Security Assessment and Testing

Question 1

¿Cuál es el objetivo del Vulenrability Assessment?

Answer 1

What I’m doing is looking for weaknesses

Question 2

¿Cuáles son los dos tipos de Vulnerability Assessment?

Answer 2

Physical/ Administrative/ Logical.

Identify Weaknesses

Question 3

Ejemplos de Vulenarbility Assessment Físicos.

Answer 3

Las puertas y/o ventanas cierra bien, políticas de escritorio limpio.

Question 4

Ejemplos de Vulnerability Assessment Administrativos.

Answer 4

Pen-test, social engineering

Question 5

¿Cuál es el objetivo de los penetration testings?

Answer 5

What looking is if we can exploit the weaknesses

Question 6

¿Cuál es el objetivo de los Red y Blue Teams?

Answer 6

Red Teams (attack)
Blue teams (defend)

Question 7

¿Cuáles son los tipos de pruebas para el pen-testing¡

Answer 7

• Black Box
• Gray Box
• White box

Question 8

¿Cual es el objetivo del Vulnerability Scanning?

Answer 8

Identifying

Question 9

¿Cuáles son los pasos de la metodología de ataque?

Answer 9

• Reconnaisance
• Footprinting Network
• Fingerprinting
• Vulnerability Assessment
• The “attack”

Question 10

¿En qué consiste la etapa de Reconnaisance?

Answer 10

Gather Internet Information

Question 11

¿En qué consiste la etapa de Footprinting Network?

Answer 11

Discover the essentials devices on your network, to map your network. NMAP, Ping sweep.

Question 12

¿En qué consiste la etapa de Fingerprinting?

Answer 12

Learn from the network. Identifying host information, port scanning.

Question 13

¿En qué consiste la etapa de Vulnerability Assessment?

Answer 13

Identifying weaknesses in system configurations. Discovering unpatched SW.

Question 14

¿En qué consiste la etapa de Attack?

Answer 14

Penetration, privilege escalations, root kit, cover tracks.

Question 15

¿Cuál es el propósito del pen-testing?

Answer 15

Overall purpose is to determine subjects ability to withstand an attack and determine effectiveness of current security measures.

Question 16

¿Cuáles son los requerimientos básicos para poder realizar un pen-test dentro de una empresa?

Answer 16

• Meet with senior management to determine the goal of the assessment.
• Document rules of engagement.
• Get sign off from senior management.

Question 17

Tester should not be the one suggestins remediation, true or false?

Answer 17

True, because this violates separation of duties.

Question 18

¿Cuáles son los tipos de pen test?

Answer 18

• Physical security
• Administrative Security
• Logical Security

Question 19

Ejemplos de pruebas físicas de pentest:

Answer 19

• Access into building or department.

- Wiring closets, locked file cabinets, offices, server room, sensitive areas.

Question 20

Ejemplos de pruebas Administrativas de pentest:

Answer 20

• Help desk gving out sensitive information, data on disposed disks.

Question 21

Ejemplos de pruebas lógicas de pentest:

Answer 21

• Attacks on systems, networks, communication.

Question 22

¿Cuáles son las características de los IDS?

Answer 22

• Passive in action
• Gathering information
• Identify Suspicious activity
• Log Activity
• Respond (alert people)

Question 23

¿Cuáles son los componentes de un IDS?

Answer 23

• Sensor - Data collector
• Analysis Engine, signature database
• User interface

Question 24

¿Qué hace un HIDS?

Answer 24

Examine the operation of a single system independently to determine of anything “off note” is going on.

Question 25

A NIDS cannot look encripted data, true or false?

Answer 25

True.

Question 26

¿Qué tipo de eventos registra un HIDS?

Answer 26

• Logins
• System Log files
• Application log files
• File activity
• Configuration files changes
• Use of certain programs
• Network traffic to/from PC

Question 27

¿Cuáles son las ventajas de un HIDS?

Answer 27

• Can be operating system and application specific.

- Thay can look at data after it’s been decrypted.

Question 28

¿Cuáles son las desventajas de un HIDS?

Answer 28

• Only protec one machine
• Use local system resources
• Scalability

Question 29

¿Qué es un NIDS?

Answer 29

Network based IDS, a concepto focused on watching an entire network and all associated. machines. Focuses specifically on netwokr traffic, in this case the sensor is sometimes called a traffic collector.

Question 30

¿Qué tipo de eventos registra o busca un NIDS?

Answer 30

• Source IP
• Destination IP
• Protocol
• Port numbers
• Data content
• DoS Attacks
• Port scans
• Malicious content

Question 31

¿Cuáles son las ventajas de un NIDS?

Answer 31

A NIDS can see things that are happening on multiples machines, it gots a bigger picture and may see distributed attacks that a HIDS would miss.

Question 32

¿Qué hace un Analysis Engine del tipo Pattern Machine?

Answer 32

SIgnature based, only as good as the last update. Does not protect against today attacks.

Question 33

¿Qué hace un Analysis Engine del tipo Profile Machine?

Answer 33

Anomaly based systems, look for changes in normal behavior.

Anomaly/Behavior/Heuristics

Question 34

¿En qué consiste un Evassion attack?

Answer 34

Many small attacks from different directions.

Question 35

¿En qué consiste un Insertion attack?

Answer 35

Adding meaningless information (without modifying the payload) to a known attack.

Question 36

¿Cuál es el objetivo de un honeypot?

Answer 36

Administrator hope that intruders will attack this system instead of their production systems.

Question 37

¿Qué significan los términos “enticement” “entrapment”?

Answer 37

Enticement (tentacion)

Entrapment (atrapamiento, tender una trampa)