Network and Server Vulnerability

Question 1

CVSS

Answer 1

Common Vulnerability Scoring System

Question 2

ISMS

Answer 2

Information Security Management System

Question 3

Network Profiling

Answer 3

Network profiling is the process of capturing, understanding, and characterising the typical behaviour of a network over time. It involves establishing a baseline, which is a statistical representation of the network’s standard operation at any given point in time. Once this baseline is established, any significant deviation from it might be indicative of potential issues, anomalies, or security threats.

Question 4

WAN

Answer 4

Wide Area Network

Question 5

LAN

Answer 5

Local Area Network

Question 6

Network Profile Elements

Answer 6

• Session duration (The time between the establishment of a data flow and its termination)
• Total Throughput (Amount of data passing from a given source to a given destination in a given period of time)
• Ports Used (A list of TCP or UDP processes that are available to accept data)
• Critical Asset Address Space (The IP addresses or the logical location of essential systems or dat)

Question 7

TCP

Answer 7

Transmission Control Protocol

Question 8

UDP

Answer 8

User Datagram Protocol

Question 9

Server Profiling

Answer 9

Server profiling is used to establish the accepted operating state of servers. A server profile is a security baseline for a given server. It establishes the network, user, and application parameters that are accepted for a specific server.

Question 10

Server profile Elements

Answer 10

• Listening ports (The TCP and UDP daemons and ports that are allowed to be open on the server)
• Logged-in users and accounts (The parameters defining user access and behaviour)
• Service accounts (The type of services an application is allowed to run)
• Software environment (The tasks, processes and applications that are permitted to run on the server)

Question 11

NBA

Answer 11

Network Behaviour Analysis
the analysis of this diverse, unstructured data using Big Data analytics techniques to detect network attacks