220602 Network Protection

Front 1

List security measures in layers?

Back 1

Physically secure hardware, firewall, installing intrusion dectrion software, using securle electronic transaction protocols, protecting against viruses and worms,enableing privacy protection software

Front 2

Define Firewall?

Back 2

a software or hardware used to control information that's sent and received from outside the network.Firewall resides on the networks gateway,which is the connection point between the internal network and outside communication.

Front 3

List characteristics of hardware firewall?

Back 3

*stands between the lan & internet,

Front 4

List characteristics of software firewall?

Back 4

*can be configured to block only incoming network traffic
*allowing incoming network connections based upon software or services running on a users computer & the ability to block network connections based on its source

Front 5

What is the main purpose of a proxy server?

Back 5

to provide web access for computers that are located behind a corporate firewall

Front 6

When proxy server acts as a firewall, what can it do?

Back 6

*filter incoming traffic from outside computers,
*filter traffic thats leaving the network.

Front 7

What occurs when a firewall filter ports?

Back 7

It prevents software on the outside from using certain ports on the network.

Front 8

What is it called when a router also acts as a firewall?

Back 8

screening router, and screening routers can use a technique call stateful inspection

Front 9

What does the router do when it acts as a firewall?

Back 9

It keeps tracks of all TCP sessions currently made & allow only those packets to pass that have been requested inside the network for these open sessions.

Front 10

What can you do with Windows security center?

Back 10

manage windows firewall, automaic updates, and any antivirus software you have installed

Front 11

define DMZ (demilitarized zone)

Back 11

an area thats between the private network & the internet, but isn't a direct part of either network. also sometimes called perimeter network.

Front 12

List characteristics of DMZ?

Back 12

In DmZ the rest of the network is protected while still allowing internet users to acces the web servers that vulnerable to attack.

Front 13

List the several ways you can set up DMZ?

Back 13

*Screen host *Bastion host, *Three-homed firewall, Back-to-back, firewall, dead zone

Front 14

What is screened host?

Back 14

when you use a router to filter all traffic to the private intranet but also allow full access to the computer in the DMZ., router responsible for protecting private network., ip address is allowed full internet access, but other computers are protected behind the firewall provided by the router

Front 15

What is Bastion host?

Back 15

are computers that stand outside the protected network and exposed to an attack by using two network cards, one for DMZ, & one for the intranet

Front 16

What are bastion host also known as?

Back 16

dual-home hosts or dual homed firewalls

Front 17

(types of DMZ)What is Three homed firewall?

Back 17

used when there are several computers, like web server, dns server, ftp server , need 3 NIC, one for intranet, one, dmz, one for the internet, need firewall software. Traffic never allowed to flow directly from internet to intranet w/out filtering from DMZ

Front 18

What is Back to Back firewall?

Back 18

provides best protection, the dmz is located between 2 hardware firewalls. each firewall has 2 NIC ,DMZ has 2 nIC

Front 19

What is the dead zone?

Back 19

The most secure of all the DMZ types, dead zone is a network between two routers that uses another network protocl other than TCP/IP, this network between the 2 routers is a dead zone

Front 20

What is intrusion detection software?

Back 20

provides alarms that go off when suspicous activity is spotted. also keeps logs of suspicous activitis.

Front 21

What are two electronic transaction protocols?

Back 21

SSL (secure sockets layer) & SET ( Secure Electronic Transactions)

Front 22

What is SET (Secure Electronics Transactions)

Back 22

a protocol that is designed to offer a secure medium for credit card transactions., uses digital signatures,protects info. protects all parties, offers additional protection where merchants can't even see your credit card #.

Front 23

What should you install to stop viruses & worms?

Back 23

antivirus software

Front 24

What is real-time antivirus scanner?

Back 24

software designed to scan every file accessed on a computer so it can catch viruses & worms before the infect computer.

Front 25

What is inoculaton?

Back 25

the process of calculating and recording checksums to protect againt viruses & worms?

Front 26

what is virus definition?

Back 26

updates to software that provide user with new viruses and worms that are discoverd.

Front 27

What should you do to protect your privacy?

Back 27

eliminate spam, stop pop up ads, remove spyware, control cookies

Front 28

Define security zone/

Back 28

a GROUP OF WEBSITES THAT CAN BE SEPARATED IN ORDER TO MANAGE SECURITY?

Front 29

Security setting under custom level:Define ACTIVEx CONTROLS?, scripting?, miscellaneous, user authentication

Back 29

ActiveXcontrols: approves downloads, runs scripts, use to enable/diable script support
scripting: allows scripting, user authentication: specifies the method needed to log onto a web site, miscellaneious: permist or restricts a wide range of actions.

Front 30

What is 802.x standard?

