notesv4.pdf

Question 1

Anything wireless encryption before 802.11i is___?

Answer 1

WPA

Question 2

Which tools can provide banner grabbing?

Answer 2

Nmap, telnet, netcat (nc)

Question 3

Gait is an example of ___?

Answer 3

Something you do

Question 4

SAML is what 3 things?

Answer 4

identity+authentication+authorization

Question 5

openID is what 2 things?

Answer 5

connect identity+authentication

Question 6

Oauth is ___?

Answer 6

authorization

Question 7

Is FTP port 21 encrypted?

Answer 7

No, clear text

Question 8

Discretionary Access Control is ___ based?

Answer 8

Owner

Question 9

OCSP detects what?

Answer 9

bad certs

Question 10

Can CRL determine if a cert is “good”?

Answer 10

Yes, if its not in the revoked list it and is not expired it is good.

Question 11

DHE + ECDHE = ____?

Answer 11

ephemeral key

Question 12

Perfect forward secrecy keys are ____?

Answer 12

Always changing

Question 13

EAP-TLS

Answer 13

all devices have certs

Question 14

EAP-PEAP

Answer 14

server has certificate

Question 15

EAP-FAST

Answer 15

server no cert

Question 16

SLE = ?

Answer 16

ALE/ARO

Question 17

What backup type is fastest?

Answer 17

Full backup is fastest recover because it is one tape

Question 18

Encrypting data in transit:

SCP

Answer 18

secure copy

Question 19

Encrypting data in transit:

SFTP

Answer 19

SSH with ftp

Question 20

Encrypting data in transit:

FTPS

Answer 20

ftp w/ ssl-tls

Question 21

Encrypting data in transit:

HTTPS

Answer 21

web site

Question 22

Encrypting data in transit:

SSH

Answer 22

secure shell

Question 23

The following is an example of a:

aadoiuadlkfjh
open notepad.exe.
open xxxxx.exe.
return aadoiusadlkfhh

Answer 23

logic bomb

Question 24

non-credentialed scans you see what ___ sees?

Answer 24

hacker

Question 25

non-credentialed scan have many ___?

Answer 25

false positives

Question 26

credentialed scan can have more or less false positives than non-credential scans?

Answer 26

less false positives

Question 27

Is passive scanning intrusive?

Answer 27

no