Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Mod 7 part 2 > Day 8 > Flashcards

Day 8 Flashcards

1
Q

null session

A

unauthenticated SMB sessions that allow for connection to the IPC$ share with null credentials (no username and no password)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

null sessions allow for the possible enumeration of:

A

SAM accounts
a list of machines on the system’s network
a list of shares

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

securing null session vulnerabilities

A

a combination of firewall, registry, and policy settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

null session registry key

A

HKLM\System\CurrentControlSet\Control\LSA and the RestrictAnonymous value controls null sessions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

RestrictAnonymous value 5* architecture

A

value security level

0 none, relies on default permissions
1 does not allow enumeration of share names
2 no access without explicit anonymous permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

RestrictAnonymous value 6* architecture

A

value security level

0 disabled, anonymous users are not restricted
1 does not allow enumeration of SAM accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

named pipes

A

API functions used for establishing application client-server IPC connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

named pipes of interest for null sessions

A

\pipe\samr: SAM RPC server
\pipe\srvsvc Server service RPC
\pipe\wkssvc workstation service RPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Windows firewall

A

prevents inbound network attacks by using a host-based system. It was introduced with WIndows XP SP2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Windows Internet Naming Service (WINS)

A

a name resolution service that resolves NetBIOS names to IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Domain Name System (DNS)

A

resolves fully qualified domain names (FQDNs) to IP addresses and IP addresses to FQDNs.
Microsoft requires DNS in its implementation of Active Directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

DNS Zones

A

represent a discrete portion of the namespace for a particular domain and provide a way to partition the domain namespace into manageable sections.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Primary zone

A

contains a read/write copy of the entire namespace

found in %systemroot%\system32\dns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

secondary zone

A

contains a read-only copy of the entire namespace.
when a secondary zone needs an update, it requests a zone transfer from a primary server
found in %systemroot%\system32\dns

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Active Directory-integrated zones

A

stored in Active directory itself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

DNS servers

A

there are primary servers, secondary servers, and caching-only servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Primary servers

A

host primary zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

secondary servers

A

host secondary zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

caching-only servers

A

contain only information for previously resolved queries

20
Q

Nslookup

A

a built in command-line tool used for DNS diagnostics, queries, and zone transfers

21
Q

example nslookup commands

A

ls -d starfleet.local zone transfer for starfleet.local zone
server 192.168.0.20 changes default DNS server to IP or name
exit exits the nslookup shell

22
Q

Start of authority (SOA)

A

SOA is the first resource record.
it is the best (most authoritative source) of information for this domain.

serial number revision number of zone
refresh time used by secondary servers to control how often the request zone information.
zone transfers initiated by secondary servers

23
Q

Service location (SRV) record

A

SRV record maps the service name to the server name offering the service.

24
Q

Name Server (NS) record

A

announces the authoritative name server for a zone who will answer queries for their zone

25
Q

Mail Exchanger (MX) record

A

specifies a mail exchange server for domain.

26
Q

Host (A) record

A

maps a host name to an IPv4 address (forward lookups)

27
Q

Host (AAAA) record

A

maps a host name to an IPv6 address (forward lookups)

28
Q

Alias (CNAME) record

A

sets an alias for a host name. often used to associate “www” with the web server name.

29
Q

Pointer (PTR) record

A

creates a pointer that maps an IP address to a host name for reverse lookups

30
Q

DNS name resolution

A

the client uses the resolver program to initiate DNS name resolution

31
Q

Securing DNS

A

secure dynamic updates to only allow updates from systems authorized to make them.

limit zone transfers to authoritative name servers and other authorized systems.

secure against DNS cache poisoning/pollution

32
Q

Microsoft Internet Information Services (IIS)

A

by default supports FTP on port 21, HTTP on port 80 and/or HTTPS on port 443

33
Q

IIS default web and ftp sites

A

C:\Inetpub\wwwroot or ftproot

34
Q

IUSR_ComputerName

A

This account permits users to connect anonymously to web sites hosted on the server

35
Q

IWAM_ComputerName

A

this account is used to run code in a separate memory space from the core web server process (for management)

36
Q

Local System

A

Service account for the following services:
IISADMIN IIS Admin service
W3SVC WWW publishing service used for http hosting
MSFTPSVC FTP publishing service used for FTP hosting

37
Q

WWW URL

A

protocol domain path to page
http://www.microsoft.com:8080/urlinfo/docs.htm
host port

38
Q

FTP URL example

A

Protocol host path to webpage
ftp://admin:abcd1234@ftp.microsoft.com/public/docs.htm
credentials domain

39
Q

web sites

A

web sites are commonly identified and hosted in the following ways: IP address, port number, host header

40
Q

IP address

A

configure each web site with a different IP address

41
Q

Port number

A

the server directs requests based on port number

42
Q

host header

A

multiple web sites may use the same IP address and port number, but the host header identifies each specific web site

43
Q

IIS Authentication methods

A

.

44
Q

anonymous access

A

requires no username or password.

uses the anonymous account IUSR_computername

45
Q

Basic authentication

A

requires a username and password which is transmitted in plaintext in an encoded format.

46
Q

Integrated Windows authentication

A

more secure than basic authentication.
uses same credentials as domain logon
cannot be used across firewalls or proxy servers

47
Q

digest authentication

A

also provides a more secure method than basic authentication.
it can be used across firewalls and proxy servers

Mod 7 part 2 (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions