers are purchased as a fully outsourced service and usually billed on usage and how much of the resource is used.

Question 11

Microsegmentation

Answer 11

Part of a zero-trust strategy that breaks LANs into very small, highly localized zones using firewalls or similar technologies. At the limit, this places firewall at every connection point.

Question 12

Oversized Packet Attack

Answer 12

Purposely sending a network packet that is larger than expected or larger than can be handled by the receiving system, causing the receiving system to fail unexpectedly.

Question 12

Packet

Answer 12

Representation of data at Layer 3 of the Open Systems Interconnection (OSI) model.

Question 13

Payload

Answer 13

The primary action of a malicious code attack.

Question 14

Payment Card Industry Data Security Standard (PCI DSS)

Answer 14

An information security standard administered by the Payment Card Industry Security Standards Council that applies to merchants and service providers who process credit or debit card transactions.

Question 15

Platform as a Service (PaaS)

Answer 15

The web-authoring or application development middleware environment that allows applications to be built in the cloud before they’re deployed as SaaS assets.

Question 16

Private cloud

Answer 16

The phrase used to describe a cloud computing platform that is implemented within the corporate firewall, under the control of the IT department. A private cloud is designed to offer the same features and benefits of cloud systems, but removes a number of objections to the cloud computing model, including control over enterprise and customer data, worries about security, and issues connected to regulatory compliance.

Question 17

Public cloud

Answer 17

The cloud infrastructure is provisioned for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider. NIST SP 800-145

Question 17

Simple Mail Transport Protocol (SMTP)

Answer 17

The standard communication protocol for sending and receiving emails between senders and receivers.

Question 18

Protocols

Answer 18

A set of rules (formats and procedures) to implement and control some type of association (that is, communication) between systems. NIST SP 800-82 Rev. 2

Question 19

Software

Answer 19

Computer programs and associated data that may be dynamically written or modified during execution. NIST SP 80–37 Rev. 2

Question 19

Software as a Service (SaaS)

Answer 19

Software as a Service (SaaS)

The cloud customer uses the cloud provider’s applications running within a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings. Derived from NIST 800-145

Question 20

Spoofing

Answer 20

Faking the sending address of a transmission to gain illegal entry into a secure system. CNSSI 4009-2015

Question 21

Transport Control Protocol/Internet Protocol (TCP/IP) Model

Answer 21

Internetworking protocol model created by the IETF, which specifies four layers of functionality: Link layer (physical communications), Internet Layer (network-to-network communication), Transport Layer (basic channels for connections and connectionless exchange of data between hosts), and Application Layer, where other protocols and user applications programs make use of network services.

Question 22

VLAN

Answer 22

A virtual local area network (VLAN) is a logical group of workstations, servers, and network devices that appear to be on the same LAN despite their geographical distribution.

Question 23

VPN

Answer 23

A virtual private network (VPN), built on top of existing networks, that can provide a secure communications mechanism for transmission between networks.

Question 24

WLAN

Answer 24

A wireless area network (WLAN) is a group of computers and devices that are located in the same vicinity, forming a network based on radio transmissions rather than wired connections. A Wi-Fi network is a type of WLAN.

Question 25

Zenmap

Answer 25

The graphical user interface (GUI) for the Nmap Security Scanner, an open-source application that scans networks to determine everything that is connected as well as other information.

Question 26

Zero Trust

Answer 26

Removing the design belief that the network has any trusted space. Security is managed at each possible level, representing the most granular asset. Microsegmentation of workloads is a tool of the model.