Cissp Cbk Review Seminar

Front 1

The mathematical manipulation of information that prevents the information from being disclosed or altered

Back 1

Cryptography

Front 2

The practice of defeating the protective properties of cryptography

Back 2

Cryptanalysis

Front 3

The study of cryptography and cryptanalysis

Back 3

Cryptology

Front 4

Basic Goals of Cryptography

Back 4

Confidentiality, Integrity, Authenticity, Non-Repudiation, Access Control, Make compromise difficult

Front 5

The natural or human-readable form of a message

Back 5

Plaintext/Cleartext

Front 6

The enciphered, encrypted, or scrambled form of a message

Back 6

Ciphertext/Cryptogram

Front 7

The mathematical function that determines the cryptographic operations

Back 7

Cryptographic Algorithm

Front 8

The (often secret) value used in the transformation of the message in a cryptographic operation that controls the operation of the algorithm in a unique, predictable manner

Back 8

Cryptovariable (Key)

Front 9

The total number of keys available to the user of a cryptosystem

Back 9

Key Space

Front 10

Challenges in developing secure cryptographic algorithms (Claude Shannon)

Back 10

Discernible, redundancies, statistical patterns

Front 11

Solutions for developing secure cryptographic algorithms (Claude Shannon)

Back 11

Confusion, Diffusion, Avalanche

Front 12

Principle of hiding patterns in the plaintext by substitution

Back 12

Confusion

Front 13

Property of transposing the input plaintext throughout the ciphertext so that a character in the ciphertext would not line up directly in the same position in the plaintext

Back 13

Diffusion

Front 14

Achieved when the plaintext bits affect the entire cipher text so that even a change of one bit in the plaintext would change half of the entire cipher text

Back 14

Avalanche

Front 15

Basic elements of a cryptosystem

Back 15

Plaintext, Key, Algorithm, Ciphertext

Front 16

Basic Transformation Techniques

Back 16

Substitution, Transposition or Permutation, Compression, Expansion, Padding, Key Missing, Initialization Vector (IV)

Front 17

The replacement of one value for another

Back 17

Substitution

Front 18

A change in the relative position of values without replacing them (bit shuffling)

Back 18

Transposition or Permutation

Front 19

Decrease redundancy before plaintext is encrypted

Back 19

Compression

Front 20

Epanding the plaintext by duplicating values found in the plaintext

Back 20

Expansion

Front 21

Adding additional material to the plaintext message before it is encrypted to assist with encryption, address weaknesses in an algorithm when particular messages are encrypted and fail traffic analysis

Back 21

Padding

Front 22

Using a portion of the full size of the key (subkey) rather than the full key to help limit exposure of the key

Back 22

Key Mixing (Key Scheduling)

Front 23

Randomly-generated value used by many cryptosystems to ensure that a unique ciphertext is generated when there are multiple ciphertexts generated by the same key (helps avoid re-keying)

Back 23

Initialization Vector (IV)

Front 24

Scrambling a plaintext message by using an algorithm, usually in conjunction with a key

Back 24

Encipher/Encrypt

Front 25

Similar to enciphering or encrypting the message, but it does not use a key (ex. Base 64)

Back 25

Encode

Front 26

Descrambling an encrypted message and converting it into plaintext

Back 26

Decipher

Front 27

Uneven distribution of key across the key space. A weakness in a cyptographic algorithm that results in two different keys being able to generate the same cipher text.

Back 27

Key Clustering/Key Collision

Front 28

An estimate of the effort/time needed to overcome a protective measure by an attacker with specified expertise and resources. Commonly related to brute-force techniques

Back 28

Work Factor

Front 29

A basic transformation technique and another name for binary addition. Used in many stream and block ciphers for substitution operations

Back 29

Exclusive-Or (XOR)

Front 30

XOR Calculation Results

Back 30

Same = 0, Different = 1

Front 31

States that the strength of a cryptosystem is based on the secrecy of the key and not on the secrecy of the algorithm

Back 31

Kerckhoff's Principle

Front 32

An algorithm in which the keystream is generated bit-by-bit, in sync with the arrival of the plaintext

Back 32

Synchronous

Front 33

An alogorithm in which the keystream is generated based upon the previously received plaintext and the cryptovariable, or key

Back 33

Asynchronous

Front 34

A condensed representation of the original message. Concerned with integrity. May or may not use a key in computing the output

Back 34

Hash Function

Front 35

Created by signing a digest of a message with the private key of the sender

Back 35

Digital Signature

Front 36

Uses the same key for encryption and decryption. Secret Key Cryptography

Back 36

Symmetric

Front 37

Uses a key pair. One key is used for encryption and the other half of the key pair must be used for decryption. One public key (shared), one private key (confidential)

Back 37

Asymmetric

Front 38

A digitally signed, special block of data that contains a public key and teh identifying information for the entity, or principal that owns the associated private key.

Back 38

Certificate

Front 39

What is the format for Certificates?

Back 39

ASN.1 (X.509)

Front 40

Trusted entity or third party that issues and signspublic key certificates, thereby attesting to the validity of the public keys. A corporate entity.

Back 40

Certificate Authority

Front 41

The primary organization that verifies a Certificate applicant's information and identity. Handles verification, enrollment, registration, issuing and re-issuing credentials, and credential updates, additions and revocation as the local agent on behalf of the CA.

Back 41

Registration Authority

Front 42

Historical Cryptographic Techniques

Back 42

Manual, Mechanical, Electro-Mechanical, Electronic, Quantum Cryptography

Front 43

A keystream (sequence of bits used as a key) is generated and combined with the plaintext using an XOR

Back 43

Stream Cipher

Front 44

Generated by the cryptosystem in a pseudo random sequence and applied to plain text in a stream cipher. Must be unpredictable, unbiased, operates on individual bits

Back 44

Keystream

Front 45

Stream Cipher Uses

Back 45

Wireless, Audio/Video Streaming

Front 46

A series of methematical operations that must be performed in sequence on an algorithm.

Back 46

Rounds

Front 47

Block Cipher Uses

Back 47

Data Transport, Data Storage

Front 48

Shift Alphabet, Scramble Alphabet, Polyalphabetic Cipher, Vigenere Cipher

Back 48

Simple Substitution Ciphers

Front 49

Grid share and reading/writing direction, Scytale Rod

Back 49

Simple Tansposition/Permutation Ciphers

Front 50

This form of encryption is done by using the numerical value of letters in the plaintext and is coded and decoded by using a copy of the text in a book as the key.

Back 50

Running Key Cipher

Front 51

Encryption technique where the keys are the same length as the plaintext message and the keys are randomly generated. Only unbreakable algorithm. Also known as Vernam ciphers.

Back 51

One-Time Pad

Front 52

Art pf hiding information in an image or datafile.

Back 52

Steganography

Front 53

Modes of Symmetric Block Ciphers

Back 53

Electronic Code Book, Cipher Block Chaining, Cipher Feed Back, Output Feed Back, Counter

Front 54

Symmetric Block Cipher Mode where each block of plaintext is encrypted independently using the same key.

Back 54

Electronic Code Book

Front 55

Symmetric Block Cipher Mode where the first plaintext block is XOR'ed with an initialization vector. The resulting ciphertext result is chained into the next plaintext block

Back 55

Cipher Block Chaining

Front 56

A stream cipher mode where Initialization Vector is encrypted and then XOR'ed with the first plaintext block.

Back 56

Cipher Feed Back

Front 57

A stream cipher mode where only the result of encrypting the IV is fed back to the next operation.

Back 57

Output Feed Back

Front 58

A stream cipher mode where a counter value is used instead of an IV

Back 58

Counter

Front 59

A symmetric key-block cipher that combines the Counter and Cipher Block Chaninig-Message Authentication Code

Back 59

Counter with CBC-MAC

Front 60

The detection of accidental single-bit errors

Back 60

Parity

Front 61

Examples of Stream Ciphers

Back 61

RC4

Front 62

Examples of Block Ciphers

Back 62

DES, AES, CAST, Safer, RC5, RC6, Blowfish, Twofish, Serpent

Front 63

Types of DES

Back 63

DES, Double DES, and Triple DES (DES-EEE3, DES-EDE3)

Front 64

Most popular block cipher that leverages different block and key sizes.

Back 64

AES (Rijndael)

Front 65

Weaknesses of symmetric-key cryptography

Back 65

Key negotiation/exchange distribution, poor scalability, repudiation

Front 66

The first public-key algorithm that allows two entities to negotiate a session key that can be used to exchange secret information without ever revealing their private keys

Back 66

Diffie and Hellman

Front 67

Assure confidentiality and proof of origin.

Back 67

Public Key Algorithms

Front 68

Highly flexible set of encryption protocols (algorithm) used for encryption, digital signatures, and key distribution

Back 68

RSA

Front 69

List of asymmetric algorithms

Back 69

Diffie Hellman, Elgamal, Elliptical Curve, Knapsack

Front 70

Weakness of Asymmetric Key Cryptography

Back 70

Very Slow compared to symmetric

Front 71

Cipher that takes advantage of both symmetric and asymmetric cryptographic techniques

Back 71

Hybrid System Operation

Front 72

These detect accidental and intentional alterations to an encrypted message during transmission. Accidental checks include checksum, parity and Hash. Intentional checks include HMAC, Digital Signature, and CBC-MAC

Back 72

Message Integrity Controls

Front 73

Common Hash Functions

Back 73

Message Digest, Secure Hash Algorithm, HAVAL, RIPEMD, Tiger, WHIRLPOOL

Front 74

Types of Message Authentication Codes

Back 74

HMAC, CBC-MAC, CMAC

Front 75

Uses include non-repudiation of origin, integrity of message, software distribution, email and secure document distribution

Back 75

Digital Signature

Front 76

The processes and procedures for the creation, distribution, protected storage, use, recovery, and destruction of keys

Back 76

Key Management

Front 77

Key Management Operations

Back 77

Dual Control, Split Knowledge

Front 78

Key Distribution Methods

Back 78

Out-of-Band, Public Key Encryption, Key Distribution Center, Certificates

Front 79

The platform to enable the secure transport of documents, e-commerce and email over an insecure network through the implementation of Public Key Cryptography in an organization

Back 79

Public Key Infrastructure

Front 80

Basic Concepts of PKI

Back 80

Binds a person to their public key, Digital signatures are certified by a CA, CA's cross-certify each other for trust, Certificate revocation lists identify canceled certs, X.509 standard for the revocation list layout

Front 81

PKI Trust Models

Back 81

Web of Trust, Hierarchical Trust

Front 82

The art and science of breaking codes

Back 82

Cryptanalysis

Front 83

Type of cipher attack that involves trying all possible keys until finding the one that results in the correct cleartext

Back 83

Brute Force

Front 84

Types of ciphertext attacks

Back 84

Brute Force, Known Plaintext, Adaptive Chosen Plaintext, Ciphertext Only, Chosen Ciphertext, Adaptive Chosen Ciphertext

Front 85

Ciphertext attack where the attacker has both the plaintext and teh ciphertext

Back 85

Know-Plaintext

Front 86

Ciphertext attack, sometimes called batch or indifferent, where the attacker is able to run plaintext through the cryptosystem and obtain the result, thereby being able to analyze the results and determine statistical information about the key

Back 86

Chosen Plaintext

Front 87

Ciphertext attack that modifies the chosen plaintext based on the results of previously chosen plaintext

Back 87

Adaptive Chosen Plaintext

Front 88

Ciphertext attack where attacker has samples of the encrypted text, but may not know the the algorithm, key or the system. Most difficult

Back 88

Ciphertext Only

Front 89

Ciphertext attack where the attacker has access to ciphertext and the system that was used to generate it

Back 89

Chosen Ciphertext Attack

Front 90

Ciphertext attack where attacker has access to the system and can run pieces of ciphertext through and modify the ciphertext to see what the effect of the modification ison the resulting plaintext

Back 90

Adaptive Chosen Ciphertext

Front 91

Stream Cipher Attacks

Back 91

Frequency Analysis and IV or Keystream Analysis

Front 92

Block Cipher Attacks

Back 92

Linear Cryptanalysis, Differential Cryptanalysis, Linear-Differential Cryptanalysis, Algebraic Attacks, Frequency Analysis

Front 93

Attacks Against Hash Functions

Back 93

Dictionary Attack, Birthday Attack, Rainbow Table Attack

Front 94

Attack based on known lists of common words

Back 94

Dictionary Attack

Front 95

Attacks the hash value and the initialization vector. Based on the Birthday paradox

Back 95

Birthday Attack

Front 96

A mathematical analysis that attacks a problem from both ends and attempts to find the solutin by working towards the center of the operation from both sides

Back 96

Meet in the Middle Attack

Front 97

An attack where the attacker intercepts and modifes teh data being transmitted

Back 97

Man in the Middle

Front 98

Common Email Cryptosystems

Back 98

Privacy Enhanced Email (PEM), Pretty Good Privacy (PGP), Secure Multipurpose Internet Mail Extensions (S/MIME)

Front 99

Tools for secure internet Transmissions

Back 99

IPSEC, SSL/TLS, S-HTTP

Front 100

A term from the ISO/IEC 27002 which describes the methodical planning, developing and maintenance of business processes that include the data and processing of the data

Back 100

Information Security Management System

Front 101

A term from the ISO/IEC 27002. A high level description of how security requirements are structured.

