Domain 4 - Communication and Network Security Flashcards

Question

Analog

Answer 1

continuous signal that varies in frequency/ amplitude/ phase etc. variances in continuos signal produce a wave shape as opposed to square shape of digital, comms become altered and corrupted because of attenuation over long distances

Answer 2

comms occur through electrical signal and state change (0s and 1s), more reliable over distance or when interference is present, uses current voltage that creates binary data

Answer 3

comms rely on timing or clocking mechanism, high rates of data transfer, i.e. networking

Answer 4

comms rely on a stop and start delimiter bit to manage transmission of data, small amounts of data, i.e. public switched telephone network (PSTN)

Answer 5

single comm channel, form of digital signal, direct current applied to cable. i.e. ETHERNET

Answer 6

supports multiple simultaneous signals, suitable for high throughput and multiplexing several channels, form of ANALOG signal. Ie TV, cable modem, ISDN, DSL, T1, T3

Answer 7

determine how many destinations a single transmission can reach. Broadcast=all possible, Multicast=multiple specific recipients ie windows OS deployment, Unicast=single communication to specific recipient

Answer 8

- decreases chances of collisions when 2 or more stations start sending signals over datalink layer. -Each state must check the state of the medium. -CSMA/CA=collision avoidance=grants single comm at any given time ie ring networks with token/ wireless/ used in 802.11 standard, -CSMA/CD=collision detection=responds to collisions by having each member of the collision domain wait for a short but random period of time before restarting process the resends data frame ie wired networks/ 802.3 standard

Answer 9

performs comms using digital token, releases token once transmission is complete, prevents collisions in ring networks

Answer 10

performs comms using master-slave config, primary system polls the secondary system in turn when they have to transmit data, used by synchronous datalink control (SDLC)

Answer 11

boosts performance, dedicated environment to reduce comm problems, security via isolating traffic

Answer 12

private network

Answer 13

sectioned off portion of network to act as intranet for private network, but also serves information to public internet

Answer 14

extranet for public consumption aka perimeter network

Answer 15

- connects wireless devices, connections are paired with 2.4ghz radio, often a 4 digit code to pair

Answer 16

pushing unsolicted messages to nearby bluetooth users, more of an annoyance

Answer 17

- data theft, wirelessly connecting to some early BT enabled mobile devices without owners knowledge to download data

Answer 18

grants hackers remote control over the feature and functions of a BT device

Answer 19

802.11n = 200+ mb/s > 2.4ghz 802.11ac = 1gb/s > 5ghz

Answer 20

- wireless networks announces SSID on regular basis with a beacon frame, any device can try to connect, hiding SSID is considered "security through obscurity"

Answer 21

- commonly known as WPA, was designed as replacement for WEP without need to replace legacy hardware

Answer 22

- used with WPA2, counter mode with cipher block chaining message authentication code protocol, created to replace WEP and TKIP/WPA, uses AES with 128bit

Answer 23

- encryption scheme with CCMP, AES encryption, modern day wireless uses this

Answer 24

- form of network data storage solution ie SAN (storage area network) or NAS (network attached storage) that allows for high speed file transfers

Answer 25

- encapsulate fiber channel communications over ethernet networks

Answer 26

- networking storage standard based on IP, high speed but not as fast as fiber

Answer 27

- process of investigating the presence, strength and reach of wireless access points deployed in environment, usually walking around with portable network device and marking on a map/ floor plan

Answer 28

- authentication framework, brings new auth technologies to existing hardware

Answer 29

- encapsulates EAP methods within a TLS tunnel

Answer 30

- cisco proprietary, developed to replace WPA BEFORE WPA2

Answer 31

- uses list of authorized wireless client interface MAC addresses, used by a WAP to block access to all non-authorized devices

Answer 32

- portal is an auth technique that redirects a newly connected wireless web client to a portal access control page

Answer 33

omnidirectional (loop, monopole, dipole) vs unidrectional (panel, parabolic, yagi, cantenna)

Answer 34

- manage/ control/ filter network traffic at the perimeter

Answer 35

- filters traffic by examing data from MESSAGE HEADER, layer 3 and up

Answer 36

- filters based on single internet service, protocol, or application, operates at layer 7

Answer 37

- establish comm sessions between trusted partners, session layer 5 of the OSI model, SOCKS is an example

Answer 38

- evaluate state, session, or context of network traffic, watch traffic streams from end to end, can implement various IP security functions such as tunnels and encryption, identify forged/ unauthorized communications

Answer 39

- filtering mechanism that operates at the application layer in order to filter the payload contents of a communication rather than only header values, looks at both header and payload, detects protocol compliance/ spam/ viruses/ intrusions

Answer 40

- restrict or block traffic based on source/ destination or other static values, not aware of patterns or session information, FASTER and perform better under load than stateful because they are doing less

Answer 41

- protect web apps by filtering and monitoring HTTP/S traffic between web app and internet, protects against XSS, CSRF, and SQL injection, come preconfigured with OWASP rulesets often

Answer 42

- deep packet inspection, adds application level inspection, intrusion prevention, and brings threat intelligence from outside the firewall

Answer 43

- multifunction device (MFD) composed several sec features including firewall, may include IDS/IPS/ TLS proxy/ web filtering/ QoS management/ bandwidth throttling/ NAT/ VPN anchoring/ antivirus, doesn’t scale well so more common in small to medium businesses

Answer 44

allows private subnets to communicate with other cloud services and the internet but hides the internal network from internet users, has the network access control list (NACL) for the private subnets ,used for browsing internet to hide users behind NAT gateway

