Module 9: Infrastructure Security Flashcards
What are Mitigation Principles?
Methods used to reduce vulnerability and prevent security breaches.
What is Gap Analysis?
Evaluating an organization’s security posture against desired industry standards.
What is Segmentation?
The process of dividing a network into multiple subnets.
What is Isolation?
Keeping instances of attack surfaces separate so it can only affect itself.
What is Least Privilege?
Granting the minimum level of access needed to perform tasks.
What is Configuration Enforcement?(Related to Security Measures)
Applying security measures to reduce vulnerabilities.
What is Decommissioning?
Remove a service from a live production environment.
What is the Removal of unnecessary software?(Related to Attack Vectors)
Deleting non-essential software to eliminate an attack vector.
What are the Selection of Effective Controls? (Related to Countermeasures)
The process of choosing countermeasures to reduce an asset’s risk to exploits.
What is Device Placement?
Physically locating a device in a secure location.
What are the benefits of using standard networking devices with hardware designed for security?
It creates a layered security approach and makes it harder for attackers to access that network.
What is Hardening Targets?
Configuring and securing a device to prevent attacks.
What does OSI stand for?
Open Systems Interconnection Model
What does PDU stand for?
Protocol Data Units.
What is a Switch?
Connects multiple devices to a Local Area Network.
What layer does a Switch operate at?
The Data Link Layer
The second layer
How do Switches manage MAC Addresses?
By dynamically creating and maintaining the MAC Address table.
What is a Hub?
An early network device that connected multiple devices within a LAN. It operated at the physical layer (Layer 1)
What is a MAC Flooding Attack?
When a Threat Actor floods a Switch with spoofed Ethernet packets
What is Port Security?
Limiting the amount of MAC addresses that can be learned on a Network Switch Port.
What is a Router?
Forwards data packets across networks to their destinations.
What layer does a Router operate at?
A Router operates at the Network Layer (Layer 3 in the OSI Model).
What is a Server?
Software or Hardware that distributes resources and services upon request.
What is a Load Balancer?
A device that helps evenly distribute work across a network.