Back 101

Information Security Architecture

Front 102

A well-recognized and accepted approach to designing, developing, managing/monitoring and enhancing process, often codified into a standard

Back 102

Best Practice

Front 103

A high level perspective of how business requirements are to be structured and aligned with technology and processes in a comprehensive and manageable way

Back 103

Architecture

Front 104

Functional definition for the integration and development of technology infrastructure into the business process

Back 104

Blueprint

Front 105

A defined approach to the process used to achieve the goals of an architecture based on policy and reflecting the requirements and expectations of the various stakeholders

Back 105

Framework

Front 106

The integrated building blocks that support the goals of the architecture

Back 106

Infrastructure

Front 107

Characteristics of a Good Security Architecture

Back 107

Strategic - meets long term goals,
Holistic - fits into culture, Multiple Implementations - flexible.

Front 108

What are the Enterprise Architecture Frameworks?

Back 108

Zachman Framework (standard), SABSA, ISO 7498-2, ISO/IEC 42010:2007, Open Group Architecture Framework (TOGAF), DoD Architecture Framework

Front 109

What are the CPU and Processor Privilege States?

Back 109

Supervisor (privileged), Problem (user)

Front 110

CPU Process States

Back 110

Running, Ready, Blocked, Masked/Interruptible

Front 111

Common Computer Architecture Layers

Back 111

Application Programs, Utilities, Operating System, Hardware

Front 112

Basic OS Functionality

Back 112

Program execution, Access to I/O devices, Controlled access to files and data, error detection and response, Accounting and tracking, Access for maintenance and troubleshooting

Front 113

Responsible for moving data in and out of memory

Back 113

I/O Controller

Front 114

Software that is permanently embedded in hardware and typically provides low level services and control of hardware

Back 114

Firmware

Front 115

Concurrent performance/interleaved execution of two or more tasks

Back 115

Multitasking

Front 116

Interleaved execution of two or more programs by a processor

Back 116

Multiprogramming

Front 117

Simultaneous execution of two or more more programs by a computer

Back 117

Multiprocessing

Front 118

Computer with two or more processors having common access to main storage

Back 118

Multiprocessor

Front 119

To processors on a single chip

Back 119

Multi Core

Front 120

System designed to track all the possible ways that a business communicates with a customer (touchpoints) so that the relationship can be as interactive as possible

Back 120

Customer Relationship Management System

Front 121

System Architecture Approaches

Back 121

Open, Closed, Dedicated, Single-Level, Multi-Level, Embedded

Front 122

Software-based architecture that provides translation or communication services for applications. Examples are COBRA, DCOM, EJB.

Back 122

Middleware

Front 123

Very high speed storage structures bulit into the CPU chip set and are often used to store timing and state information for the CPU to maintain control over process

Back 123

Registers

Front 124

Very fast memory directly on the CPU chip body.

Back 124

Cache

Front 125

Requirements for Memory Management

Back 125

Relocation, Protection, Sharing

Front 126

Types of Memory Addressing

Back 126

Logical, Relative, Physical

Front 127

Extends apparent memory in a system to accommodate larger program execution space than is possible using only physical memory and involves paging and swapping operations

Back 127

Virtual Memory

Front 128

Virtual memory paging includes?

Back 128

Splitting physical memory into Page Frames, Splitting Processes into Pages, Allocating the required number of page frames

Front 129

The act of dynamically transferring pages between physical memory and the swap space on the disk as needed for efficient program execution

Back 129

Swapping

Front 130

A global mesh of collaborative services. The services offered are independent of each other but have well defined interfaces designed for reuse

Back 130

Service Oriented Architecture

Front 131

Ring Protection Layers

Back 131

Kernel/OS, I/O, Utilities, Applications

Front 132

Includes all the components and their operating process and procedures that ensure that the security policy of the organization is enforced

Back 132

Trusted Computing Base

Front 133

An abstract machine that mediates all access subjects have to objects, toth to ensure that the subjects have the necessary access rights and to protect the objects from unautorized access

Back 133

Reference Monitor

Front 134

The hardware, firmware and software elements of a TCB that implement the reference monitor

Back 134

Security Kernel

Front 135

Active entities - include users, programs processes, logon identifieers

Back 135

Subjects

Front 136

Passive entities, include files programs instructions, data, hardware

Back 136

Objects

Front 137

Security architecture model that addresses confidentiality and allows subjects to read down and write up

Back 137

Bell-LaPadula Model

Front 138

Bell-LaPudula property that states that if you have Read capabilty you can read data at your level of secrecy and the level below it, but you can't read data at a higher level

Back 138

Simple Security Property

Front 139

Bell-LaPudula property that states that if you have Write capability you can write data at your level or a higher level, but not a lower level

Back 139

Star Property

Front 140

Bell-LaPadula property that states if you have both Read and Write capabilities you're resricted to read and write at your level

Back 140

Strong Star Property

Front 141

Security architecture model that addresses integrity. Read up, write down

Back 141

Biba Model

Front 142

Biba model property that states that if you have read capability you can read data at your level of accracy as well as at a higher level, but not a lower level

Back 142

Simple Integrity Property

Front 143

Biba model property that states that if you have write capability you can write data at your level or lower, but not higher

Back 143

Integrity Star Property

Front 144

Biba model property that restricts the avility of a user to request a service or execure a proces which resides at a higher level of integrity than the user

Back 144

Invocation Property

Front 145

Security architecture integrity model that addresses all three integrity goals, defines well-formed transactions, and provides separation of duties

Back 145

Clark Wilson Model

Front 146

Security architecture integrity model property that defines teh subject, program, and object relationship

Back 146

Access Triple

Front 147

Security architecture confidentiality model, also called the Chinese Wall, that defines the rules for separation to prevent conflict of interests

Back 147

Brewer and Nash Model

Front 148

List of Certification bodies for secure acquisition of products

Back 148

TCSEC (Orange Book), ITSEC (EU), Common Criteria (current body)

Front 149

the common criteria method of measuring the confidentiality, integrity, and availability that a system provides

Back 149

Evaluation Assurance Level (EAL 1-7)

Front 150

The EAL used by corporate entities

Back 150

EAL 3

Front 151

The EAL used by the military

Back 151

EAL 4 and 5

Front 152

The EAL used by nobody, too complex

Back 152

EAL 6 and 7

Front 153

A set of software, firmware, and hardware to be evaluated defined in the common criteria context

Back 153

Target of Evaluation (TOE)

Front 154

A general set of security requirementes for a category of products which meet similar consumer needs for security defined in the common criteria context

Back 154

Protection Profile

Front 155

Contains the IT security objectives of a specific TOE and defines the functional and assurance measures offered by that TOE in common criteria context

Back 155

Security Target (ST)

Front 156

Popular Security Management Frameworks

Back 156

ISO 27001, ITIL, COSO, CMMI

Front 157

Security Management Framework that focuses on IT services

Back 157

ITIL

Front 158

Security Management Framework that describes a unified approach for evaluation of internal control systems that management has designed to provide reasonable assurance of achieving goals

Back 158

Committee of Sponsoring Organizations (COSO)

Front 159

Security Management Framework developed by SEI that is based on TQM concepts and a continuous improvement

Back 159

Capability Maturity Model

Front 160

List of organizations that provide info for software vendors and the public that is intended to create secuire environments for software development

Back 160

Systems Security Engineering-Compatibility Maturity Model Integration (SSE-CMMI), Web Application Consortium (WASC), Build Security In (BSI), ISO-IEC 27034

Front 161

The process of controlling software by managing the versions of all components and the relations between them

Back 161

Software Configuration Management (SCM)

Front 162

Stages of the SLC

Back 162

Requirements, Design, Development, Test, Production, Decommissioning, Disposal

Front 163

Waterfall, Spiral Method, Clean Room, Structured Programming Development, Iterative Development, Join Analysis Development, Prototyping

Back 163

Software Development Methods

Front 164

Interpreted (Platform Independent) Programming Languages

Back 164

REXX, Postscript, Perl, Ruby, Python

Front 165

Compiled (Platform Specific) Programming Languages

Back 165

COBOL, Fortran, Basic, Pascal, C, ADA, C++, Java, C#, Visual Basic

Front 166

A program that translates an assembly language programinto machine language

Back 166

Assembler

Front 167

Translates a high level language into machine language

Back 167

Compiler

Front 168

Translates a program statement by statement

Back 168

Interpreter

Front 169

A weakness or attack that puts more data than is expected in a buffer which spills into another buffer

Back 169

Buffer Overflow

Front 170

An attack that inserts a series of SQL statements into a query by manipulating data input into an application

Back 170

SQL Injection

Front 171

An attack or flaw that occurs whenever an application takes user supplied data and sends it to a web browser without first validating or encoding that content. Allows attackers to execute script in the victim's browser that can hijack user sessions, deface web sites, and introduce worms

Back 171

Cross Site Scripting

Front 172

An error in software code that points to an object that has been deleted

Back 172

Dangling Pointer

Front 173

An Forced Browsing attack where a user can guess a link and gan access to hidden or special URL's

Back 173

Invalid Hyperlink

Front 174

Attacks that reveal the network address translation ID and allow an attacker to peruse network addresses located inside the local network

Back 174

Javascript Attacks

Front 175

Attack - Javascript runnning in the user's browser steals the webs surfing history, allowing the attacker to create look alike spoofed sites containing malware or infecting the sites the user is visiting

Back 175

History Stealing

Front 176

Attack - Javascript can force the browser to make certain types of requests to the internal IP addresses even if the browsers Javascript has been disabled

Back 176

Intranet Port Scans

Front 177

A contract between a caller (programmer) and a call-ee (pre-existing application). Allows caller to send requests to an operating system, library or service

Back 177

Application Programming Interface (API)

Front 178

Software where the source code is available to the public

Back 178

Open Source

Front 179

Two types of publishing policies for API's

Back 179

Freely available, Controlled

Front 180

Application security principle that states that should anything fail in a way that is secure and not leave everything open

Back 180

Fail Secure

Front 181

Application security principle that requires that the faileure of part of a system will not result in the failure of teh rest of the system. A system failing open is good for availability, but not for confidentiality

Back 181

Fail Safe

Front 182

Programming method that reuses code and reduced development time. C++ is an example

Back 182

Object Oriented Programming (OOP)

Front 183

In OOP, templates for objects

Back 183

Classes

Front 184

In OOP, Instances of classes

Back 184

Objects

Front 185

In OOP, an object that is called by another object or program derives its data and functionality from the calling object

Back 185

Inheritance

Front 186

In OOP, when different objects respond to the same command, input, or message in different ways

Back 186

Polymorphism

Front 187

In OOP, creating a new version of an object by changing it's attributes. A technique used to prevent inference violations by allowing different versions of the same info to exist at different classification levels

Back 187

Polyinstantiation

Front 188

The four major protocols used for distributed programming

Back 188

DCOM, SOAP, CORBA, EJB

Front 189

List of Transaction Integrity Controls

Back 189

Edit Checks, Balancing, Data/Input Validation, Error Handling/Information Leakage, Logging/Auditing, Cryptography, Secure Code Environment, Session Management

Front 190

Transaction Integrity - ensuring input data is within acceptable ranges or meet criteria

Back 190

Edit Checks

Front 191

Transaction Integrity - ensuring the transactions completed properly by matching input and output

Back 191

Balancing

Front 192

Transaction Integrity - confirmation that action rerquested by the user was intentional, the "are you sure?" box

Back 192

Data Input Validation

Front 193

Transaction Integrity - ensuring that errors are handled correctly and that errors do not provide an attacker wtih infor on the operatin of the system

Back 193

Error Handling/Information Leakage

Front 194

Transaction Integrity - all access to sensitive data or changes to daga should be logged to the user or process that initated the request

Back 194

Logging/Auditing

Front 195

Transaction Integrity - ensures copies of source and object code are preserved and protected

Back 195

Secure Code Environment

Front 196

Transaction Integrity - login/logout, problems of unauthorized acces can arise when a user leaves a session open or closes a browser without logging out first

Back 196

Session Management

Front 197

Malware and Attack Types

Back 197

Injection Flaws, Input Manipulation/Malicious File Execution, Broken Authentication and Session Management, Crptographic, Denial of Service, Hijacking, Informatin insecure communications, infrastructure, misconfiguration, race condition

Front 198

Application attack type - occurs when user supplied data is sent to an intrpreter as part of a command, query, or data. SQL injection is an example

Back 198

Injection Flaw

Front 199

Application attack type - Code is vulnerable to remote file inclusion that allows attacker to include hostile code and data

Back 199

Input Manipulatin/Malicoius File Execution

Front 200

Application attack type - Attackers compromise passwords, keys or authentication tokens to assume other users identities

Back 200

Broken Authentication and session Management

Front 201

Application attack type - Web applications rarely properly use cryptographic functions to protect data and credientidals, Attacker can use poorly protected data to conduct id theft and other crimes such as credit card fraud

Back 201

Cryptographic Attack

Front 202

Application attack type - Consuming the resources on the system and thus limiteing the resources for the use of others. This is an attack against availability

Back 202

Denial of Service

Front 203

Application attack type - A post session setup and typically post authentication attack wherein the aattcker assumes someone elses valid credientials. A cross site request forgery is an example

Back 203

Hijack

Front 204

Application attack type - forces a logged on victims browser to send a preauthenticated request to a vulnerable web application which thn forces the victim's browser to perform a hostile action to the benefit of the attacker

Back 204

Cross Site Request Forgery

Front 205

Application attack type - when sensitive info is sent unencrypted over insecure channels, attackers will be able to read it. Information disclusure or info leakage and improper error handling can disclose sensitive info

Back 205

Information insecure Communications

Front 206

Application attack type - these are protocol flaws such as lack of authentication in IP or DNS

Back 206

Infrastructure

Front 207

Application attack type - A zero or low security posture due to a setup error by administrator

Back 207

Misconfiguration

Front 208

Application attack type - when processes carry out their tasks on a shared resource in an incorrect order. Time of Check/Time of Use (TOC/TOU) is an example.

Back 208

Race Condition

Front 209

List of Malware

Back 209

Keystroke Logging, adware and spyware, spam, phishing, botnets, remote access trajan, url manipulation, maintenance hooks, privileged programs

Front 210

A software of hardware tool for capturing data entry

Back 210

key logger

Front 211

Generates unwanted or irrelevant advertising or reports on user activities. Installed with other sofware as a separate function. Intended as marketing not malice

Back 211

Adware/Spyware

Front 212

Unwanted email solicitation

Back 212

Spam

Front 213

Attempts to trick a uset into divulging personal info for the purposes of fraud or id theft. Counterfeit messages or websites mimicking banks

Back 213

Phishing

Front 214

Large numbers of compromised machines used as a resource to perform DDoS attacks

Back 214

Botnet

Front 215

Inappropriate over the network control of a host

Back 215

Remote Access Trojan

Front 216

Used to redirect users to an unintended site

Back 216

URL Manipulation

Front 217

Backdoors or Trapdoors coded into softwre that enables programmers to re-enter the system and perform admin functions

Back 217

Maintenance Hooks

Front 218

The oldest database model that allows data to be stored in a manner that groups all related data. Stores records in a single table, parent/child relationships, single tree

Back 218

Hiearchical DBMS

Front 219

DB model that represents is records in teh form of a netwrk of records and sets that are related to each other, forming a network of links

Back 219

Network DBMS

Front 220

Most popular DB model. Data is structured into mutlple tables

Back 220

Relational Database

Front 221

In a relational db, a column contains?

Back 221

Variables (attributes)

Front 222

In a relational db, the rows contain?

Back 222

Records (tuples)

Front 223

In a relational database table, this column must exist, must be unique, and must not be empty

Back 223

Primary Key

Front 224

An attribute in one table that is also the primary key in another table is called a?

Back 224

Foreign Key

Front 225

Combines all the data from vartious databases into one large data container

Back 225

Data warehouse

Front 226

A database or collection of databases designed to help managers make strategic decisions about heir business. Smaller than data warehouses

Back 226

Data Mart

Front 227

List of Knowledge Discovery Methods in Databases

Back 227

Probabilistic Model, Statistical Approach, Classificatoin Approach, Deviatin and Trend Analysis, Nerual Networks, Expert System Approach, Hybrid Approach

Front 228

Database Discovery Method - useful for applications involving uncertainty such as those used in planning and control systems

Back 228

Probabilistic Model

Front 229

Database Discovery Method - used to generalize patterns in the data and to contstruct rules from the noted patterns. Example: On-line Analytical Processing (OLAP)

Back 229

Statistical Approach

Front 230

Database Discovery Method - Uses pattern discovery and data cleaning and may reduce a large database to only a few specific records

Back 230

Classification Approach

Front 231

Database Discovery Method - example: an IDS that filters a large volume of data so that only the pertinent data is analyzed

Back 231

Deviation and Trend Analysis

Front 232

A system that is able to learn from examples and have the capability to generalize.. Susceptible to supersititious learning

Back 232

Neural Network

Front 233

Uses a knowledge base and an algorithm based ont he operation of of a human expert

Back 233

Expert System

Front 234

The ability of a user with limited access to deduce info from observing authorized info in a database

Back 234

Inference

Front 235

The ability to combine data classified at a lower level in a db in order to learn something classified at a higher level

Back 235

Aggregation

Front 236

Describes the characteristics or semantics of data. Contains info about a data element such as the content, location and physical attributes of the data

Back 236

Metadata

Front 237

Searching the database in a round about manner rather than simply and directly...queries that would otherwise be restricted via permitted access

Back 237

Query Attack

Front 238

Attack that takes advantage of multiple paths ro the info. The application may be secured by access controls, but the data file is stored on the disk and accessible via system utilities

Back 238

Bypass Attack

Front 239

A control used to protect multi-level databases from inference and affregation by allowing for two values to exist for a single field that correspond to two different user clearances

Back 239

Polyinstantiation

Front 240

The analysis of data in a db that reveals hidden values int he data

Back 240

Data Mining

Front 241

A form of db access control wherein each user is given access to specific data objects. Object priviliges, System privileges and role security

Back 241

Grants

Front 242

If grantor's permissions are removed so are the permissions of eeryone below them. Pyramid scheme

Back 242

Cascading Permissions

Front 243

Used to control read and write access to specific rows of data in relational systems or objects in object oriented systems

Back 243

Lock Controls

Front 244

A db control that will filter the data available to a user according to their access permissions.

Back 244

Constrained View

Front 245

Allows db admins to specify access control policy based on object features and attributes. Uses an arbiter program. Example: web filter

Back 245

Content Based Access Controls

Front 246

This writes any and all changes that have occured to the data during the current transaction to the database and releases any locks that have been put on data so that changes are now availabel for other transactions

Back 246

Commit Statement

Front 247

A transaction that is only allowed after a the client requests permission to make change, database approves change, but does not make change until the client returns a reply indicating transaction completed correctly

Back 247

Three Phase Commit Protocol

Front 248

A database cleanly returning to a previous state or last commit point if a transaction does not complete successfully

Back 248

DB Rollback

Front 249

A transaction by transactin listing of what has occurred in teh database. Critical to the rollback process

Back 249

Journals/Logs

Front 250

Elements of the ACID test

Back 250

Atomicity, Consistency, Isolation, Durability

Front 251

ACID test mnemonic

Back 251

All Changes are Invisible until Done

Front 252

List of Database Interface Languages

Back 252

SQL, ODBC, XML, OLE, Active X Data Object

Front 253

An executible file that contains a function that can be called from multiple programs

Back 253

Dynamic Link Library (DLL)

Front 254

Methodology of an attack, Common steps

Back 254

Target Acquisition, Target Analysis, Target Access, Target Appropriation

Front 255

Open System Interconnect (OSI) Reference Model mnemonic

Back 255

People (Physical), Don't (Data Link), Need (Network), To (Transport), Smoke (Session), Pot (Presentation), Anymore (Application)

Front 256

The process of wrapping data using headers and sometimes tralers before sending it on to the next lower protocol on the stack

Back 256

Encapsulation

Front 257

Layers of the TCP/IP Model

Back 257

Network Interface, Internetworking, Host to Host, Application

Front 258

OSI layer that describes the networking hardware, the format of the communcications as electrical signals and bits, bytes or optical pulses, as well as network interfaces and caling

Back 258

Physical Layer

Front 259

What type of waves to analog and digital communciations produce?

Back 259

Sine and Square

Front 260

Two properties of an analog signal

Back 260

Frequency and Amplitude

Front 261

Two states of Digital communication

Back 261

0 = off, 1 = on

Front 262

5 types of Network Topologies

Back 262

Bus, Star, Ring, Mesh, Tree

Front 263

Topology that has a single point of failure, is scalable, and node failure will not affect the network. Communications are Probabalistic. One station speaks, all stations hear

Back 263

Bus Topology

Front 264

Network topology where a failure will split the network, is scalable, and a node failure does not affect network. Devices connect to a branch on the network

Back 264

Tree Topology

Front 265

Network topology that has a single point of failure unless dual rings (FDDI) are used for failover. Stable and time predictable. Data is transmitted in one direction on simple rings. Upstream to downstream traffic only

Back 265

Ring Topology

Front 266

Network topology requiring a lot of cable, is complex, and not scalable. Provides high level of redundancy. Every node in network is connected to every other node

Back 266

Mesh Topology

Front 267

Network Topology where hubs have full mesh and remotes have direct connect

Back 267

Partial Mesh Topology

Front 268

Network topology if central device fails, network fails. Failure of node will not affect network, scalable and flexible. Each node connected directly to a central device such as hub, switch, router. Most popular

Back 268

Star Topology

Front 269

Two star networks connected

Back 269

Distributed Star

Front 270

Rate of data transmission. Fiber optic cables provide the best

Back 270

Throughput

Front 271

Throughput, Distance between devices, data sensitivity, environment, cost

Back 271

Cable Selection Considerations

Front 272

One of the simplest and cheapest cabling options. Easy to tap, and susceptible to enviromnental stress

Back 272

Twisted Pair

Front 273

Two types or twisted pair cabling

Back 273

Shielded and Unshielded

Front 274

Cable type that uses a central conductor that is surrounded by an insulator and then a groupding braid of wire

Back 274

Coaxial Cable

Front 275

Three components that make up a fiber optic cable

Back 275

Light source, Light detector, optical cable

Front 276

Two types of light sources in fiber optic cable

Back 276

Light Emitting Diode (LED) and Diode Lasers

Front 277

2 types of optic cable in fiber optic cables

Back 277

Multimode Fiber, Single Mode Fiber

Front 278

Which type of optical fiber cable transmits better over long distances

Back 278

Single Mode Fiber

Front 279

Optical, MIcrowave, IRDA, Bluetooth, Satellite, 802.16, and 802.11 are examples of what?

Back 279

Wireless Transmission Technologies

Front 280

802.11a/h, Phones transmit at what frequency?

Back 280

5Ghz

Front 281

802.11b/g, Bluetooth, Phones transmit at what frequency?

Back 281

2.4GHz

Front 282

Cordless Phones, Baby Monitors, and Toys transmit at what frequency?

Back 282

900MHz

Front 283

Provide centralized management and provide a physical cross-connect point for devices

Back 283

Patch Panel

Front 284

These physical layer devices convert a digital signal to analog, modulate and demodulate, to be carried over phone lines. Provide little security. Susceptible to war dialing

Back 284

Modems

Front 285

Which DSL implementatoin is most popular?

Back 285

ADSL because the downstream has more bandwidth than upstream

Front 286

Physical device used to implement a physical star/logical bus topology. All devices can read and moaybe modify traffic of other devices

Back 286

Hub

Front 287

Physical device that boosts signal. Can be used in all types of networkds

Back 287

Repeaters

Front 288

Physical layer device, converts wireless signals into wired signals and signals are converted from one physical media type (radio waves) to another (copper)

Back 288

Wireless Access Point (WAP)

Front 289

The following are examples of what? Rj-11, RJ-45, BNC, RS-232

Back 289

Cable Connectors

Front 290

The Telecommunications Industry Association (TIA) and Electronic Industires Association (EIA) define what?

Back 290

Cabling Standards

Front 291

A device used to block or contain readio and electromagnetic signals consisting of a thin sheet or mesh of conducting material enclosing a particular space

Back 291

Faraday Cage

Front 292

This OSI layer connects compouters to physical networks and passes info between physically adjacent devices. Converts data from a signal into a frame and transmits frames to devices

Back 292

Data Link Layer

Front 293

This encryption only protects info between two connected devices and must encrypt and decrypt to encrypt information between end nodes on a network. Applied at the Data Link layer

Back 293

Link Layer Encryption

Front 294

Two sublayers of the Data Link Layer

Back 294

Logical Link Control (LLC) and Media Access Control (MAC)

Front 295

Sublayer of the Data Link layer that manages connections between two peers, provides error and flow control and cntrol bit sequencing. Faces back towards computer

Back 295

Logical Link Control (LLC)

Front 296

Sublayer of the data link layer that tramsmits and recieves frames between peers. Logical topologies and hardware addresses are defined here. This sublayer inrefaces with the physical media

Back 296

Media Access Control (MAC)

Front 297

Type of data link layer communication that is best for high-speed, high volume data, provides robust error checking through cyclical redundancy checks (CRC), and uses a timing mechanisms to synchronize the transmission of data.

Back 297

Synchronous Communication

Front 298

Type of data link layer communication that is used by modems and dumb terminals, has high overhead due to stop, end, and parity bits. No clocking mechanism used

Back 298

Asynchronous

Front 299

A transmission that is sent from one host to one receiving host. ISDN is an example

Back 299

Unicast

Front 300

A transmission that is sent from one host to several defined recipients. Uses IGMP protocol. Videoconference is an example.

Back 300

Multicast

Front 301

A transmission that is sent from one host to all.

Back 301

Broadcast

Front 302

T, E, and OC are all types of what?

Back 302

Carriers

Front 303

Type of network that is used by the Plain Old Telephone Service (POTS), ISDN and PPP leased lines.. Establishes a dedicated circuit between endpoints. Endpoints have exclusive use of the circuit

Back 303

Circuit-Switched Network

Front 304

Type of network is ideal for bursty transmissions. It is the most popular for networks. Data is deivided into packets and transmitted on a shared network

Back 304

Packet-Switched Network

Front 305

Type of circuit that provides a connection between endpoints over high bandwidth, multi-user networks which causes the network to act like a circuit-switched network

Back 305

Virtual Circuits (Permanent and Switched)

Front 306

Contention-based architecture. Form of control that must be established to determine which device may transmit

Back 306

Carrier Sense Multiple Access (CSMA)

Front 307

Type of Carrier Sense Multiple Access (CSMA) that requires devices to announce their intention to transmit by broadcasting a jamming signal to avoid collisions. Device waits to ensure all devices receive jamming signal then broadcasts

Back 307

Carrier Sense Multiple Access with Collision Avoidance (CSAM/CA)

Front 308

Type of Carrier Sense Multiple Access (CSMA) that requires devices to listen for a carrier before transmitting data. If collision occurs each device will wait for a randomly generated interval of time

Back 308

Carrier Sense Multiple Access with Collision Detection (CSAM/CD)

Front 309

An alternative to Carrier Sense Multiple Access that avoids collisions by allowing a device (slave) to transmit on the network only when it is asked by a master device. Used mostly in mainframe protocols

Back 309

Polling

Front 310

An alternative to Carrier Sense Multiple Access that only allows one device on LAN to transmit at a time to avoid collisions. Device must posses token to transmit

Back 310

Token Passing

Front 311

Layer 2 devices that gileter traffic between segments based on MAC addresses. Can connect LANs with unlike media types (cabling). Does not reformat frames (only connect identical architectures ie. ethernet to ethernet

Back 311

Bridge

Front 312

Type of bridge that allows network admins to connect two different kinds of Layer 2 architectures. ex. Ethernet to Data Link

Back 312

Encapsulating Bridges

Front 313

Multiport layer 2 devices that connect LAN devices. Forwards frames onlyl to specified MAC addresses.

Back 313

Switches

Front 314

Combining several signals into a single data stream

Back 314

Multiplexing

Front 315

The most popular LAN architecture that supports bus, star and point to point topoloties. Currnetly supports speeds up to 1000Mbps.

Back 315

Ethernet

Front 316

What CSMA type does ethernet use?

Back 316

CSMA/CD

Front 317

Layer 2 protocol used to resolve Layer 3 IP addresses with the Layer 2 MAC address

Back 317

Address Resolution Protocol (ARP)

Front 318

Layer 2 protocol used to resolve Layer 2 MAC address with the Layer 3 IP address. Reverse of ARP.

Back 318

Reverse Address Resolution Protocol (RARP)

Front 319

Provides a standard method of encapsulating Network Layer protocol info over point to point links. Defines an extensible link protocol which allows authentication protocol for authenticating its peer before allowing network layer protocols to transmit over the link. PAP and CHAP are two authentication protocols

Back 319

Point to Point Protocol

Front 320

Layer 2 authentication protocol that transmits password in the clear, but password db is encrypted and implementaiton is cheap. User's login credentials are transmiited and begining of call and validated by receiving device

Back 320

Password Authentication Protocol (PAP)

Front 321

Layer 2 authentication protocol that periodically revalidates user to reduce session-hijacking. Password db is unencrypted. Password is sent as a one-way hash coupled with nonce (salt)

Back 321

Challenge Handshake Authentication Protocol (CHAP)

Front 322

Difference between CHAP and MSCHAP?

Back 322

MSCHAP stores password as hash with nonce

Front 323

Layer 2 authentication protocol used with wireless networks and PPP connections. Used by WPA, WPA2

Back 323

Extensible Authentication Protocol (EAP)

Front 324

Proprietary version of Extensible Authentication Protocol developed by MS, CISCO, and RSA that provides better security

Back 324

Protected Extensible Authentication Protocol (EAP)

Front 325

OSI layer that moves info between two hosts that are not physically connected. Uses logical addressing

Back 325

Network Layer

Front 326

An attack that allows maliscious users to see traffic from other VLANs

Back 326

VLAN hopping

Front 327

This type of LAN is established to help devices that communicate ofter, communicate faster

Back 327

VLAN

Front 328

A cloud of switches on the carrier providers premises that customers use for connectivity. Customers share the resources and it provides better error protection than x.25

Back 328

Frame Relay

Front 329

A connection-oriented suite of protocols designed to transmit data, voice, and video over the same network at high speeds. Uses virtual circuits. Guarantees QOS, but not delivery of all cells

Back 329

Asynchronous Transfer Mode (ATM)

Front 330

Virtual Circuit classification - The circuit's cells are transmitted at a contstant rate

Back 330

Constant Bit Rate

Front 331

Virtual Circuit classification - The circuit's cells are transmitted within a specified range, bursty

Back 331

Variable Bit Rate

Front 332

Virtual Circuit classification - The circuit's cells steal bandwidth that is not being used by other circuits

Back 332

Unspecified Bit Rate

Front 333

Virtual Circuit classification - The circuit's throughput is adjusted based on feedback achieved by monitoring the available network bandwidth

Back 333

Available Bit Rate

Front 334

The use of tags by Layer 3 switches to allow for faster routing and address service requirements for the differnt packet types. Diffrent priority info is placed into the tags to help ensure that the time sensitive traffic has a higher priority providing QOS

Back 334

Multiprotocol Label Switching (MPLS)

Front 335

A dedicated path through a network

Back 335

Tunnel

Front 336

A tunnel between two hosts that allows them to communicate securely over an untrusted network, usually encrypted

Back 336

Virtual Private Network (VPN)

Front 337

Used to prioritize traffic. Datastreams such as VIOP and streaming media benefit from this

Back 337

Qaulity of Service (QOS)

Front 338

Devices that live on Layer 3 and move info across a network from a source to a destination. Use protocols to find the best route

Back 338

Routers

Front 339

Layer 3 devices that change the address of traffic from an internal IP to an external IP and vice versa, usually at the external router or firewall

Back 339

Network Address Translation (NAT)

Front 340

Translates the source port number in the packet to a diffrent unique value. Maps communications to a unique port to extend NAT capability. Many to one.

Back 340

Part Address Translation (PAT)

Front 341

A Network Address Translation that is one to one

Back 341

Static NAT

Front 342

A NAT that is many to few

Back 342

Dynamic NAT

Front 343

Layer 3 device that filters traffic based on rule sets

Back 343

Firewall

Front 344

2 types of filters that firewalls apply

Back 344

Address, Service, Static Packet, Stateful Inspection/Dynamic Packet Filtering

Front 345

Firewall filtering that examines each packet without regard to the packet's context in a session. Signifigant disadvantage is ports are either open or closed

Back 345

Static Packet Filtering

Front 346

Firewall filtering that examines each packet in the context of a session allowing it to make adjustments to the rules to accomodate legiitmate traffic

Back 346

Stateful Inspection/Dynamic Packet Filtering

Front 347

5 types of firewall rules

Back 347

Stealth, Cleanup, Silent, Negate, Implied

Front 348

A type of firewall rule that is used to protect the firewall itself from being attacked

Back 348

Stealth Rule

Front 349

A firewall rule used as the last rule in the rulebase. Used to drop and log any traffic that does not met the rules preceding it

Back 349

Cleanup Rules

Front 350

A firewall rule used to drop Noisy traffic without logging it. Reduces volume of data in logs and reduces response packets

Back 350

Silent Rules

Front 351

A firewall rule used instead of an * rule that would permit excessive access

Back 351

Negate Rules

Front 352

A firewall rule that is the first rule and supersedes all rules below it. Typically allowing specific services

Back 352

Implied Rules

Front 353

Type of server placed at internet gateways to hide the internalnetwork behind a single IP address and prevent direct communication betwen internal and external hosts

Back 353

Proxy Server (Firewall)

Front 354

Two Kinds of Proxies

Back 354

Circuit-Level and Application Level

Front 355

Type of proxy that creates a conduit through which a trusted host can communicate with an untrusted host to eliminate traffic inspection and overhead

Back 355

Circuit Level Proxy

Front 356

Type of proxy that relays traffic from a trusted host running a specific app to an untrusted server. Adds overhead. Web proxy (web application firewall) servers are common. Supports only one protocol

Back 356

Application Level Proxy

Front 357

Segmenting (screening) networks into domains of trust to enforce security policies

Back 357

Network Partitioning

Front 358

Routers that connect networks at their perimeter points. Prevent IP spoofing attacks

Back 358

Boundary Routers

Front 359

A device, commonly a firewall, that has two interfaces, one facing the external and the other facing the internal network

Back 359

Dual Homed Host

Front 360

A computer system that is usually located in a place on the network that is vulnerable to attack, perimeter connector

Back 360

Bastion Host

Front 361

A screened subnet that allows an organization to give external hosts limited acces to public resources such as the company website

Back 361

DMZ

Front 362

A type of DMZ configuration wherethe firewall is configured with a third network interface for the DMZ. Not good for security, single point of failure

Back 362

Three-Legged Firewall

Front 363

Network layer protocol that has teh ability to route info globally, send packets over a network by subdividing them, is unreliable

Back 363

Internet Protocol (IP)

Front 364

What are the two parts of an IP address

Back 364

network and host

Front 365

How many bits are used in IPv4 and IPvv6

Back 365

32 bits and 128 bits

Front 366

IP addresses are grouped into?

