Security, encryption, exploitation

Question 1

What capabilities does encryption provides?

Answer 1

1. Authentication
2. Integrity
3. Non-repudiation

Question 2

How could someone break a cypher text?

Answer 2

1. Flaw in the encryption algorithm (older algorithm or algorithm relying on obfuscation)
2. Brute force

Question 3

Explain the difference between encryption and encoding.

Answer 3

Encoding is the transformation of data from one form to another (method). Encryption is the transformation of data from one form to another, with the use of a key (method and key).

Question 4

What is AES?

Answer 4

Advanced Encryption Standard. Symmetric encryption (one key). Key size of 128, 192 or 256.

Question 5

What is a SSL certificate?

Answer 5

A certificate delivered by a CA on behalf of a website. It acts as the public key for the website. On login, the SSL certificate is used to negotiate a symmetric key.

Question 6

What is hashing?

Answer 6

Hashing is one way encryption. It produces a message digest that can be used to validate a message. MD5, SHA1, SHA2, SHA3, SHA256, SHA512.

Question 7

Explain the purpose of the Red Team.

Answer 7

The Red Team is responsible for offensive operations.

Question 8

Explain the purpose of the Blue Team.

Answer 8

The Blue Team is responsible for defensive operation.

Question 9

Explain the concept of defense in depth.

Answer 9

The idea that defensive positions should be built in depth to produce redundancy in depth.

Question 10

Name the three key areas of risk.

Answer 10

1. Confidentiality
2. Integrity
3. Availability

Question 11

What are the 20 most important security controls.

Answer 11

1. Inventory of authorized and unauthorized devices
2. Inventory of authorized and unauthorized software
3. Secure configuration for hardware and software
4. Continuous vulnerability assessment and remediation
5. Controlled use of administrative privilege
6. Maintenance, monitoring and analysis of log files
7. Malware defenses
8. Limitation and control of network ports, protocols and services
9. Email and Web Browser Protections
10. Data recovery capability
11. Secure configuration for Network devices such as Firewalls, Routers and Switches
12. Boundary defense
13. Data protection
14. Controlled access based on the need to know
15. Wireless access control
16. Access monitoring and control
17. Security skills assessment and appropriate training to fill gaps
18. Application software security
19. Incident response and management
20. Penetration tests and red team exercises

Question 12

What are the 5 stages of an attack?

Answer 12

1. Reconnaissance
2. Initial exploitation
3. Persistence & Privilege
4. Move laterally
5. Exfiltration

Question 13

What is Slingshot?

Answer 13

Distribution packaged by SANS institute.

Question 14

What is SIFT?

Answer 14

Distribution focused on forensic.

Question 15

What is Kali Linux?

Answer 15

Made by a company named Offensive Security.

Question 16

Name a few tools that can be used for reconnaissance.

Answer 16

Google & Robots
Job posting and LinkedIn
Wordlists & CeWL
Whois
DNSRecon and Dirb
NMap

Question 17

How can google be used for reconnaissance?

Answer 17

It can be used to find data and metadata that shouldn’t be shared publicely. Tools like metagoofil and exiftool can be used to find these data.

Question 18

How can you use job posting for reconnaissance?

Answer 18

It gives a good indication of what equipment and software a company is using. Tools like CeWL can help you build a word list from a job website.

Question 19

How could you use whois for reconnaissance?

Answer 19

Whois is a tool given information about the owner of a domain.

Question 20

What is DNS recon?

Answer 20

Reconnaissance of the DNS with a word list. The tool dnsmap can help you with that. Dirb can help you extract all directories exposed to the web.

Question 21

What is NMap?

Answer 21

Nmap is a tool to scan open ports on a system.

Question 22

What is a chain of custody?

Answer 22

The chain of custody is the record of all manipulation/transfer/ownership a piece of evidence goes through. It is important to ensure the evidence has not been tempered.

Question 23

What is steganography?

Answer 23

Steganography is the process of concealing information in a unsuspecting data recipient.

Question 24

Name the 7 steps of incident response.

Answer 24

1. Preparation
2. Identification
3. Containment
4. Eradication
5. Recovery
6. Lesson learned
7. Conclusion