Back 30

a portt based authentication framwork for access to ethernet networks. also applies 802.11 WLANS.
* uses physcial characteristics
* required 3 roles in the authentication process- a device requesting access, a authenicator, a authentication server.
* allows scalability in wireless LAN, * allows multiple authentication algorithms & is an open standard.

Front 31

Define 802.11 standard?

Back 31

a technology that operates in 2.4 thru 2.5 ghz band. , defined in the data link layer. Can configure 2 way , ad-hoc & infrastructure.

Front 32

What should you do to protect your privacy?

Back 32

eliminate spam, stop pop up ads, remove spyware, control cookies

Front 33

Define security zone/

Back 33

a GROUP OF WEBSITES THAT CAN BE SEPARATED IN ORDER TO MANAGE SECURITY?

Front 34

Security setting under custom level:Define ACTIVEx CONTROLS?, scripting?, miscellaneous, user authentication

Back 34

ActiveXcontrols: approves downloads, runs scripts, use to enable/diable script support
scripting: allows scripting, user authentication: specifies the method needed to log onto a web site, miscellaneious: permist or restricts a wide range of actions.

Front 35

What is 802.x standard?

Back 35

a portt based authentication framwork for access to ethernet networks. also applies 802.11 WLANS.
* uses physcial characteristics
* required 3 roles in the authentication process- a device requesting access, a authenicator, a authentication server.
* allows scalability in wireless LAN, * allows multiple authentication algorithms & is an open standard.

Front 36

Define 802.11 standard?

Back 36

a technology that operates in 2.4 thru 2.5 ghz band. , defined in the data link layer. Can configure 2 way , ad-hoc & infrastructure.

Front 37

As it relates to the 802.11 standard. How is as Ad-hoc network configured?

Back 37

computers are brought together to form a network on the fly.

Front 38

How does 802.11 standard define an access point?

Back 38

as a device that functions as a transparent bridge between the wireless clients & existing wired network., also contains 802.1D bridging software to act as a bridge between wirelesss and wired datalink layers.

Front 39

list characteristics of 802.11g

Back 39

upt o 54 mbps w/ real thruput at 12mbps.
frequency @ 2.4ghz
uses DSSS or OFDM

Front 40

What are WLAN security options?

Back 40

WEP, WPA ( better)

Front 41

In WLAN ,, how can you protect yourself?

Back 41

Enable WEP, Chaning access point in default administration passwords, chaning defaul service set identifyer (SSIDs), separating wireless network from wired network, putting the wireless network in an internet access only zone or DMZ, disabling DHCP, enabling MAC address filtering, Dsiabling broadcast SSID

Front 42

802.11a

Back 42

uses OFDM modulation technique for transmitting large amounts of digital data . frequency- 5 ghz, supports 8 overlapping channels

Front 43

802.11b

Back 43

uses DSSS , frequency 2.4 ghz, supports 3 non-overlapping channels.

Front 44

802.11f

Back 44

allow users to mainatin a connection while roaming

Front 45

802.11g

Back 45

use DSSS or OFDM, frequency - 2.4ghz

Front 46

802.11i

Back 46

based on AES. , has RSN feature

Front 47

What can you configure WEP to do?

Back 47

Data Encryptin, network authentication, proved teh key automatically. WEP 128 bit

Front 48

What do WPA use to change the temporal key every 10,000 packets , which insures greater security than WEP?

Back 48

use TKIP ( Temporak Key Integrit Protocol)

Front 49

What are two populqr wireless internet access applications

Back 49

Fixed pint wireless (local loo) and mobile wireless

Front 50

True or Fals? ATM can be used with LANS & WANS.

Back 50

True

Front 51

Define network noise?

Back 51

al electrical signal on the network cable that isn't part of the senders original signal.

Front 52

What is a crosstalk?

Back 52

When data signal travels down a conductor, it creates an electric field , which interfers w/ any wires close by

Front 53

List the different types of crosswalk?

Back 53

NEXT, FEST, ELFEXT, Pair to Pair crosstalk

Front 54

What is a network analyzer?

Back 54

sometimes called protocol analyser, this is a portable device that you set up to monitor and diagnose problems.can help diagnose hardware & software

Front 55

If a user can't access the network, what do you verify is installed correctly?

Back 55

Clent for Microsoft Networks, o r Client for Netware networks & file and printer sharing is installed

Front 56

Define Ping?

Back 56

is simple program that allows one computer to send a test packet to another computer and then receive a reply

Front 57

define crosstalk?

Back 57

When a data signal travels down a conductor, it creates an electric field, which interfers with any wires close by.

Front 58

List the different types of crosstalk?

Back 58

Near End Crosstalk (NEXT), Far End Crosstalk (FEXT), Equal Level Far End Crosstal (ELFEXT), Pair to Pair CrosstalK

Front 59

Define network nois?