Back 366

Classes and subnets

Front 367

What are the classes of IP?

Back 367

Class A - Class E

Front 368

The logical division of large network address ranges into small logical networks

Back 368

Subnetting

Front 369

The logical aggregation of several small newtork addresses

Back 369

Supernetting (classless inter-domain routing (CIDR)

Front 370

Protocol that dynamically assigns IP's to workstations

Back 370

Dynamic Host Configuration Protocol (DHCP)

Front 371

Workflow of the DHCP request and lease process

Back 371

DHCPDiscover, DHCPOffer, DHCPRequest, DHCPAck

Front 372

Advantages of IPv6

Back 372

Larger address space, IPsec offering confidentiality and integrity, QOS, faster throughput

Front 373

Protocol used for the exchange of control messages between hosts and gateways and is used for diagnostic tools such as ping and traceroute.

Back 373

Internet Control Message Protocol (ICMP)

Front 374

An attacker telling a host to to use the attacker's machine as the default route and then forwarding the traffic to the router is an example of what two types of attacks?

Back 374

ICMP Redirect Attack and Man in the Middle

Front 375

A diagnostic tool that displays the path a packet traverses between the source and distination hosts

Back 375

Traceroute

Front 376

A basic network mapping technique which helps narrow the scope of a planned attack

Back 376

Ping Scanning

Front 377

Protocol used to manage multicasting groups. Hosts send these to multicast agents to join and leave groups

Back 377

Internet Group Management Protocol (IGMP)

Front 378

Protocol that allows users to securely access resources on remote compouters over an encrypted tunnel. Services include remote logon, file transfer, and command execution

Back 378

Secure Shell (SSH)

Front 379

Key advantage that SOCKS and SSL VPN's have over other VPN's?

Back 379

Use of Proxy Servers

Front 380

A suite of protocols for communicating security with IP by providing mechanisms for authentication and encryption

Back 380

IP Security (IPSec)

Front 381

List of features that make up IPSec

Back 381

Authentication Header (AH), Encapsulating Security Payload (ESP), Security Parameter Index (SPI), Security Associations, Transport Mode/Tunnel Mode, Internet Key Exchange (IKE)

Front 382

Part of IPSec that is used to guarantee the id of the sending node and ensure that the transmitted data has not been tampered with. Uses a hash. Provides integrity.

Back 382

Authentication Header (AH)

Front 383

Part of IPSec that encypts IP packts for confidentiality and ensures packets's integrity. Provides confidentiality and integrity

Back 383

Encapsulating Security Payload (ESP)

Front 384

What are the four parts of Encapsulation Security Payload in the IPSec process?

Back 384

ESP Header, ESP Payload, ESP Trailor, Authentication

Front 385

Part of the IPSec ESP that contains info showing which security association to use and the packet sequence number

Back 385

ESP Header

Front 386

Part of the IPSec ESP that contains the encrpted part of the packet. Typcially uses a symmetric algorithm for little overhead

Back 386

ESP Payload

Front 387

Part of thte IPSec ESP that includes paddding (filler bytes) to align fields

Back 387

ESP Trailor

Front 388

Part of the IPSec ESP that contains the hash of the ESP packet

Back 388

Authentication

Front 389

An arbitrary number assigned to an IPSec connection by the administrator to identify the connection

Back 389

Security Parameter Index (SPI)

Front 390

In IPSec, establishes the credentials of the two communicationg parties and defines the mechanisms that will be used to communicate

Back 390

Security Association

Front 391

IPSec communication mode used for end-to-end protection between a client and server. IP payload is protected

Back 391

Transport Mode

Front 392

IPSec communication mode used for network connections (ex. firewall to firewall) where the IP payload and header are protected

Back 392

Tunnel Mode

Front 393

Protocol IPSec uses to negotiate and establish quhtenticated keying materials for security associations

Back 393

Internet Key Exchange

Front 394

A VPN protocol that urns over other protocols. Relies on generic routing encapsulation (GRE) to build the tunnel. Somewhat insecure

Back 394

Point to Point Tunneling Protocol

Front 395

VPN protocol that allows callers over a serial line using PPP to connect to a remote network over the internet. Does not provide encryption but can be encrypted using IPSec tunnel mode

Back 395

Layer 2 Tunneling Protocol

Front 396

These operate at Layer 3 and use algorithms to help routers determine the best path for traffic through networks. They populate the routing table on the routers

Back 396

Routing Protocols

Front 397

List of Routing Protocols

Back 397

Routing Information Protocol (RIP), Virtual Router Redundancy Protocol (VRRP), Open SHortest Path First (OSPF), Exterior Gateway Protocol (EGP), Border Gateway Protocol (BGP), INtermediate System to INtermediate System (ISIS), Interior Gateway Routing Protocol (IGRP), Enhanced IGRP (EIGRP)

Front 398

Key shortcoming in IP

Back 398

Lack of authentication (allows spoofing)

Front 399

Types of IP Fragmentation Attacks

Back 399

Teardrop, Overlapping Fragment Attacks

Front 400

Are IP Fragmentation Attacks a risk to patched systems?

Back 400

No

Front 401

What category of attack are IP Fragmentation Attacks intended to cause

Back 401

Denial of Service

Front 402

Type of attack, when the target host attempts to reconstuct the packet it calculates a negative number for the fragment length causing it to crash

Back 402

Teardrop

Front 403

Attack used to subvert packet filters that only inspect the first fragment of a fragmented packet. Involves sending a harmless first fragment and then sending other packses that oeverwrite the first fragment with malicious data, bypassing the packet filter

Back 403

Overlapping Fragment Attack

Front 404

Attack where packets are sent with a bogus source address (IP). Causes multiple open handshakes left on the server and clogs server

Back 404

IP Address Spoofing

Front 405

Exploit where attacker specifies the path rather than the router. Fix by blocking sour-routed packets and disable source routing from hosts.

Back 405

Source-Routing Exploit

Front 406

Attack where the attacker sends an ICMP Echo Rerquest with a spoofed source address of teh victim to a network's broadcast address. Victim is overloaded with ICMP Echo Replies

Back 406

Smurf Attack

Front 407

Attack where the attacker sends a UDP Echo Rerquest with a spoofed source address of teh victim to a network's broadcast address. Victim is overloaded with UDP Echo Replies

Back 407

Fraggle Attack

Front 408

Attack that is based on a misconfigured ICMP packet that is 64K. Crashes system

Back 408

Ping of Death

Front 409

Network layer that provides data communication between hosts and is concerned with the information payload. Information delivery is guaranteed and flow control and error recovery are provided

Back 409

Transport Layer

Front 410

A transport layer protocol - connection oriented mode where info delivery is guaranteed and flow control and error recovery are provided

Back 410

Transmission Control Protocol (TCP)

Front 411

A transport layer protocol - connectionless mode where due to concerns such as performance no delivery or eror recovery is guaranteed

Back 411

User Datagram Protocol (UDP)

Front 412

What does SYN stand for?

Back 412

Synchronize

Front 413

What does ACK stand for?

Back 413

Acknowledge

Front 414

What does FIN stand for?

Back 414

Finish

Front 415

What does RST stand for?

Back 415

Reset

Front 416

What is a SYN, a SYN/ACK and and ACK called?

Back 416

Three-way Handshake

Front 417

Total number of port options

Back 417

65,536

Front 418

Ports 0 - 1023. Can only be used by privileged processes and users

Back 418

Well Known Ports

Front 419

Ports 1024 - 49151

Back 419

Registered Ports

Front 420

Ports 49152 - 65536. Can be used freely by applications

Back 420

Dynamic/Private Ports

Front 421

Version of SSL that provides mutual authentication, encryption, integrity through the use of hashed message authentication codes

Back 421

Transport Layer Security (TLS)

Front 422

A DoS attack where the attacker sends a large number of initial packets with the SYN option but doesn't reply to the SYN/ACK resulting in the victim hot reaching limit on half open three way handshakes

Back 422

SYN Flood

Front 423

The act of probing for TCP services on a machine

Back 423

Port Scanning

Front 424

Also called TCP half scanning. No complete connection is opened; instead only the initial stpes of the handshake are performed. A stealth scan

Back 424

SYN Scan

Front 425

The unauthorized insertion of packets into a data stream. Normally based on sequence number attacks.

Back 425

Session Hijacking

Front 426

A safeguard against SYN attacks. Limits the number of open and abandoned connections to a host by interceptning the initial 3 way handshake and then only passes successful handshakes

Back 426

SYN Proxy

Front 427

These draw malicious traffic to them and away from the legitimate system

Back 427

Honeypot/Honeynet

Front 428

These entice attackers by presenting leginitate looking systems that attackers waste time on

Back 428

Tarpits

Front 429

List of port scanning techniques

Back 429

FIN, Null, Xmas, SYN, Session Hijacking, TCP Sequence Number Attack

Front 430

List of transport layer controls to mitigate attacks

Back 430

Honeypot/Honeynet/ Tarpit, SYN Proxy, Continuous or Periodic Authentication

Front 431

OSI Layer that provides a logical, presistnt connection between peer hosts. Provides directory services.

Back 431

Session Layer

Front 432

Session implementation - spreads the session among many machines and in some cases across many networkds

Back 432

Client Server Model

Front 433

Session implementation - designed to spread the workload of a complex process to specialized computers within a larger newrok of computers

Back 433

Middleware and three-tierd architecture

Front 434

Session implementation - keeps the session local unless remote terminals are implemented

Back 434

Mainframe

Front 435

Session implementation - allow for control of the session. TACACS+ and Radius protocols enable remote connection through which a session can be established with the local server

Back 435

Centralized Systems

Front 436

List of Session implementations

Back 436

Client-Server Model, Middleware and three-tiered architecture, maninframe, cnetrailized systems

Front 437

List of Session Layer protocols

Back 437

Real Time protocol (RTP), RTP Control Protocol (RTCP), Remote Procedure Calls

Front 438

Session layer protocol that provides end to end delivery services for data with real time characteristics such as interactive audio and video. Applications typically run this on top of UDP

Back 438

Real Time Protocol (RTP)

Front 439

Session layer protocol that is used to monitor the QoS and to communicate info about the users during a session

Back 439

Real Time Control Protocol (RTCP)

Front 440

List of RPC Threats

Back 440

Unauthorized sessions, Invalid RPC Exchanges

Front 441

List of RPC threat controls

Back 441

Patch, Block at firewall, disable unnecesary protocols

Front 442

OSI Layer that ensures that the peer applications use a common format when representing data between hosts and provides encryption and compression services. DRM lives here.

