Security+

30 flashcards · Computer Science · by Chapin Sheehan

1. Security Policies: Acceptable use policy (AUP) - Outlines what a person can or can't with company assets. Data Sensitivity and Classification policies - Defines the importance and nature of different data types. Access Control Policy - Defines who can use data and how they can get a hold of it. Password Policy - Defines password reuse, recovery, retention and number of allowed bad logins. Care and Use of Equipment - Not necessarily separate from AUP, pertains to maintenance and employee respons…

2. Risk calculations: Exposure factor - Percentage of an asset that is lost in an incident Single loss expectancy (SLE) = Asset Value x Exposure Factor Annualized Rate of occurrence (ARO) - Chance of an incident happening in a year. Annualized loss expectancy (ALE) - How much an incident would cost. Mean time to repair (MTTR) - The time from a failure to a fix. Mean time between failures (MTBF) - The time from one failure to another.

3. In a switch VLAN provides layer 2 separation of networks. Spanning Tree protocol or STP can be used on a switch to prevent loop floods.

   Section 6: LAN Review.

4. When a computer sends out a signal, all machines that hear it on the same network are part of the Broadcast domain Wide area networks (WAN) contain 2 or more LANs and 1 or more routers. TCP/IP is the protocol used to run the internet and intranets.

   Section 6: Network topologies review.

5. Extensible authentication control (EAP) - Authentication framework designed to run inside other protocols.

   S6: Network Access controls

6. A stateless firewall will always block traffic based on a set of rules stored in a access control list (ACL). A Stateful firewall looks at network activity and will block traffic dynamically. An application based firewall is designed to be used on a web server to protect it from attacks.

   S6: The Network Firewall

7. Forward proxy server hides the client while the reverse proxy server hides the servers.

   S6: Proxy servers

8. VPN stands for virtualized private networks. A VPN tunnel is created when an external endpoint is assigned a LAN IP. A site-to-site VPN occurs when 2 separate networks place a VPN tunnel between them. A split tunnel VPN will ignore the tunnel for traffic that doesn't need it. A VPN is deployed by using a protocol to set up the tunnel and and then using another protocol to handle authentication and encryption. Types of VPN protocols: point to point tunneling protocol or PPTP - Very old, uses por…

   S6: VPNs

9. IPsec - A group of protocols that allows any 2 hosts to make a secure connection. Works at the IP layer. Authentication header - Proves the integrity of a data package Encapsulating security payload (ESP) - Encrypts data before adding an Authentication header. IPsec tunnel mode - Attaching a new IP address to your ESP for smooth communication. ISAKMP - Negotiates between 2 hosts to achieve secure connection using IPsec.

   S6: IPsec

10. WEP - Wired equivalent privacy. WPA - Wireless Protected Access WPA - Wireless protected access SSID is the name of the network where as a BSSID is the name of an an access point on that network.

11. Replay attack Also known as SSL Stripping - using captured cookies to authenticate. A Rouge access point is an SSID that has been set up accidentally where as an evil twin was set up maliciously. DeAuthentication attack - Sending a de-authentication command to machines on a wifi network and putting them on an Evil twin.

12. IaaS - Infrastructure as a service AWS is a great example. PaaS - Platform as a service See Heroku as an example. SaaS - Software as a service Think Splunk or O365 VDE is accessing a desktop remotely where as VDI is accessing a a virtualized cloud environment.

13. Static host - A single purpose device on network aware (Routers, printers etc..) Industrial control system (ICS) - A type of static host that controls an industrial component like HVAC. Supervisory Control and Data Acquisition (SCADA) - ICS devices that have a wide reach via networks. Static hosts can be protected through network segmentation and updating Firmware.

    S7: static hosts.

14. NFC aka Near field communication - Android devices can use physical or near physical data transfer.

    S7: Mobile

15. WIDS - Wireless intrusion detection system, add more later WIPS - Wireless intrusion prevention system, add more later.

16. Omni is the only antenna type that has 360⁰ spherical coverage making it effective for a large area such as an arena. Dipole is the most common antenna but does not have full 360⁰ spherical coverage. Dipole has a 360⁰ flat (donut-shaped) coverage. Directional has a pattern that is effective for pointing in a precise area. Patch is a 180⁰ low-profile antenna that mounts on a flat surface.

17. A container runs a single program and all its dependencies. A BLANK can access other BLANKS, and the BLANK uses network resources. Although a BLANK is virtual in nature, it does not need to run on a virtual machine.

    Replace BLANK with the missing word

18. Preventative physical control attempt to prevent incidents before they occur. Like a firewall because it can prevent malicious traffic from entering a network. Deterrent physical controls (such as lighting, signs, and security guards) are visible in order to discourage actors from trying to gain access. Detective physical controls include alarms and log files. Compensating physical controls are temporary fixes when another control is weakened (such as an extra guard to watch a broken fence).

19. What fire extinguisher should be used in server room? FM-200.

20. The OSI network model is made up of 7 layers: Physical Data Link Network Transport Session presentation Application The TCP/IP model is made up of 4 layers: Network interface Internet Transport Application

21. TCP - Protocol based on making connections and sending large amounts of packets. UDP - Protocol that is connection-less. No confirmation when a packet is received. Used when you are sure the other host is listening. ICMP - Used for maintenance like pings and and ARP.

22. What port number does SMTP use? Port 25. Port 23 is Telnet 143 is IMAP 110 is POP port 69 is TFTP ports 161/162 SNMP

    What are these protocols?

23. Agile is based on small and rapid sprints. Due to the nature of the sprint, the scope can be modified as the daily process is considered, and the sprint deliverable testing is validated. Waterfall is a full-scope, big-picture framework with large deliverables and highly defined scope and timelines.

24. Staging for deployment and testing is usually done in a sandbox environment. Code review and planning can be performed in the development environment. Once code is ready to be run though its paces, a sandbox allows for different configurations Throughputs and bursts test without effecting working or development environments. Continuous integration is done in the development environment and moved through the sandbox for deployment.

25. Cross site scripting or XSS is when an attacker trys to get one website to run an evil script from another site. XML injection - Manipulating data to compromise the logic of an XML application/service

    Website attacks

26. Code injection - Add extra code to an App to make it do something new. Command injection - Uses an application to gain access to the OS. LDAP injection - Editing a directory using LDAP commands in an application. Buffer overflow - Entering an excess of information to break an application. Integer Overflow - Inputting a number of bits that exceeds the applications scope.

    Application attacks

27. LDAP stands for Lightweight Directory Access Protocol And is based on X.500 X.500 is

28. The most important things to look at when implementing cryptographic solutions are: The service provider - the party responsible for the method of key generation, encryption and storage. The Module - The means which the encryption is deployed. This should take into account available resources at the place of encryption.

29. Security through obscurity - the false concept that something that is poorly secured is safe because no one knows about it.

30. OAuth 2.0 grants an app limited access to a users account 3rd party account like a google account. OpenID connect provides the necessary authentication for this service and stores it in a secure token. Shibboleth is an alternative that is written in SAML and authenticates on web pages as opposed to HTML elements. It is SSO and does not have 3rd party integration.