Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Sec+ > Sec_Vista > Flashcards

Sec_Vista Flashcards

1
Q

BIA

A

business impact analysis interviewing to gather info about business units and their functions.
Id and Prioritize business function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

contingency plan

A

detail how all business function will be carries out during an outage or disaster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Occupant Emergency Plan (OEP)

A

OEP minimize injury or loss of life during an outage or disaster

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Define Privilege Escalation vs attack

A

Gain access to a file you should not have access to by changing permission of your valid account
Hacking is using another user’s credentials
Social Engineering is impersonating a user to get their credentials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a use for CSR?

A

Certificate Signing Request: first step to verify the authenticity of a certificate issued by a CA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Define OID

A

Object Identifiers: id X.509 certificates (dotted #s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What type of encryption is EIGamal

A

asymmetric public key encryption based on D-H.

Used for digital signatures, key exchange, & data encryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is HAVAL, IDEA, & Knapsack?

A

HAVAL: hashing algorithm (message digests)
IDEA: International data encrypt algo: block cipher used by PGP for secret key encryption
Knapsack: asymmetric encryption algo; not D-H based

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Would you format storage media? And what methods would destroy it?

A

No, format aka delete data does not remove data. Pulverize, degauss, purge, & wiping

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is degaussing and when to not use it?

A

Reduce or eliminate unwanted magnetic field on storage media. Does not work on CD or DVDs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How to describe DNS poisoning?

A

Practice of dispensing IP addresses & host names with the goal of traffic diversion.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are other DNS attacks?

A

Syn Flood: send DNS server sync messages with spoofed packets
DNS DoS: transmit malformed packets to DNS server to cause a crash

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How to log changes to a file?

A

Use a file integrity check to examine files and check for changes then log any changes that occurred

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Define HIDS/HIPS

A

Alert for a Single server or computer & stop the attack

i.e. shut port 80 when if traffic exceeds baseline norm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is a VPN?

A

A virtual private network is not a physical network. It allows secure communication between companies not located together or between private networks. It transports encrypted data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a VLAN?

A

Allows networks to be segmented logically without physically rewiring the network. Provides added security layer by isolating resources into subnets.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is denial of service?

A

Attacker floods a system with messages to prevent the system from replying to valid requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What model does PGP, PKI, and CA use?

A

PGP uses web of trust to validate key pairs

PKI & CA use hierarchy to sign key pairs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a RADIUS federation used for?

A

A group of RADIUS servers assisting with network roaming. The servers validate login credentials of a user belonging to another RADIUS server’s network.
i.e. tenants in a shopping area want all customer to access internet in their area

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Define EAP-FAST, EAP-TLS, EAP-TTLS

A

These are all authentication protocols
EAP manages key tranmissions
TLS - uses X.509 digital certificate to authenticate
TTLS - encapsulates TLS allowing for client authentication
FAST - creates TLS tunnel used in wireless & point-to-point network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What devices connect multiple LAN segments?

A

Bridge, switches, & routers
Bridge & switch (layer 2) use MAC to send packets to destination
Routers (layer 3-network) use IP address to route packets to destination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is ISA

A

Interconnection security agreement gives security requirements for interconnection between two organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Why use airgapping & sandboxing?

A

Air gapping: physically separate secure networks & equipment from insecure networks & equipment. Data can only be moved physically via disk or USB
Sanbox: test a system to security patches or issues i.e. legacy system

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Who is responsible for access in DAC & RBAC?

A

DAC: data owner
RBAC: security administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

what do phreakers attack?

A

VoIP or PBX equipment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What are 2 VPN protocols?

A

PPTP: create a secure WAN connection
L2TP: VPN, packets, encrypt data
Both use tunnels for security
PPP: establish dial-up network connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What replaced Infrared?

A

Infrared needs line-of-sight communication i.e. TV. Replaced by Bluetooth & Wi-fi

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is ANT?

A

Low-power (proprietary) tech used in wearable devices like fitness sensors. NFC: connects devices automatically when in range i.e. smartphone or mobile payments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

TPM vs. HSM

A

TPM chip implement hardware-based encryption

HSM stores key or digital certificates and can be replaced

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What type of attack redirects a user to a fake website?

A

Hyperlink spoofing aka web spoofing or URL spoofing
Gets browser to connect to a fake server to get access to confidential info: PIN, credit card, bank details
Uses hyperlinks instead of DNS addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What should you consider when choosing a mail gateway?

A

Spam Filter, DLP, encryption
Spam filters: trap undesirable mail
DLP: prevent unauthorized access, protect data
Encrypt: critical feature, scramble outgoing messages

32
Q

When creating a wireless network what protocol has maximum security and supports older wireless clients?