Back 442

Presentation Layer

Front 443

MPEG-1 Layer 3 (MP3), MPEG-1 Layer 1 & 2, AAC, HE-ACC v2, aacPlus v2

Back 443

ISO/IEC Audio Compression

Front 444

G.711...

Back 444

ITU-T Audio Ccompression

Front 445

MJPEG, MPEG-1&2, MPEG-4 ASP &AVC

Back 445

ISO/IEC Video Compression

Front 446

H.261 - H.264

Back 446

ITU-T Video Compression

Front 447

Common problem with the wide range of compression protocols that will not work together

Back 447

Availability, Lack of interoperability

Front 448

OSI layer that is the applications portal to network based services

Back 448

Application Layer

Front 449

List of Application Layer implementations

Back 449

Client/Server, Peer to Peer, Multi-user

Front 450

List of Applicatin Layer client/server implementations

Back 450

Telephony, video, instant messaging, email, www, file transferq

Front 451

List of Applicatin Layer peer to peer implementations

Back 451

sharing

Front 452

List of Applicatin Layer multi-user implementations

Back 452

web front-end, database backend, web 2.0

Front 453

List of Application Layer protocols

Back 453

FTP, IRC, IMAP, HTTP, MIME, POP3, Rlogin, SOAP, SSH, Telnet

Front 454

OSI layer with the most identified threats

Back 454

Application Layer

Front 455

Two traditional types of networks

Back 455

Telephony and Network

Front 456

Types of cellular service

Back 456

Analog, Digital, Data

Front 457

List of Mobile Multiplexing technologies

Back 457

Frequency Division Multiple Access (FDMA), Time Divisin Multiple Access (TDMA), Code Division Multiple Access (CDMA)

Front 458

Mobile Multiplexing Technology - Principle: Diveide Frequency into sub bands. Objective: Open several low bandwidth channels

Back 458

Frequency Division Multiplexing Acccess (FDMA)

Front 459

Mobile Multiplexing Technology - Principle: Split transmission by time slices. Objective: Multiplexing between participants

Back 459

Time Divisoin Multiplexing Access (TDMA)

Front 460

Mobile Multiplexing Technology - Principle: Mutliplex several singals into one signal. Objective: Mltiplexing is performed on a digital level

Back 460

Code Division Multiplexing Access (CDMA)

Front 461

List of VOIP protocols

Back 461

H.323, Session Intitiation Protocol (SIP), Proprietary Appliatins and Services

Front 462

VOIP protocol developed by the ITU as original VOIP protocol. Largely replaced by SIP

Back 462

h.323

Front 463

VOIP protocol desinged to managem multimedia connnections. Provides MD% hashing and TLS encyrption

Back 463

Session INtitiation Protocol (SIP)

Front 464

Mobil telephony protocol for use by applications that use wireless communcatins such as web surfing

Back 464

Wireless Application Protocol (WAP)

Front 465

List of directory services

Back 465

Domain Name Service (DNS), Lightweight Directory Acccess Protocol (LDAP), Network Basic INup output System (NETBIOS), Network INformation Service

Front 466

List of synchronous messaging protocols

Back 466

IM, IRC

Front 467

List of asynchrounous messaging protocols

Back 467

SMTP, POP, IMAP, NNTP

Front 468

Key concepts of media management

Back 468

Storage, Encryption, Retrieval, Disposal

Front 469

Reassigning of a storage medium that once contained data belonging to another process to a new subject

Back 469

Object Reuse

Front 470

Ensuring no residual data is available with object reuse

Back 470

Securely Reassigned

Front 471

Reducing integrity below acceptable levels

Back 471

Contamination

Front 472

List of methods for clearing magnetic media

Back 472

Overwriting, Deagaussing, Physical Destruction

Front 473

List of Media Management Practices

Back 473

Marking, Labeling, Handling, Storing, Declassifying, Destoying

Front 474

Countermeasures for the misuse of media - Personal User

Back 474

Appropriate Use Policy, workstation controls, web and email filter

Front 475

Countermeasures for the misuse of media - Theft of media

Back 475

Media controls

Front 476

Countermeasures for the misuse of media - Fraud

Back 476

Balancing of input/output reports, separation of duties, verification of info

Front 477

Countermeasures for the misuse of media - Sniffers

Back 477

Encryption

Front 478

A group of dis drives connected to a separae optical switched network for the use of servers

Back 478

Storage Area Networ (SAN)

Front 479

A group of disk drives connected to the same network used by all clients and servers

Back 479

Network attached Storage

Front 480

Backup type where everything is backed up

Back 480

Full Backup

Front 481

Backup type - everything since last full. Longer create backup, shorter to restore

Back 481

Differential Backup

Front 482

Backup Type - Everything since last backup

Back 482

Incremental Backup

Front 483

Backups should ensure the adequate backup of the following:

Back 483

Data, Operating systems, applications, transactions, configurations, reports

Front 484

A system desinted to keep running after an error has occured. Failover

Back 484

Fault Tolerant System

Front 485

Used for speeding up the read/write operation for data stored on disk drives and/or provide backup capabililty to recover data in the event of a disk drive failure

Back 485

Redundant Array of Independent Disks (RAID)

Front 486

A preinstalled drive that can immediately replace a failed drive

Back 486

Hot Spare

Front 487

Raid level - Stirpes the data across several disks allowingg for a faster read/srite speed. Does not provide backup or redudancy.

Back 487

RAID 0

Front 488

RAID Level - Two or more disks to mirror. Provides 100% redundancy. Usable disk storage is equal to the smallest disk

Back 488

RAID 1

Front 489

RAID Level - Creates a hamming code for error correction, designed for systems that require very high data transfer rates. Not used. Not commercially viable

Back 489

RAID 2

Front 490

RAID Level - Byte level strips. 1 drive for parity the rest for data. Bottleneck. Never implemented.

Back 490

RAID 3

Front 491

RAID Level - Block level strips. 1 drive for parity the rest for data. Bottleneck. Never implemented.

Back 491

RAID 4

Front 492

RAID Level - Block Level stripes. Data and parity interleaved amongst all drives. Solved bottleneck. Most popular

Back 492

RAID 5

Front 493

RAID Level - Block Level stripes. All drives used for data and parity. 2 parity types. High cost. Very fault tolerant

Back 493

RAID 6

Front 494

RAID Level - Used for mirror and stiping. Minimum of 4 disks required. High performance but not maximum reliability

Back 494

RAID 0+1

Front 495

RAID Level - Mirroring and striping. High cost and high speed. Usable disk space equal to the sum of individual RAID 1 sets

Back 495

RAID 10

Front 496

Real time mirroring using tapes not disks

Back 496

Redundant Array of Independent Tapes (RAIT)

Front 497

A hot spare that is a backup for any phyiscal disk in the array that fails

Back 497

Global Hot Spare

Front 498

Hot spare that is a backupfor a specific disk in the array

Back 498

Dedicated Hot Spare

Front 499

List of Backup Types

Back 499

File image, system image, data mirroring, electronic vaulting, remote journaling, database shadowning, redundant servers, standby services

Front 500

Backup Type - backup software tha creates disk image fiels with exact byte by byte copies of a hard drive, partiotion or logical disk

Back 500

File Image

Front 501

Backup Type - the contents of the hard disk including the OS and installed applications

Back 501

System Image

Front 502

Backup Type - the replication of data on separate disk in real time to ensure continuous availability, currency and accuracy (RAID 1)

Back 502

Data Mirroring

Front 503

Backup Type - the bulk transfer of backup data over communications facilities. HOst to host or channel extension connection

Back 503

Electronic Vaulting

Front 504

Backup Type - delivers real time db data integrity by capturing and transmitting the journal and trasaction log data offsite as they are created.

Back 504

Remote Journaling

Front 505

Backup Type - reduces recovery time from a db failure by using a db restore and roll-forward process, usinga backup and the jourbals to enable recovery without data loss

Back 505

Database Shadowing

Front 506

Backup Type - keep a redundant idle server available for failover in case of a failure of the primary servier.

Back 506

Redundant Servers

Front 507

Backup Type - provide recovery of most critical applications in a matter of minutres through guaranteed acces to an alternate processor

Back 507

Standby Services

Front 508

3 general categories of OS responses to failures

Back 508

System Reboot, Emergency System Restart, Cold Start

Front 509

Type of trusted recovery - performed after shutting down the system in a controlled manner in response to a TCB failure

Back 509

System Reboot

Front 510

Type of trusted recovery - done after a system fails in an uncontrolled manner in response to a TCB or media failure

Back 510

Emergency Restart

Front 511

Type of trusted recovery - takes place when unexpected TCB or media failures take place and the recovery procedures cannot bring the system to a consistent state. Requires intervention of admin to bing system back to consistent state

Back 511

Cold Start

Front 512

An event that has the potential to do harm

Back 512

Incident

Front 513

Change Control Procedures

Back 513

request, impact analysis, approval, build/test, implement, monitor

Front 514

To maintain the system integrity with respect to teh approved settings

Back 514

Configuration Management

Front 515

The methodical application of vendor-related updates and security nehancements

Back 515

Patch Management

Front 516

The core element of the Clark Wilson Model

Back 516

Separation of Duties

Front 517

Key Concepts of Access Control

Back 517

Separation of Duties, Least Privilege, Need to know

Front 518

Info that requires a special authorization beyone the normal classification system

Back 518

Compartmentalized Information

Front 519

Responsible for assigning the intitial creation and periodic review of info classification

Back 519

Information Owners

Front 520

Three types of Access Control

Back 520

Physical, Technical/Logical, Administrative

Front 521

List of Access Control Categories (7)

Back 521

Directive, Deterrent, Preventative, Detective, Recovery, Corrective, Compensating

Front 522

List of Access Control Threats (9)

Back 522

Denial of Service, Password Cracking, Keylogging, Sniffing, TOC/TOU, Spoofing/Masquerading, Shoulder Surfing/Swiping, Dumpster Diving, Emanations

Front 523

Lookup tables containing pre-hashed passwords used to speed up password cracking

Back 523

Rainbow Tables

Front 524

Use this to protect passwords agains rainbow table attacks

Back 524

Salt

Front 525

An attempt to gain access to a system by posting as an authorized user

Back 525

Masquerading

Front 526

What a point of sale terminal or AT is modified to capture PIN as well as recording card details

Back 526

Swiping

Front 527

Time of Check/Time of Use is and example of this

Back 527

Race Condition

Front 528

4 steps of access control

Back 528

Identification, Authentication, Authorization, Accountability

Front 529

Knowledge Authentication Types

Back 529

Passwords, Passphrases, Personal History, Graphical

Front 530

Minimum requirments of password

Back 530

At least 6 characters, have special characters, not be a dictionary word, not be related to user ID

Front 531

Types of Authentication by Ownership

Back 531

Smart Cards, Tokens, RFID Cards, Memory Cards, One-Time Passwords

Front 532

Credit card shaped devices or key fobs that generate dynamic passwords and come in asynchronous or synchrounous version.s

Back 532

Tokens

Front 533

Tokens are hardware or software?

Back 533

Both

Front 534

USB toeksn use PKI Technology or one-time passwords

Back 534

PKI Technology

Front 535

Type of ownership authentication that changes every minute or after every use. Not subject to shoulder sufing, replay attacks or password sharing

Back 535

One-Time Password

Front 536

Credit card shaped devices that contain one of more microprocessor chips that accept, store and send info through a readwer and are used for authentication

Back 536

Smart Cards

Front 537

Significant benefit of smart cards

Back 537

Authentiation happens at the reader

Front 538

Magenetic stripe cards that provide indentification/authentiation, usually oreiented toward physical access control of restricted areas

Back 538

Memory Cards

Front 539

Authentication method that uses a numberic keyboard for challenge reponse technology and a PIN.

