Chapter 8

Question 1

privilege escalation

Answer 1

The act of exploiting a bug or design flaw in a software or firmware
application to gain access to resources that normally would’ve been protected from
an application or user.

Question 2

radio frequency interference (RFI)

Answer 2

Interference that can come from AM/FM transmissions
and cell towers.

Question 3

crosstalk

Answer 3

When a signal transmitted on one copper wire creates an undesired effect on
another wire; the signal “bleeds” over, so to speak.

Question 4

data emanation (or signal emanation)

Answer 4

The electromagnetic field generated by a network
cable or network device, which can be manipulated to eavesdrop on conversations
or to steal data.

Question 5

Faraday cage

Answer 5

An enclosure formed by conducting material or by a mesh of such material;
it blocks out external static electric fields and can stop emanations from cell phones
and other devices within the cage from leaking out.

Question 6

butt set (or lineman’s handset)

Answer 6

A device that looks similar to a phone but has alligator
clips that can connect to the various terminals used by phone equipment, enabling a
person to listen in to a conversation.

Question 7

TEMPEST

Answer 7

Refers to the investigations of conducted emissions from electrical and mechanical
devices, which could be compromising to an organization.

Question 8

wiretapping

Answer 8

Tapping into a network cable in an attempt to eavesdrop on a conversation
or steal data.

Question 9

protected distribution system

Answer 9

Security system implemented to protect unencrypted
data transfer over wired networks.

Question 10

Wi-Fi Protected Setup (WPS)

Answer 10

A simplifi ed way of connecting to wireless networks
using an eight-digit code.

Question 11

Advanced Encryption Standard (AES)

Answer 11

An encryption standard used with WPA and
WPA2. The successor to DES/3DES and is another symmetric key encryption standard
composed of three different block ciphers: AES-128, AES-192, and AES-256.

Question 12

Temporal Key Integrity Protocol (TKIP)

Answer 12

An algorithm used to secure wireless computer
networks; meant as a replacement for WEP.

Question 13

AP isolation

Answer 13

Each client connected to the AP will not be able to communicate with
each other, but they can each still access the Internet.

Question 14

IV attack

Answer 14

type of related-key attack, which is when an attacker observes the operation
of a cipher using several different keys and fi nds a mathematical relationship
between them, allowing the attacker to ultimately decipher data.