Back 59

any electrical signal on the network cable that isn't part of the senders original signal

Front 60

What type of cross talk is calculated value of the crosstalk between pairs measured at the far end of the cable?

Back 60

Equal Level Farr End Crosstalk (ELFEXT)

Front 61

A network analyzer can detect problems w/ what four pieces of hardware?

Back 61

cabling, jacks, network cards, hubs

Front 62

What info do ipconfig report?

Back 62

ip address, subnet mask, default gateway, connedction

Front 63

What command use to verify name resolution (DNS)

Back 63

nslookup

Front 64

List the 3 groups assigned in Windows XP.

Back 64

Users, Administrators, Power Users.

Front 65

Define powerusers?

Back 65

A group used to assign elevated permissions to a select set of individuals

Front 66

Define authentication?

Back 66

the process by which your identity is validated against a databas that contains your account

Front 67

Define interactive authentication?

Back 67

the process by which a user provides his or her user name & password in the Log on to Windows dialog box.

Front 68

What are two types of logons>?

Back 68

Domain & local

Front 69

Define domain?

Back 69

The username and password are compared to information stored on a domain controller in its active directory database

Front 70

Define local?

Back 70

the username and password is validated by SAM (security Accounts Manager)a database located on the computer rather than by an active directory domain controller. The user must have an account which resides on the computer they are logging on to.

Front 71

What is network authentication?

Back 71

is theprocess by whicha network resource or service confirms the identity of a user.

Front 72

list the 2 autthentication protocols?

Back 72

Kerberso vers5 (Kerveros v5) & NT LAN manager (NTLM)

Front 73

List operating systems that support (Kerberosv5)

Back 73

Windows XP, Windows Server, Windows 20000

Front 74

What is primary authentication protocol used in the active directory domain?

Back 74

Kerberos v5

Front 75

Define NTLM?

Back 75

is a challenge response protocol that's used with operating systems running windows nT 4.0 or earlier.

Front 76

define digital certificates?

Back 76

based on public key cryptogray & trusted registry of identities, a digital certificate is a computer file attesting to the identityof an individual computer. often used on the internet to verify the identity of a secure system.

Front 77

What windows operating systems is supported by current version NTFS5

Back 77

Windows NT, Windows 2000, Windows XP versions, Windows Server 2003 versions.

Front 78

What command can you use to encrypt & DECRYPT FILES

Back 78

CIPHER, OR BY USING WINDOWS EXPLORER

Front 79

Define EFS?

Back 79

allow users and sevices to encrypt data. converts plain text into ciper text

Front 80

What are the two security area you can configure in account policies?

Back 80

password & account lockout.

Front 81

List some password policies?

Back 81

enforced password history, minimum password age, maximum password age, minimum password length, passwords mustmeet complexity requirement,s store password using reverse encryption for all users in the domain.

Front 82

list the purpose of DoS attack?

Back 82

to make a computer resource unavailabe to its intended user.

Front 83

What do you set if you do not want users to be locked out?

Back 83

account lockout duration and account lockout threshold policy setting to 0

Front 84

List the local policies?

Back 84

audit policy, user rights assignment, security options.

Front 85

What do log on rights control?

Back 85

who, and how a user logs on to the computer

Front 86

True or Fales?some privileges can overide permissions set on a object.

Back 86

Some privileges can

Front 87

What are the 3 built in local accounts used as logon accounts for different services?

Back 87

local system, local service & network service. these services are used by system processes and should never have a user assignment, nor should you change their default settings.

Front 88

What do the security options allow you to control?

Back 88

how administrator & guest account names are managed, which user accounts can access the floppy drive and CD-ROM, how installation of drivers is handled, digital signing of data, logon prompts.

Front 89

True or Fales?

Back 89

Setting a domain level override those made at the local computer level

Front 90

Define audtiting?

Back 90

used tomonitor and track activities

Front 91

define audit policy?

Back 91

defines events that are recorded

Front 92

What are the 3 local policies?

Back 92

user rights assignment policy, security option, audit policy

Front 93

What do audit log for audit policies show?

Back 93

The actio performed, the associated user account,the date & time of the action.

Front 94

define phishing?

Back 94

hackers send email or create web sites that imimic a legitimate sit to gather user names & passwords.

Front 95

Define Brute force attack

Back 95

when an attacker uses software to try user log on combinations until the password is found

Front 96

Define Netstat?

Back 96

displays information about current tcp/ip connections

Front 97

Define ARP?

Back 97

manages the ip to ethernet address translation tables used to find the MAC addressof a host on the network when the ip address is known.

Front 98

What is the standard mode for parallel connections?

Back 98

IEEE-1284/ECPEPP

Front 99

Which wireless security standard uses dynamic encryption & public key authentication?

Back 99

802.1x