Answer 45

looks at content on requested web and blocks based on filters, associated with deep packet inspection

Answer 46

-license freely available, access to source code, no vendor support, pfsense

Answer 47

- expensive but more functionality and support than open source, cisco/ checkpoint/ palo alto/ barracuda, no source code access

Answer 48

- purpose built network hardware, often has superior throughput because it is DESIGNED to

Answer 49

- install on your own hardware and place it anywhere, "host based" can be more vulnerable

Answer 50

- catered to app level comms, HTTP or web traffic, example is a next gen firewall (NGFW)

Answer 51

installed on a host OS ie windows/ linux

Answer 52

- cloud firewalls implemented as a virtual network appliance (VNA), available from CSP directly and 3rd party partners (commercial vendors)

Answer 53

- repeats traffic out of port where the destination is, create separate collision domains and improve throughput of data, usually layer 2, sometimes layer 3 if it’s a hybrid "routing" switch

Answer 54

- control traffic flow on networks, connect networks and control flow between the 2, can function with static routing tables or dynamic routing system, layer 3 with IP

Answer 55

-connects networks that are using different protocols aka protocol translators, ie IPv4 to IPv6, can be standalone hardware devices or a software service, work at layer 3

Answer 56

- layer 1, strengthen signal over a cable segment and connect segments that use the same protocol

Answer 57

- connect 2 networks using the same protocol, layer 2

Answer 58

- connect multiple systems/ segments that use the same protocol, multiport repeater, layer 1, not really used in businesses anymore

Answer 59

- remote access, multilayer switch used to connect distant networks over WAN links

Answer 60

- place on network to alert NIDS of changes in traffic patterns, if you place on internet side of network it can scan ALL TRAFFIC but will need to be very beefy hardware

Answer 61

- wide area network, can provide private circuit and packet switching

Answer 62

- use dedicated physical circuits, expensive, ie dedicated lines/ point to point (PPP) protocol/ SLIP (serial line internet protocol)/ ISDN (integrated services digital network)/ DSL (digital subscriber line)

Answer 63

- uses virtual circuits instead of physical, efficient and cost effective, ie X.25 frame relay/ asynchronous transfer mode (ATM)/ synchronous data link control (SDLC)/ high-level data link control (HDLC)

Answer 64

- analyzes whole packets (header and payload), looking for known events. When a known event is detected a log message is generated, both host (HIDS) and network (NIDS) can be a combination of behavior and knowledge based

Answer 65

- analyzes whole packets, both header and payload, looking for known events, when a known event is detected the packet is rejected

Answer 66

- creates a baseline of activity to identify normal behavior and then measures system performance against baseline to detect abnormal, can detect previously unknown attack methods

Answer 67

- uses signatures similar to the signature definition used by anti-virus, only effective against known attacks

Answer 68

- software form installed on a host, often a server

Answer 69

- network level, often in hardware form as a purpose built appliance

Answer 70

- in band, traffic runs through it, placed on or near firewall as additional layer of security

Answer 71

- traffic does not run through it, "out of band", uses sensors/ collectors to forward logs

Answer 72

- hardened!! Computer or appliance that is exposed on the internet, all unnecessary elements removed such as services/ programs/ protocols/ ports

Answer 73

- MOST SECURE, firewall protected system logically positioned inside a private network

Answer 74

- similar to screened host in concept except a subnet is placed between routers/ firewalls and the bastion host is located within the subnet

Answer 75

functions on behalf of a client requesting service, masking the true origin of the request to the resource

Answer 76

- lure bad people into doing bad things so we can watch them, only ENTICE not ENTRAP, not allowed to let them download items, ie allowing download of a fake payroll file would be entrapment, goal is to distract from real assets and isolate in a padded cell until they can be tracked down

Answer 77

denial of service attack that involves sending FRAGMENTED PACKETS to a target machine, machine cannot reassemble them due to a bug in TCP/IP fragmention reassembly, the packets overlap and crash the machine

Answer 78

- DoS attack that sends large amount of SPOOFED UDP TRAFFIC to a routers broadcast address within a network, similar to SMURF attack which uses spoofed ICMP traffic

Answer 79

- layer 4 DoS, attacker sets SOURCE AND DESTINATION of a TCP packet to be the same value, a vulnerable machine will crash due to the packet being repeatedly processed by the TCP stack

Answer 80

- DoS attack, attacker sends a succession of SYN REQUESTS to target system to make it unresponsive to legit traffic

Answer 81

-DoS attack, oversized ping packet, bigger than 65,536 bytes which is the usual max

Answer 82

- SYN > SYN-ACK > ACK.

Answer 83

used to segment a network

Answer 84

directly connect 2 wireless clients ie tablet and laptop

Answer 85

connects 2 clients together using a wap, but not to wired resources like a central network, ie laptop and tablet communicating through wap

Answer 86

connects endpoints to a central network, not directly to each other

Answer 87

uses a WAP to link wireless clients to a central network

Answer 88

part of IPsec, provides authentication, integrity and nonrepudiation

Answer 89

part of IPsec, provides encryption and thus confidentiality, prevents replay attacks

Answer 90

independent VPN protocol

Answer 91

used by IPsec to compress data prior to ESP it in order to attempt to keep up with wire speed transmission

Answer 92

IPsec mechanism that manages crypto keys and is composed of 3 elements: OAKLEY, SKEME, and ISAKMP

Domain 4 - Communication and Network Security Flashcards

(116 cards)