CEH Deck 5 Flashcards
Continue with Glossary definitions
Active Directory (AD)
The directory service created by Microsoft for use on its networks.
It provides a variety of network services using Lightweight Directory Access Protocol (LDAP), Kerberos-based authentication, and single sign-on for user access to network-based resources.
active fingerprinting
Injecting traffic into the network to identify the operating system of a device.
ad hoc mode
A mode of operation in a wireless LAN in which clients send data directly to one another without utilizing a wireless access point (WAP), much like a point-to-point wired connection.
adware
Software that has advertisements embedded within it. It generally displays ads in the form of pop-ups.
on.
black-box testing
In penetration testing, a method of testing the security of a system or subnet without any previous knowledge of the device or network.
It is designed to simulate an attack by an outside intruder (usually from the Internet).
block cipher
A symmetric key cryptographic algorithm that transforms a block of information at a time using a cryptographic key.
For a block cipher algorithm, the length of the input block is the same as the length of the output block.
Blowfish
A symmetric, block-cipher data-encryption standard that uses a variable-length key that can range from 32 bits to 448 bits.
BlueBorne attack
An amalgamation of techniques and attacks against known, already existing Bluetooth vulnerabilities.
cloning
A cell phone attack in which the serial number from one cell phone is copied to another in an effort to copy the cell phone.
CNAME record
A Canonical Name record within DNS, used to provide an alias for a domain name.
cold site
A backup facility with the electrical and physical components of a computer facility, but with no computer equipment in place.
The site is ready to receive the necessary replacement computer equipment in the event the user has to move from his main computing location to an alternate site.
daemon
A background process found in Unix, Linux, Solaris, and other Unix-based operating systems.
demilitarized zone (DMZ)
A partially protected zone on a network, not exposed to the full fury of the Internet but not fully behind the firewall. This technique is typically used on parts of the network that must remain open to the public (such as a web server) but must also access trusted resources (such as a database). The point is to allow the inside firewall component, guarding the trusted resources, to make certain assumptions about the impossibility of outsiders forging DMZ addresses.
denial of service (DoS)
An attack with the goal of preventing authorized users from accessing services and preventing the normal operation of computers and networks.
encryption
Conversion of plain text to cipher text through the use of a cryptographic algorithm.
