Chapter 27: Security

16 flashcards · Other · by Ian Christensen

  1. What are the three levels of security?

    Host-based Network-based Physical-based

  2. What is spoofing?

    (1) Faking the sending address of a transmission in order to gain illegal entry into a secure system. See email spoofing and how to spoof your techie friend. (2) Creating fake responses or signals in order to keep a session active and prevent timeouts. For example, mainframes continuously poll their terminals. If the lines to remote terminals are temporarily suspended because there is no traffic, a local device spoofs the host with "I'm still here" responses.

  3. What is a Denial-of-Service Attack?

    An assault on a network that floods it with so many requests that regular traffic is either slowed or completely interrupted. Unlike a virus or worm, which can cause severe damage to databases, a denial of service attack interrupts network service for some period.

  4. What is a Distributed Denial-of-Service Attack?

    A distributed denial-of-service (DDOS) attack can employ hundreds or even thousands of computers that have been previously infected. The computers act as a network of "zombies" working together to send out bogus messages, thereby creating huge volumes of phony traffic. In 2016, the Dyn DNS system was hammered by a DDOS attack that caused sporadic slowdowns of major sites such as Twitter, Netflix and The New York Times. The zombie traffic reached more than 100 gigabytes per second of bogus messa…

  5. What is a Zero-Day Exploit?

    A malware attack that takes place after it is discovered and before the vendor of the vulnerable software deploys a patch, typically to the OS or Web browser. When a vulnerability is discovered by a user, it may wind up on one or two blogs, and the news travels fast. If only the software vendor becomes aware of it, the tendency is to keep the problem under wraps until a patch has been created to fix it. However, in many cases, vendors announce the flaw because users can then steer clear of the…

  6. What are the different types of malware?

    Virus Worm Trojan Horse RootKit Botnet Ransomware Keyloggers Spyware Pop-up

  7. What are the seven best steps for anti-malware?

    Identify and research malware symptoms Quarantine the infected systems Disable System Restore (Windows) Remediate the infected systems (Update the anti-malware software and run a scan or removal technique) Schedule scans and run updates Enable system restore and create a restore point Educate the end user

  8. What is anti-virus software?

    Anti-virus is a deprecated term. Anti-malware software is more broad in scope.

  9. What is Recovery Console?

  10. What are some good steps for stopping malware

    Anti-malware software "Recovery Console" Backup and Restore End-user Education Software Firewall Secure DNS Non-ISP DNS Servers Encrypt DNS Requests

  11. What is an EULA?

    End User License Agreement is the legal agreement between the manufacturer and purchaser of software that stipulates the terms of usage. Pronounced "you-lah," the EULA is displayed with the installation dialog and requires the user to "Accept" or "Agree" to continue. Prior to downloadable software, the EULA was printed on or within the packaging and stated that removing the shrinkwrap from the box or discs was automatic acceptance. The EULA generally disclaims all liabilities for loss of data i…

  12. What is DRM?

    Digital Rights Management is a system for authorizing the viewing or playback of copyrighted material on a user's computer or digital music player. DRM has centered around copyrighted music, with Apple's FairPlay and Microsoft's Windows Digital Rights Manager being the two predominant DRM systems. As broadband Internet and more highly compressed video formats take hold, the focus of DRM broadens to video content.

  13. How many CPUs can you have under a single Windows license?

    Up to two CPUs???

  14. What are the two types of Enterprise licenses?

    Personal License

  15. What steps should be followed when dealing with incidents?

    Know your responsibility Identify the problem (Report through appropriate channels, data / device preservation, use of documentation, and document changes) Keep chain of custody (Tracking evidence, document process)

  16. What are some documents I should be familiar with for the A+?

    Network Topology Diagrams Logical Diagrams