IT Security

55 flashcards · Computer Science · by SShindow

What does DoS stand for?
Denial of Service
What is the name for the ability to prove that a given message was sent and by whom to a third party not involved in communication?
Nonrepudiation
What does AES stand for?
Advanced Encryption Standard
What is the size of the password domain if only numbers are allowed and the size of the passwort is at least 1 and at most 5 digits?
10 + 100 + 1000 + 10000 + 100000 = 111110
In which mode and protocol is IPSec used when facilitating a VPN?
Tunneling and ESP (Encapsulated Security Payload)
What is the name for the feature of an OS to hide complicated details from users and applications which otherwise had to be dealt with?
Extended Machine
How is a maliciously injected script which is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc calles which the victim retrieves from server when it requests information?
Stored Cross-site scripting
What is an alternative name for DNS-Spoofing?
Pharming
Name a security mechanism on the Data Link Layer.
CSMA/CD IEEE 802.x
The three possible factors for authentication are
What you have, What you are, What you know
On which layer does SSH work?
Application Layer
What is the first message in an SSL/TLS handshake?
ClientHello
How is the translation of a private to a public IP address called?
NAT (Network Address Translation)
Where would you typically place a server in a company network which must be reachable from the public Internet?
DMZ (Demilitarized Zone)
Which protocol is used in OpenVPN to encrypt the data between two endpoints?
SSL/TLS
Which virtual interface is used in OpenVPN for a site-to-site connection?
TUN Interface
Which protocol is used for the proxy in ssh in dynamic port forwarding?
SOCKS
How is an exploit called which is not yet publicly known?
Zero-day Exploit
Which of the CIA principles can usually not be achieved by cryptographic means?
Availability
What is the result when decrypting the ciphertext 0000 1111 0101 with one time pad 0110 0101 0011?
0110 1010 0110
The TLS record protocol may contain records of four different protocols. The ClientHello message is part of which ot these protocols?
TLS Handshake Protocol.
Define the term Confidentiality in one sentence.
Protection against unauthorized access
What does CBC stand for?
Cipher Block Chaining
“Protection against unauthorized modification” is referred to as
Integrity
How is a certificate called when Subject Name and Issuer Name are identical?
Extended Validation Certificate
Which key(s) from whom are included in a Certificate Signing Request?
Subject’s Public Key
How are Firewall components called which work above the Transport Layer?
Application Layer Gateway
“Protection against unauthorized access” is referred to as
Confidentiality
“Unambiguous identification of the sender of information or a communication peer” is referred to as
Authentication
ECB stands for:
Electronic Code Book
In an X.509 Certificate, how do I recognize a Root Certificate?
A Root Certificate is signed by that own certificate and built into the operating system, browser
What is a Certificate? Which components does it contain?
A Certificate is used to prove a person’s identity and their public key, signed by the Certificate Authority
What is a Certificate Authority and what does it do exactly?
Certificate Authority takes a request with user information and their public key to check if it is valid, then give them a certificate signed by that authority and hashed with their private key
What is OCSP, how does it work and why is it needed?
OCSP - Online Certificate Status Protocol is another step to check if the certificate is valid or not, providing immediate responses about whether a certificate is valid or revoked EXTRA: CRLs vs OCSP: CRLs lists all the revoked certi by CAs, OCSP provides real-time response about the status of the specific certi
Name two advantages of using Certificates.
Authentication: Certificates verify the identity of individuals or entities, ensuring trust and secure communication. Encryption: Certificates enable data encryption, protecting sensitive information from unauthorized access during transmission.
What is Certificate Revocation and when do I need it? How can a user find out if a Certificate was revoked?
Is the process of invalidating the previously issued certificate that is no longer valid/trustworthy To find out if a Certificate was revoked, users can check Certificate Revocation List (CRLs) or Online Certificate Status Protocol (OCSP)
What is a Certificate Signing Request? Which keys of the subject does the Signing Request contain?
a block of encoded texts forwarded to a Certificate Authority (CA) when users apply for a certificate Public key Signing Request contains the public key and subject information of an entity
What are threats to anonymity on the Network Layer?
Threats to anonymity on the network layer include traffic analysis, IP address tracking, minimizing memory data.
What are the components of a firewall:
Packet Filters, Application Filters, Packet Level Gateway, Application Level Gateway, Application Firewall
What is SSH Port Forwarding?
SSH Port Forwarding: create a secure connection between 2 machines, which machines in the local connection can connect to and be forwarded to the destination port
What is a Pharming Attack?
Manipulating the Domain Name Service protocol. By poisoning the machine, it will lead the user to a fake site with a real domain name.
What is a Buffer Overflow?
Occurs when a program or process attempts to write more data to a fixed-length block of memory or buffer
What is the difference between Authentication and Nonrepudiation?
Authentication: the ability to prove that they are communicating with the right people Nonrepudiation: th ability to prove to the third party that 2 people communicating with each other and they know who each other are
What is CSRF and how does it work?
Cross-Site Request Forgery is a type of security vulnerability that force users to execute unwanted actions (Change email/password)
Describe mitigation techniques against buffer overflows.
ASLR (address space layout randomization): randomizes the location of memory sections, but offsets within sections do not change Static analysis: Analyze program without running it to detect vulnerable patterns Dynamic analysis: Insert runtime checks to detect memory safety violations. Safer languages
Define the term Exploit.
A technique or a piece of malicious code aims at a system/sofware/network weakness or vulnerability to gain unauthorized access.
Define the term Command Injection.
is a cyber attack that involves executing arbitrary commands on a host OS
An Active Attack:
Receive some activity from an attacker Leave traces that can be detected
Passive attacks
accomplished without the attacker’s active participation are hard to discover
What elements does a certificate contain?
Identity of the Subject Identity of the Issuer Issuer’s Digital Signature
http://192.168.1.50/dvwa/vulnerabilities/xss_r/?name=<script>alert("Alarm!")</script># results in the Java-Script code being executed, it is an example of:
Reflected Cross-site Scripting
What is hardening?
Process of securing system by reducing its surface of vulnerability
Define Firewall:
a part of a computer system or network which is designed to block unauthorized access while permitting outward communication.
What is SSH?
Secure Shell: Replacement for other remote shells that are insecure and widely used since the beginning of the internet
What is SQL Injection
Injection from SQL query via the input of data to the application to read sensitive data, execute administrative commands on database