Flashcards in Chapter 11: It's a network Deck (38):
What are 4 types of security threats?
What is a Hardware Threat?
physical damage to servers, routers, switches, cabling plant, and workstations
What is a Environmental Threat?
Temperature extremes (too hot or too cold) or humidity extremes (too wet or too dry)
What is a Electrical threats Threat?
Voltage spikes, insufficient supply voltage (brownouts), unconditioned power (noise), and total power loss
What is a Maintenance Threat?
Poor handling of key electrical components (electrostatic discharge), lack of critical spare parts, poor cabling, and poor labeling
What are Network Security Factors?
What are 3 types of attacks?
What are 3 stages of anatomy of a worm attack
The enabling vulnerability
What are 3 types of malicious code attacks
Denial of service
What is a Reconnaissance attacks
The unauthorized discovery and mapping of systems, services, or vulnerabilities
What is an Access attacks
The unauthorized manipulation of data, system access, or user privileges
What is an Denial of service
The disabling or corruption of networks, systems, or services
What are the 4 steps to mitigate a worm attack (must be in correct order)
What is Containment in a worm attack
Contain the spread of the worm within the network. Compartmentalize uninfected parts of the network.
What is Inoculation in a worm attack
Start patching all systems and, if possible, scanning for vulnerable systems.
What is Quarantine in a worm attack
Track down each infected machine inside the network. Disconnect, remove, or block infected machines from the network.
What is Treatment in a worm attack
Clean and patch each infected system. Some worms may require complete core system reinstallations to clean the system.
What is the most effective way to mitigate a worm attack?
download security updates from the operating system vendor
What is AAA stand for?
Authentication, Authorization, and Accounting
What are the 2 most popular option for external authentication?
RADIUS and TACACS+
What does RADIUS do?
Is an open standard with low use of CPU resources and memory. It is used by a range of network devices, such as switches, routers, and wireless devices.
What does TACACS+ do?
Is a security mechanism that enables modular authentication, authorization, and accounting services. It uses a TACACS+ daemon running on a security server.
What are 4 firewall techniques?
Stateful packet inspection (SPI)
What are 4 types of firewalls?
What is a Appliance-based firewall?
An appliance-based firewall is a firewall that is built-in to a dedicated hardware device known as a security appliance.
What is a Server-based firewall?
A server-based firewall consists of a firewall application that runs on a network operating system (NOS) such as UNIX or Windows.
What is a Integrated firewall?
An integrated firewall is implemented by adding firewall functionality to an existing device, such as a router.
What is a personal firewall?
Personal firewalls reside on host computers and are not designed for LAN implementations. They may be available by default from the OS or may come from an outside vendor.
What is the recommended length for a password?
At least 8 characters, preferably 10 or more characters
What is the command line on a switch or router to enable password length and lockout attempts
router (config)# service password-encryption
router (config)# security password min-length 8
router (config)# login block-for 120 attempts 2 within 60
What is the command line to "time out" a terminal connection after 10min?
router (config)#line vty 0 4
router (config-vty)#exec-timeout 10
In the ping command what does the ! (exclamation mark) indicate?
Indicates receipt of an ICMP echo reply message
In the ping command what does the . (period) indicate?
indicates a time expired while waiting for an ICMP echo reply message
In the ping command what does the U indicate?
an ICMP unreachable message was received
What are the 5 CDP neighbors information display?
What is the command to verify router interface?
show ip interface brief
What is the command to view the file system on a switch?
show file systems