Vulnerabilities and Security Risks

Question 1

What is contained in a cipher suite

Answer 1

Key exchange, authentication, encryption, integrity algorithms

Question 2

Encryption Algorithms that are antiquated

Answer 2

RC4, Triple-DES(Data Encryption Standard), ‘NULL’ (data is sent in clear text)

Question 3

Encryption algorithm to use

Answer 3

AES-128 or AES-256

Question 4

TCP

Answer 4

Transmission Control Protocol that establishes connection between end-points. Guarantees the delivery of packets.

Question 5

IP

Answer 5

Internet Protocol that is connectionless and provides routing of packets in a network.

Question 6

UDP

Answer 6

User Datagram Protocol - connectionless protocol that does not guarantee delivery of packets but it gives it its best shot.

Question 7

SYN

Answer 7

First part of a threeway handshake where a computer may reach out to a server to see if its available.

Question 8

SYN/ACK

Answer 8

Second part of a threeway handshake where the server responds to the requesting device saying its available.

Question 9

ACK

Answer 9

Final part of threeway handshake where the endpoint gives an acknowledgement (hence the ACK) to the server that it received back its message.