Mod 2

Question 1

Define physical security

Answer 1

A physical object creating a barrier to unauthorized access

Question 2

Define destructive entry

Answer 2

Using force to defeat physical security

Question 3

Define nondestructive entry

Answer 3

Compromising security without leaving signs of a breach

Question 4

Though not the only point of attack, this system manages a computer’s resources and tends to be the focal point of security, and attacks.

Answer 4

the Operating System (OS)

Question 5

What is the purpose of an Access Control Entry (ACE)?

Answer 5

to allow/deny a type of access to a file/folder by a user/group

Question 6

What is an Access Control List (ACL)?

Answer 6

the set of ACEs for a file/folder

Question 7

Define Access Control Model

Answer 7

an Access Control Model is a framework that defines how permissions and access to resources are granted or restricted

Question 8

What are the two types of Access Control Models?

Answer 8

Discretionary Access Control (DAC)
Mandatory Access Control (MAC)

Question 9

What is the primary difference between DAC and MAC models?

Answer 9

In DAC, users set permissions over the resources they own.
In MAC, users are unable to allow/deny permissions on resources they own.

Question 10

What are the 1st and 2nd part of file access control?

Answer 10

1st: Access Control Model
2nd: Closed/Open Policy

Question 11

What is the key difference between Open and Closed policies?

Answer 11

In a closed policy, an actor must explicitly possess the right to do an action.
I.E: Can’t do it unless it says you can.

In an open policy, an actor is assumed to be able to do all actions, unless a rule explicitly denies it.
I.E: You can do it unless it says you can’t.

Question 12

Define injection attacks

Answer 12

malicious code is injected into safe code

Question 13

What type of attacks are Unix Shell attacks?

Answer 13

Injection attacks

Question 14

How does a Unix Shell attack work?

Answer 14

The Unix shell enables a command argment to be obtained from the output of a different command. This is known as command substitution. While parsing the command line, the Unix shell replaces the output of a command between back quotes ( ‘ ‘ ) with the output of a different command.

For example, assume the command print name.txt prints Taylor, and the command find * searches for names. The command find ‘print name.txt’ would effectively equal: find Taylor

Question 15

What type of architecture is used for modern operating systems?

Answer 15

microkernal

Question 16

What 4 criteria must biometric indentification traits follow?

Answer 16

Universality - almost everyone has it
Distinctiveness - each person’s slightly different
Permanence - it shouldn’t change significantly over time
Collectability - it should be effectively dtermined and quantifiable

Question 17

Define Dictionary Attack

Answer 17

each word in a dictionary is hashed and the resulting value is compared with hashed passwords

Question 18

Define password salt

Answer 18

a random string of data attached before or after a password before it is hashed

Question 19

Define 2 factor authentication (2FA)

Answer 19

authentication that uses 2 of the 3 factors of authentication
- something you have
- something you know
- something you are

Question 20

Define spoofing

Answer 20

pretending to be someone else

Question 21

What’s the purpose of the address resolution protocol (ARP)?

Answer 21

It connects the network to the data layer by converting IP addresses to MAC addresses. This takes place between the network and link layers.

Question 22

What layer do Denial of Service Attacks happen?

Answer 22

Network (IP) Layer

Question 23

How do Denial of Service attacks work?

Answer 23

large number of packets are sent to a client, which either slows down or crashes the client trying to process them

Question 24

What’s an IP spoofing attack?

Answer 24

an attempt by an attacker to send packets from a fake IP address they’re pretending to be

Question 25

What are the two approaches to creating firewall policies?

Answer 25

Blacklist Whitelist

Question 26

What's the key difference between Blacklist and Whitelist policies?

Answer 26

In a blacklist approach, all packets are allowed through unless specifically exempted. I.E: a ban list In a whitelist approach, no packets are allowed through unless specifically allowed. I.E: a guest list

Question 27

Define Port Knocking

Answer 27

a brute force attack where an attacker tries to allocate network connections to gain access to a host

Question 28

(T/F). The best approach to designing and implementing network security is to address one layer of the network protocol stack at a time completely, as attacks are designed at a particular layer.

Answer 28

False