A

WPA: wi-fi protected access
WPA fixed WEP issues
WAP: wireless app protocol is the weakest (don’t use)
WEP: security standard for wireless networks and devices to encrypt data - not as secure as WPA

33
Q

WAP vs. WAP2

A

WPA uses TKIP (temporal key integrity protocol)
WPA2 uses CCM Mode Protocol (CCMP) for encryption with AES
Operate in two modes: personal & enterprise
Personal uses Preshared Key (PSK)
Enterprise uses EAP for authentication
more secure than WPA2-PSK & needs a digital certificate

34
Q

Which protocols should be used for implementing a secure wireless authentication method using a RADIUS server for authentication?

A

LEAP (lightweight extensible authentication protocol) to
PEAP (protected extensible authentication protocol)
Both offer to simplify secure authentication, but PEAP is more secure

35
Q

How do Trojan horses, worms, viruses, and spyware work?

A

Spyware: tracks cookies to collect & report on user’s activities
Virus (malware) relies on other apps to execute itself and infect a system
Worm: spreads itself through network connections
Trojan Horse: disguised as a useful utility but contains malicious code that can damage a network or give hackers a pathway into a network

36
Q

What is DER?

A

DER (distinguished encoding rules) certificate encoded by ASN.1 not Base64 ASCII
Its a parent format of PEM (used by webservers)
And does not support storage of private key or cert paths

37
Q

What are PFX, P12, P7B?

A

All are certificate types using Base64 ASCII encoding

PFX & P12 are ways to export private keys

38
Q

What is DIAMETER used for?

A

VoIP & wireless services

DIAMETER uses EAP and was meant to handle tech that RADIUS could not

39
Q

What is SAML?

A

Security Assertion Markup Language: an XML data format for exchanging authentication & authorization data between an identity provider and a service provider

40
Q

Is Kerberos more secure than RADIUS, TACACS, or LDAP and what is it for?

A

Yes, its a method of access, authentication, & authorization

TACACS is a CISCO implement of RADIUS, TACACS+ uses challenge response

41
Q

What are some security solutions for a mobile device?

A

White-listing: permit certain apps to be installed & run on the device
Transitive Trust: federated user identities allow users to access multiple apps, devices, & resources
Remote Wiping & Screen Lock

42
Q

When using social media at work what is a concern?

A

Data Exfiltration

43
Q

How does a weak security configuration happen?

A

Neglecting to implement a specific security device or not configuring security settings properly

44
Q

What cipher & hash algorithm would be good to use on an organization’s network?

A

RC4 - encrypts streaming video based on a stream cipher for streaming video providing 56-bit encryption
A type of symmetric algo

45
Q

What is one-way hashing and which algorithm uses it?

A

MD5 inserts a string of variable length into a hashing algorithm and produces a hash value of a fixed length
then it attaches to the end of the message and if the recomputed hash value is the same then the message wasn’t altered during transmission

Used to verify file integrity

46
Q

What are SHA variants?

A

Secure Hash Algorithm (SHA) are MD2, MD4, MD5, HAVAL
MD5 is a one-way hashing algorithm

Mostly replaced by SHA-2 aka SHA-256

47
Q

What are the four modes of symmetric ciphers?

A

ECB (Electronic Cook Book) implements the cipher in its original form (each block independent from the rest)
CBC (Cipher Block Chaining) uses output & XOR to increase diffusion
CTM or CTR (Counter Mode) converts block into a stream cipher
GTM (Galois Counter Mode) uses hash function to complicate encrypt

48
Q

What is XSRF?

A

Cross-site request forgery aka session riding involves unauthorized commands from a trusted user to a or web site (usually social networking involved)
i.e. 2 friends chatting on instant message app and one clicks on a link that ends up sending bank info

49
Q

What type of attack is a buffer overflow attack? What does a macro virus do?

A

Buffer is a DoS occurring when more data goes into the buffer than it can handle
Macro Virus commands an app to perform actions using programming instructions

50
Q

What control type is a security policy that includes system testing and security awareness training?

A

Preventative Administrative Controls
Admin Control dictate how security policies are implemented to fulfill a company’s security goals
Includes policies & procedures, training, supervisory structure
Detective is monitoring & supervising

51
Q

What are detective & preventative technical controls

A

Detective include audit logs & IDS

Preventative: include ACL, routers, A-V, smart cards,…

52
Q

What is throughput?

A

The rate at which something is processed

Processor speed, memory, & bandwidth allocated affect a workstation’s throughput

53
Q

What is an advantage & disadvantage to using NIDS?

