Vulnerablities of misconfiguration, mobile devices, and zero-day Flashcards
1
Q
Open permissions is increasingly common w/-
A
Cloud storage
2
Q
Insecure protocols that aren’t encrypted include:
A
Telnet, FTP, SMTP, IMAP
3
Q
Use encrypted versions such as:
A
SSH, SFTP, IMAPS
4
Q
Mirai botnet
A
Takes advantage of default configurations
5
Q
Solutions to open ports:
A
Have it managed with a firewall, to manage traffic flows and allow or deny based on port # or app.
**Always test & audit
6
Q
Jailbreaking
A
allow users to bypass the restrictions set by a device, specifically Apple.
7
Q
Rooting
A
gaining admin access & bypassing restrictions, specifically Android.
8
Q
Sideloading
A
Installation of an app on a mobile device without using the app store.
9
Q
Zero-day exploit
A
cyberattack vector that takes advantage of an unknown or unaddressed security flaw in software, hardware.
