IT Security Quiz

33 flashcards · Other · by tringuyenminh2801

  1. Define the term "IT Security"

    Protection of information and information systems against unauthorized access and modification and availability of information system services for legitimate users, including measures to thwart, discover or log threats. Protection against unauthorized access must be ensured during storage, processing and in transmit

  2. What are the aims of IT Security. Describe each aim briefly.

    Confidentiality: Protection against unauthorized access Integrity: Protection against unauthorized modification Availability: Resources and services are available for legitimate users Authentication: Unambiguous identification of the sender of information or a communication peer Nonrepudiation: Ability to prove that a given message was sent and by whom to a third party not involved in communication Authorization: Access to resource is limited to certain group of authenticated users.

  3. What is a Certificate? Which components does it contain?

    A certificate is used to prove a person’s identity and their public key, signed by a Certificate Authority

  4. What is a Certificate Authority and what does it do exactly?

    A Certificate Authority takes requests from users, including users’ information and public key to check if it is valid and gives them a certificate signed by that authority and hashed with their private key.

  5. What is Certificate Revocation and when do I need it? How can a user find out if a Certificate was revoked?

  6. What is OCSP, how does it work and why is it needed?

    Online Certificate Status Protocol is another step to check if the certificate is still valid or not

  7. What is a Certificate Signing Request? Which keys of the subject does the Signing Request contain?

    A block of encoded texts forwarded to a Certificate Authority (CA) when users apply for a certificate Public key (missing part 2)

  8. In which mode and protocol is IPSec used when facilitating a VPN?

    Tunnel mode and ESP (Encapsolated Security Payload)

  9. What does DoS stands for?

    Denial of Service

  10. What is the name for the ability to prove that a given message was sent and by whom to a third party not involved in communication?

    Nonrepudiation

  11. Which of the CIA-principles can usually not be achieved by cryptograhpic means?

    Integrity

  12. What does AES stand for?

    Advanced Encryption Standard

  13. What are three possible factors for authentication?

    What you know, what you have and what you are

  14. What is the name for the feature of an OS to hide complicated details from users and applications which otherwise had to be dealt with?

    Extended machine

  15. How is a maliciously injected script which is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc,... called which the victim retrieves from server when it requests information?

    Cross-site Scripting

  16. What is the alternative name of DNS-Spoofing?

    Pharming

  17. Name a security mechanism of the Data Link Layer?

    Carrier-sense Multiple Access with Collision Detection IEEE 802.x

  18. On which layer does SSH work?

    Application Layer

  19. How is the translation of a private to public IP address called?

    Network Address Translation (NAT)

  20. What is tunnel?

    A method of bypassing the firewall by going through unblocking traffic and tunneling out the system

  21. Which protocol is used in OpenVPN to encrypt the data between two endpoints?

    SSL/TLS

  22. How are Firewall components called which work above the Transport Layer?

    Application Gateway Layer

  23. Where would you typically place a server in a company network which must be reachable from the public Internet?

    Demilitarized zone

  24. What do CBC, CFM, OFM stand for?

    Cipher Block Chaining Cipher Feedback Mode Output Feedback Mode

  25. What is Buffer Overflow?

    Occurs when a program or process attempts to write more data to a fixed-length block of memory, or buffer, than the buffer is allocated to hold.

  26. How is an exploit called which is not yet publicly known?

    Zero-day exploit

  27. Which protocol is used for the proxy in SSH in dynamic port forwarding?

    SOCKS

  28. Which virtual interface is used in OpenVPN for a site-to-site connection?

    TUN interface

  29. Describe inherent weaknesses and vulnerabilities in the concept “Firewall”.

    Mobile devices that move in and out of the Intranet can not be protected by Firewall all times. The Firewall is still vulnerable to tunneling and can not filter encrypted information.

  30. Explain what Network Address Translation is and how it works.

    In a private network, each machine (A, B,..) is assigned a private IP address, to gain access to the internet, NAT’s job is to route machines with private IP addresses A and B through a machine with private address C as the interface to a public address N. When communicating with the internet, the IP address of the machine will appear as the public address N, when D or E responds, it is then decided which machines requested to return the response.

  31. Definition of Firewall?

    A form of protection / managing traffic from between Intranet and Internet

  32. Definition of Application Level Gateway?

    A component of Firewall, which is used for filtering and controlling the traffic on the application layer.

  33. Definition of Packet Filter?

    Filter packets based on a set of rules. The rules are accounted for from top to bottom and which rule the packet fall under first, that action is executed, if not, a default action is taken