Back 539

Asynchrounous Token

Front 540

Two types of synchrounous tokens

Back 540

Event based and Time based

Front 541

Synchronous token that increments a counter. Good for proximity

Back 541

Event Based Synchronization

Front 542

Synchronous token where the token and server time must be synched with 3 or 4 minutes accuracy. No entry on token required

Back 542

Time-Based Synchronization

Front 543

Two types of Smart Cards

Back 543

Contact and Contactless

Front 544

Two types of Biometrics

Back 544

Static (Physiological) and Dynamic (Behavioral)

Front 545

List of Biometric Selection Criteria (5)

Back 545

Accuracy, Acceptability, Reaction/Processing Time, Population Coverage/Scalability, Data Protection

Front 546

Biometric Accuracy - Authenitaction fails when it should not. Authorized person is denied

Back 546

False Rejection Rate (FRR) Type 1 Error

Front 547

Biometric Accuracy - Auhtenciation is successful when it should not be. Unauthorized person is granted access. More serious

Back 547

False Acceptance Rate (FAR) Type 2

Front 548

Biometric Accuracy - The point at which the FAR and FRR intersect

Back 548

Crossover Error Rate (CER)

Front 549

List of STatic Biometric Types (6)

Back 549

Fingerprint/Palm Print, Hand geometry, Palm Vein Structure, Retina Scan, Iris Scan, Facial Recognition

Front 550

Accuracy and Reaction time and acceptability for Fingerprint/Palm Print Biometrics

Back 550

Highly accurate for authentication. 5-7 seconds. Accepted.

Front 551

Accuracy and Reaction time and acceptability for Hand Geometry

Back 551

Highly accurate for authentication. 3-5 seconds. Accepted.

Front 552

Accuracy and Reaction time and acceptability for Palm Vein Structure

Back 552

Highly accurate. Accepted.

Front 553

Accuracy and Reaction time and acceptability for Retina Scan

Back 553

Very accurate for Identification and Authentication. 4 - 7 seconds. Not well accepted. Susceptible to changing physical variations

Front 554

Accuracy and Reaction time and acceptability for Iris Scan

Back 554

Accurate for I and A. 1-2 seconds. Accepted.

Front 555

Accuracy and Reaction time and acceptability for facial recongnition

Back 555

Accurate for authentication, less for identification. Not well accepted.

Front 556

List of Dynamic biometric Types (3)

Back 556

Voice Pattern, Keytroke Dynamics, Signature Dynamics

Front 557

Accuracy and Reaction time and acceptability for Voice Pattern

Back 557

Not very accurate. 10-14 seconds. Well accepted.

Front 558

Accuracy and Reaction time and acceptability for Keystroke Dynamics

Back 558

Very accurate for authentication. Well accepted. Works well with 2-factor authentication.

Front 559

Accuracy and Reaction time and acceptability for Signature Dynamics

Back 559

Accurate for authentication. Well Accepted.

Front 560

A set of technologies used to manage info abou the access rights of authrized users

Back 560

Identity Managment

Front 561

The hierarchical parent system that tracks users, their accounts, and their authorization chains

Back 561

Authoritative System of Record (ASOR)

Front 562

List of Identity Management Challenges (5)

Back 562

Consistency, Reliability, Usability, Efficiency, Scalability

Front 563

Two types of ID Management Principals

Back 563

Insiders and outsiders

Front 564

Account Provisioning Lifecycle

Back 564

Initial setup, Change and Maintenance, Tear Down

Front 565

List of ID Management Benefits (3)

Back 565

Headcount Reduction, Productivity Increase, Risk Management

Front 566

List of ID Management Technologies (4)

Back 566

Web Access Management (WAM), Password Management, Account Managment, Profile Update

Front 567

Mechanisms that can adminuser Id, authentication and authorization data concurrently for multiple web based applications. SSO capable.

Back 567

Web Access Management

Front 568

Mechanisms that enforce password criteria, synchronization and serlf service resets

Back 568

Password Management

Front 569

Automate the admin of user id's.

Back 569

Account Management

Front 570

Mechanisms that allow user to update non-critical personal data.

Back 570

Profile Update

Front 571

A centralized authentication database that admins acces to multiple resources

Back 571

Single Sign on

Front 572

An SSO open standards protocol for authentication in a singel security domain that uses symmetric key encryption in three pairs.

Back 572

Kerberos

Front 573

A protocol developed by the EU that addresses multiple or disparate security domains. SSO.

Back 573

Secure European System for Applications in a Multi Vendor Environment (SESAME)

Front 574

Acts as the authentication server and ticket granting server in Kerberos.

Back 574

Key Distribution Center (KDC)

Front 575

Kerberos uses symmetric or assymetric encryption

Back 575

symmetric

Front 576

Provides a coninuous means of obtaining additional tickets for the same or other appliccatins after the intitial authentication in Kerberos

Back 576

Ticket Granting Server (TGS)

Front 577

SESAME uses symmedtric or asymmetric keys?

Back 577

Both

Front 578

The SESME equivalents of a ticket granting ticket and a ticket granting server in Kerberos

Back 578

Privileged Attributes Certificate (PAC) and Privileged Atributes Server (PAS)

Front 579

Applications that provide the means to hiearchically organize and manage info about network users and resources and retrieve info by name association

Back 579

Directory Services

Front 580

List of Directory Services (3)

Back 580

Lightweight Directory Access Protocol (LDAP), Network Information Services (NIS), Domain Name system (DNS)

Front 581

Defines the set of objects that a subject in an info system is allwoed to access. Based on truest between the subject and object

Back 581

security domains

Front 582

Security Domain - Subjects are allowd to access objects at or lower than their access level. Bell Lapudula.

Back 582

Hiearchical Domain Relationship

Front 583

List of Access Control Languages (3)

Back 583

Service Provisioning Markup Language (SPML), Security Assertion Markup Language (SAML), Extensible Access Control Markup Language (XACML)

Front 584

List of Access COntrol MOdels (7)

Back 584

Mandatory, Temporal, Discretionary, Role, Rule, Content, Privacy

Front 585

Access Control Model - Operating system makes the final decision based on security labels. Enforces Confidentiality

Back 585

Mandatory Access Control (MAC)

Front 586

Access Control Model - time based acccess control (hours of operation)

Back 586

Temporal Isolation

Front 587

Access Control Model - enables the owner of the resource to specify twhich subjects can access specific resources. Uses ACL's

Back 587

Dicretionary Access Control (DAC)

Front 588

Most OS' use which Access Control Model

Back 588

DAC

Front 589

Access Control Model - bases access control on the users job functions at the owners discretion.

Back 589

Role Based Access Control

Front 590

Access Control Model - access is based on a list or rules created by system owners.

Back 590

Rule Based Access Control

Front 591

Access Control Model - based on the actual content of the data record. Requires arbiter program and more overhead.

Back 591

Content-Dependent Access Control

Front 592

RBAC basedon Organization for Economic Co-operation and Development

Back 592

Privacy Aware - Role based access control

Front 593

The most common implemenation of DAC. Easy way to specify which sujbects are allowed access to which objects

Back 593

Access Control Lists (ACL)

Front 594

A collection of access control lists implemented by comparing the column of users or subjects to their rights of acces to protected objects

Back 594

Object Based Access Control Matrix

Front 595

A collection of access control lists implemented by comparing the colum of column of objects to the rows of subjects

Back 595

Subject Oreinted Copapbility Table

Front 596

Access control where rules are closeley managed by the sys admin rather tahn by the system or object Owner

Back 596

Non-Discretionary Access Control (NDAC)

Front 597

NDAC or DAC is more secure?

Back 597

NDAC

Front 598

An interface where users are only allowed access to specific funtions, files or other resources.

Back 598

Constrained User Interface

Front 599

One entity makes network access decisions implemetend through authentication, authorization, and accounting (AAA) servers.

Back 599

Centralized Access Control

Front 600

List of centralized AAA servers (3)

Back 600

Radius, TACACS+, Diamter

Front 601

Most popular Centralized AAA service?

Back 601

Radius

Front 602

Most secure Centralized AAA service

Back 602

Diameter

Front 603

Provide real time monitoring of events as tehy happen in a computer system or network

Back 603

Intrusion Detection System

Front 604

List of IDS's (3)

Back 604

Network ID's, Host-Based IDS, Application ID's.

Front 605

Harware or software mecahnisim that has the ability to detect and stop attackes

Back 605

Intrusion Prevention System (IPS)

Front 606

List of IPS's (2)

Back 606

HIPS, NIPS

Front 607

List of types of NIPS's

Back 607

Content based, Rate-based

Front 608

measures the number of false positives in an IDS. A way of measuring accuracy

Back 608

Key Performance INdicators (KPI)

Front 609

List of IDS analysis Engine Methods (3)

Back 609

Pattern/Signature Based, Anomaly-Based, Heristic

Front 610

List of Pattern/Signature-Based IDS Analysis Methods (2)

Back 610

Pattern Matching, Stateful Matching

Front 611

List of Anomaly based IDS Analysis Methods (3)

Back 611

Statistical, Traffic, Protocol

Front 612

IDS Analysis Method - identtifies and matches curren activity with stored patterns to detect a potential intrusion

Back 612

Pattern/Signature-Based

Front 613

IDS Analysis Method - Scans packets to determine if speciifc byte sequences match the signature of the know attack

Back 613

Pattern Matching

Front 614

IDS Analysis Method - Looks for specific sequensces appreaing accross several packages in a traffic stream rather than just the individual packet

Back 614

Stateful Matching

Front 615

IDS Analysis Method - Compares current activitity with stored profiels of normal activity

Back 615

Anomaly Based

Front 616

IDS Analysis Method - baselines of normal traffic and throughput are developed and deviations result in alerts

Back 616

Statistical

Front 617

IDS Analysis Method - identifies any unacceptable deviations from expected behavior based on traffic and signals an alert

Back 617

Traffic

Front 618

IDS Analysis Method - deviations from well defined protocols identify signature-less attacks

Back 618

Protocol

Front 619

Another term for audit trail reduction

Back 619

Clipping Level

Front 620

Penetration Testing Method - refers to attacks on teh organizations network perimeter.

Back 620

External

Front 621

Penetration Testing Method - Pen team has no inside knowledge about the target and would operate as hacker would.

Back 621

Zero Knowledge (blind)

Front 622

Penetration Testing Method - Pen team has some inside knowledge about the target

Back 622

Partial Knowledge

Front 623

Penetration Testing Method - Pen team has intimate knowledge about target

Back 623

Full Knowledge

Front 624

Penetration Testing Method - Pen team is focused on a particular system/funciton

Back 624

Targeted

Front 625

Penetration Testing Method - Pen team is provided with little info concerning the orgs sys config. internal test

Back 625

Blind

Front 626

Penetration Testing Method - no one in organization is informed that test is happening

Back 626

Double Blind

Front 627

List of Pen testing steps (4)

Back 627

Discovery, Enumeration, Vulnerability Mapping, Exploitation

Front 628

List of threats to physical systems (3)

Back 628

Natural/environmental, utility systems, human made/political events

Front 629

The first line of defense in physical security

Back 629

Perimeter controls

Front 630

Perimeter controls should be near or far from the buliding?

Back 630

As far as possible

Front 631

Types of protective barriers (2)

Back 631

Natural and structural

Front 632

Fence Height - 1 meter/3-4 feet

Back 632

Will deter casual trespassers

Front 633

Fence Height - 2 meters/6-7 feet

Back 633

Too high to climb easily

Front 634

Fence Height - 2.5meters/8 feet

Back 634

Will delay the determined intruder

Front 635

Average height that top-guards add to fences

Back 635

2-3 feet

Front 636

Access points through fences

Back 636

Gates

Front 637

Permanent or retractable posts used to deter vehicle based attacks.