A

Low maintenance in analyzing network traffic
Monitors a packets sent over a network segment but cannot analyze encrypted information
i.e. packets going through a VPN

54
Q

What are the advantages & disadvantages of HIDS?

A

HIDS are difficult to configure & monitor
Uses OS audit logs & system logs
Not affected by a switched network

55
Q

Explain Kerberos using AS, TGT, TGS, & CS

A

AS (Authentication Service) authenticates users with TGT
User, who wants access to a network resources, gives TGT to TGS
TGS turns TGT into a session key
The CS (client-server) takes the session key letting the client & server authenticate with one another
AS, TGS, CS are the main protocols to authenticate & authorize use of resources

56
Q

Define how a firewall, proxy server & NAT server work on a network?

A

Firewall: allows & denies network access through communication ports
NAT server: presents IP to the internet on behalf of computers on a private network
Proxy server: enables hosts to access internet resources
Increases performance by caching web pages and filtering content

57
Q

What does RSA encryption algorithms do?

A

RSA is an asymmetric cryptography that can prevent MiTM by authenticating with public & private keys
Does not use logarithms its uses prime numbers and is the de factor standard for digital signatures

58
Q

Least privilege can be called what?

A

File system security only allow what is necessary to do a job

59
Q

Define recertification

A

Examine a user’s permissions to determine if they still need access to what was previously granted

60
Q

What is Snort & Wireshark?

A

Snort is a network intrusion detection system (NIDS)
Wireshark is a network protocol analyzer: monitors data traffic & analyze captured signals as it moves along LAN, PAN, & wireless networks

61
Q

What does Message Authentication Code (MAC) ensure?

A

Message Integrity
Protects against message replay, but does not ensure availability of data or confidentiality
HMAC - Hash-MAC is a symmetric key appended to message to the authorized recipient but lack confidentiality too
CBC-MAC symmetric key in CBC cipher mode encrypts the message

62
Q

What should you implement if you need to ensure wireless clients can only communicate with wireless access points and not other wireless clients?

A

Isolation Mode

FYI: SSID is a wireless network’s name

63
Q

What are the steps in a change control process?

A 
Make a Request
Analyze the Request (cost, security?,...)
Record the Request
Submit the Request for Approval
Make the Change
Send to management for review
64
Q

Define spoofing

A

Spoofing aka masquerading is when a person or program pretends to be another person or program
the source IP addr is spoofed/modified to imitate an IP address from an authorized source
i.e. MiTM or session hijacking or email

65
Q

Pharming vs. spoofing

A

Both redirect to a fake site to steal info but pharming often poisons the DNS cache to ensure redirect even if correct URL is entered

66
Q

What does a packet-filtering firewall do?

A

Looks at a data packet to obtain source & destination addresses along with the protocol & port used
Compares to rules based on ACL
An application-level firewall examines the entire packet

67
Q

Define stateful firewal

A

Examines all packet layers to compile information for the state table

68
Q

What is a KDC?

A

Key Distribution Center used in Kerberos for storing, distributing, & maintaining cryptographic session keys
Client requests resource access through the KDC which Stores secret keys used to generate session keys so it does not use public keys

69
Q

What are 4 SIEM features?

A

Automated Alerting & Triggers for when a predetermined event occurs
i.e. NIPS shut down port 80 during unusually high web traffic
Correlation: find patterns between events among different devices
Logs/WORM long-term storage & security so data can’t be modified
Aggregation: collects events that are flagged by network hardware & SW applications

70
Q

Which algorithm does the US gov’t use for digital signatures that NIST & NSA developed?

A

Digital Signature Algorithm (DSA)

71
Q

Name three secret key encryption standards used to encrypt files.

A

AES, DES, IDEA

SHA-1 is a hashing algo to determine if the file was changed

72
Q

Define Protocol Analyzer

A

Provides info regarding traffic flow & statistical information on your network
Also called network analyzer or packer sniffer

73
Q

What are transport & tunnel modes used for?

A

Provided by IPSec to transmit IP packets securely
Tunnel good for VPN & entire IP packet
Transport good for ESP host-to-host & upper layer
Method to send encrypted data over the internet

74
Q

Difference between what backdoor & escalation of privilege use to gain access

A

Backdoor attacker inserts code to enter an app and bypass security
Escalation of privilege uses design flaws to gain unauthorized access
Vertical: obtains higher privileges to run unauthorized code
Horizontal: same level of permissions but using a different user account

75
Q

Define database views

A

A content-dependent access control based on sensitivity of info & user privilege
Partitioning ensures database security making it difficult to collect & combine confidential information to deduce facts

76
Q

Define stored procedures

A

SQL statements executed as a group & similar to scripts. Protects from SQL injection attacks

Sec+ (16 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions