Exam 2

Question 1

SYN FLOOD solutions

Answer 1

micro blocks, bandwidth throttling, SYN cookies, RST cookies, stack tweaking, stateful packet inspection firewall

Question 2

micro blocks

Answer 2

minimize requests

Question 3

bandwidth throttling

Answer 3

limit from same IP

Question 4

SYN cookies

Answer 4

not kept in memory

Question 5

RST cookies

Answer 5

legit users TRY AGAIN

Question 6

Stack Tweaking

Answer 6

shorten time in buffer

Question 7

stateful packet inspection firewall

Answer 7

packet CONTEXT and CONTENT

Question 8

HTTP

Answer 8

content transferred slowly

Question 9

Network Host-Based Firewall

Answer 9

software based solution that runs on top of OS

Question 10

Dual-Homed Host

Answer 10

DMZ

Question 11

Router-base firewall

Answer 11

inspect/control traffic;easy

Question 12

Screened Host

Answer 12

Bastion Host and Screened Host

Question 13

network address translation

Answer 13

masks internal IP; supersedes proxy servers

Question 14

preemptive blocking

Answer 14

detects intrusions through foot printing but can block legitimate traffic

Question 15

infiltration

Answer 15

goes into hacker world

Question 16

intrusion deflection

Answer 16

honey pot

Question 17

intrusion deterrence

Answer 17

not worth it

Question 18

anomaly detection

Answer 18

normal use is logged
- threshold monitoring
- resource profiling
- user/group work profiling
- executable profiling

Question 19

Specter

Answer 19

software honeypot solution
- open
- secure
- failing
- strange
- aggressive

Question 20

historic types of encryption

Answer 20

• single alphabet substitution
• multi-alphabet substitution
• rail fence
• Vigenère
• enigma
• binary operations

Question 21

symmetric encryption

Answer 21

one key
- DES (data encryption standard)
–> blowfish
–> AES (advanced encryption standard)
–> IDEA (international data encryption algorithm)
–> serpent
–> twofish

Question 22

key stretching

Answer 22

making key stronger and longer
- password-based key derivation function 2
- bcrypt

Question 23

pseudo-random number generator (PRNG)

Answer 23

makes cipher keys for symmetric encryption
- uncorrelated sequences
- long period
- uniformity

Question 24

public key encryption

Answer 24

public key to encrypt, private key to decrypt
- RSA (rivest, shamir, and adleman)

Question 25

Digital Signature

Answer 25

mathematically generated from HASH of something to be signed

Question 26

Digital Certificate

Answer 26

contains public key signed by trusted 3rd party
- X.509 is the standard for format and information in digital certificate

Question 27

Certificate Authority

Answer 27

sings the public key of a user
- registration authority
- public key infrastructurepre

Question 28

pretty good certificates

Answer 28

self-generated and doesn’t use CA; offers digital signatures, asymmetric encryption, and symmetric encryption