Back 637

Bollards

Front 638

List of key concepts of physical security (5)

Back 638

Deter, Detect, Delay, Assess, Respond Appropriately

Front 639

List of physical IDS device types (5)

Back 639

Photoelectric, Ultrasonic, microwave, passive infrared, pressure snsitive

Front 640

Physical IDS device type - active infrared beam that triggers an alarm when the beam is broken

Back 640

Photoelectiric

Front 641

Physical IDS device type - detects foreign signal change caused by intruder based off ultrasound energy

Back 641

Ultrasonic

Front 642

Physical IDS device type - picks up transmitted energy waves. Disruptions sound alarm

Back 642

Microwave

Front 643

Physical IDS device type - Tipped by a change in temperature (body heat)

Back 643

Passive Infrared

Front 644

Physical IDS device type - detects pressure on the sensor

Back 644

Pressure Sensitive

Front 645

List of Types of Lighting (5)

Back 645

Continous Lighting, Trip Lighting, Standby Lighting, Emergency Exit Lighting, Emergency Egress Lighting

Front 646

Physical Lighting - most common. Fixed Lights

Back 646

Continous Lighting

Front 647

Physical Lighting - Activated by a sensor

Back 647

Trip Lighting

Front 648

Physical Lighting - Automatically turns on when power goes out

Back 648

Stanby Lighting

Front 649

Physical Lighting - Shows location of exits. Always on

Back 649

Emergency Exit Lighting

Front 650

Shows teh way out and hazards along the way. Always on

Back 650

Emergency Egress Lighting

Front 651

Lighting that is always left on?

Back 651

Continous Lighting, Emergency Exit Lighting, Emengerncy Egress Lighting

Front 652

List of CCTV requirements (3)

Back 652

Detection, Recognition, Identification

Front 653

What are virtual CCTV systems?

Back 653

Fake systems

Front 654

Technical CCTV considterations

Back 654

P, T, Z - Pan, Tilt, Zoom

Front 655

Normal aspect ration of CCTV cameras

Back 655

4:3 (horizontal:vertical)

Front 656

Can be used to check the CCTV monitors ability to reporduce good contrast

Back 656

Grey Scale

Front 657

Provide an intelligent, decsion making factor to physical security

Back 657

Guards

Front 658

Key element of facility security - CPTED

Back 658

Crime Prevention through Environmental Design

Front 659

Singal if a door is blocked open

Back 659

Contact Alarms

Front 660

Allow for the remote control of doors

Back 660

Contact Devices

Front 661

Most secure door

Back 661

Solid Core Door

Front 662

Doors should open in or out

Back 662

In

Front 663

How many hinges per door?

Back 663

3

Front 664

Two physical access solutions that limit traffic flow and don't need human supervision

Back 664

Turnstile and Mantraps

Front 665

List of Lock components (5)

Back 665

body, strike, strike plate, key, cylinder

Front 666

Main benefit and drawback of keyed cards

Back 666

key management. cost

Front 667

List of lock attackes (2)

Back 667

Lock picking, lock bumping

Front 668

List of types of glass for windows (4)

Back 668

Standard Plate Glass, Tempered Glass, Acrylic Materials, Polycarbonate windows

Front 669

List of physical security IDS's (2)

Back 669

CCTV, sensors/monitors

Front 670

List of key threats to support systems (6)

Back 670

HVAC Failure, Sewage, power loss, water, gas leaks, fire

Front 671

Ideal humidity and temperature for the data center

Back 671

40-60% humidity. 70-74 degress

Front 672

Key concepts of Fire Protection (3)

Back 672

Prevention, Detection, Suppression

Front 673

Fire suppression mechanism where the water is held back by a valve and is released when teh sensor activeates

Back 673

Pre-Action/Dry Pipe System

Front 674

Combustible materials and suppression agents mnemonic for Classes

Back 674

Ash, Boil, Current, Drive, Kitchen

Front 675

Combustible materials and suppression agents - Class A

Back 675

Common combustible materials (wood, paper, rubber, plastics etc.). Water, Myltipuopose Dry Checmical, Halon Replacement

Front 676

Combustible materials and suppression agents - Class A

Back 676

Flammable combustible liquids (oil, greases, tars, etc.). Carbon Dioxide, Multipurpose Dry Chemicals, Halon Replacement

Front 677

Combustible materials and suppression agents - Class C

Back 677

Enrgized Elecrical equipment. Carbon Dioxide, Multipurpose Dry Chemicals, Halon Replacement

Front 678

Combulstible materials and suppression agents - Class D

Back 678

Combustible metals (magnesioum, thorium, patassium, etc.). Dry Powders.

Front 679

Combulstible materials and suppression agents - Class K

Back 679

Cooking media sucah as vegetable and animal oils and fats. Wet Chemicals.

Front 680

Three legs of a fire

Back 680

Heat, Oxygen, Fuel

Front 681

The primary fire extinguishing agen for all business environments

Back 681

Water

Front 682

A dry powder used by the fire department that binds with solid objects at the point of combustion to limt the fire's acces to fuel

Back 682

Purple K

Front 683

List of components of a sprinkler system (3)

Back 683

Pipes, Heads, Source

Front 684

List of best practices for fire suppression systems (4)

Back 684

Zones of coverage, Timed release, HVAC off before activation, Sprinklers

Front 685

Portable extinguishers should be placed at what distance from equipment and exits

Back 685

Within 50 feet

Front 686

List of complete losses of power (2)

Back 686

Blackout, Fault

Front 687

List of Power Degradations (6)

Back 687

Brownout, Sag/Dip, Surge, Transients, In Rush Current, Electrostatic Charge

Front 688

List of electical power intereference (noise) (2)

Back 688

EMI, RFI

Front 689

A prologned loss of total power

Back 689

Blackout

Front 690

A momentary loss of all power

Back 690

Fault

Front 691

A reduction of voltage by the utuilty company for a prolonged period of time

Back 691

Brownout

Front 692

A short period of low voltage

Back 692

Sag/Dip

Front 693

A sudden rise in voltage in the power supply

Back 693

Surge

Front 694

Line noise that is superimposed on the supply circuit typically caused by a fluctioation in power

Back 694

Transients

Front 695

The initial surge of current rquired when there is an increase in poser demand. Can trip breakers

Back 695

In Rush Current

Front 696

A power surge generated by a person or device contactinganother deivde and dranserring a high voltage shock

Back 696

Electrostatic Charge

Front 697

Electrical power interference caused by motors, lightning, low humidity, etc

Back 697

EMI

Front 698

Electrical power interference caused by components of electrical systems and transmissions

Back 698

RFI

Front 699

Solution for many power problems

Back 699

Grounding

Front 700

Alternate power supplies

Back 700

UPS, Generators, Batteries

Front 701

List of HVAC control considerations (3)

Back 701

Location, Positive Pressure (fans), Maintenance

Front 702

Key concepts of CPTED (3)

Back 702

Surveillance, Access Control, Territoriality

Front 703

Does not happen unless you break the law in both jurisdictions

Back 703

Extradition

Front 704

Where does jurisdiction end?

Back 704

At your borders

Front 705

United Nations common body overseeing intellectual property related complaints and enforcement

Back 705

World Intellectual Property Organization

Front 706

An intangible asset that is derived from the operation of a human mind

Back 706

Intellectual Property

Front 707

List of ways to protect intellectual property (4)

Back 707

Copyright, Trademark, Patent, Trade Secret

Front 708

This protects an idea. Novel, useful and non obvious inventions

Back 708

Patent

Front 709

This protects teh expression of an idea rather than the idea iteself

Back 709

Copyright

Front 710

This protects a symbol that represents an idea.

Back 710

Trademark

Front 711

This protects a proprietary process or procedure

Back 711

Trade Secret

Front 712

The strongest form of intellectual property protection

Back 712

Patent

Front 713

How long do patents typically last?

Back 713

20 years

Front 714

What is the average length of time for trade secrets to expire?

Back 714

Never

Front 715

Acting without care or failing to act as a reasonable person would under similar circumstances

Back 715

Negligence

Front 716

The care a reasonable person with the same training and experience would use

Back 716

Due Care

Front 717

The act of management that makes sure staff is acting w/ due care

Back 717

Due Diligence

Front 718

A group of 30 member countries sharing a commitment to privacy, democratic gov, and market economy

Back 718

Oraganization for Economic Cooperation and Development (OECD)

Front 719

The practice of detecting a problem, determing the cause, mimizing the damage and resolving the problem

Back 719

Incident Reponse

Front 720

Three main elements of Incident Response

Back 720

Detection, Triage, Response

Front 721

In forensic evidence collection, what evidence is most volatile

Back 721

RAM

Front 722

Chain of Custody documenation should track ((5)

Back 722

Who, What, Where, When, How

Front 723

Evidence that is based on what the witness was told rather than on his or her personal knowledge. An out of courts statement offered as proof of assertion

Back 723

Hearsay

Front 724

acaptures every sector on the drive from 0 until the last sector

Back 724

Forensic Bit Stream

Front 725

List of forensic evidence procedures (5)

Back 725

Receive media, disk write blocker, bit for bit image, cryptographic checksum, store the source drive

Front 726

List of Forensic evidence analysis procedures (4)

Back 726

Recent activity, search with keywords, check slack space, document results

Front 727

List of types of forensic analysis (3)

Back 727

media, network, software

Front 728

Financial Requlatory Requirements (3)

Back 728

SOX, GLBA, Basel

Front 729

The Business Continuity Plan should be integrated into what process.

Back 729

Change/Configuration Management Process

Front 730

5 steps of the Business Continuity Life Cycle

Back 730

Analyze the Business, Assess the Risks, Develop the BC Strategy, Develop the BC Plan , Rehearse the Plan

Front 731

The process of identifying the organizations key products and services and defining the time-criticality of the activities that support them.

Back 731

Business Impact Analysis

Front 732

How long a business function can be down before unacceptable impacts accumulate

Back 732

Maximum tolerable downtime

Front 733

The point to which info must be restored in order to enable the organization to function without unacceptable loss of data. This drives the backup strategy

Back 733

Revovery Point Objective

Front 734

What is the risk equation

Back 734

Risk = threat impact * probability

Front 735

Must be less than the maxiumum tolerable period of disruption. Planned recovery time.

Back 735

Recovery Time Objective (RTO)

Front 736

TIme between point of failure and restoration of critical services

Back 736

Interruption Window

Front 737

DR processing agreement - an a agreement with a a company that has similar technology

Back 737

Reciprocal/Mutual Aid

Front 738

DR processing agreement - contract with carriers for backup communcations or contingenct suppliers

Back 738

Contingency

Front 739

DR processing agreement - an appllication service provider that has extra capacity (Sunguard)

Back 739

Service Bureau

Front 740

CP test - low cost. Participants review plan content and check info such as phone numbers.

Back 740

Desk Check/Checklist

Front 741

CP test - low cost. Team members meet and sicuss each plan element and procedure acress several meetings.

Back 741

Structured Walk Through/Classroom

Front 742

CP test - typically include a mock disaster and all teams exercise their training and judgement.

Back 742

Simulation/Functional Test/War Games

Front 743

CP test - takes advantage of test time and actual recovery site. Does not impact operations. Proves critial systems can run at alternate site

Back 743

Parallel

Front 744

CP test - highest cost and complexity. Primary operations are shut down and continutity relies solely on recovery procedure. Should only be considered after succesful parallel testing with Steering committee authorizaiton

Back 744

Full Interruption

Front 745

3 steps of a quantitative risk analysis

Back 745

Estimate potential loses, conduct a threat likelihood analysis, calculate annual loss expectancy

Front 746

The estimate of the amount of damage that an asset will suffer due to a single incident

Back 746

Single Loss Expectancy (SLE)

Front 747

Expressed as a percentage of the asset value. If loss can be limted to one type, you can determine the impact o the asset by percentable of teh asset value lost.

Back 747

Exposure Factor

Front 748

The number of times per year tha an incident is likely to occur.

Back 748

Annual Rate of Occurrence (ARO)

Front 749

Provides an estimate of the yearly financial impact to the organization from a particular risk

Back 749

Annual Loss Expectancy (ALE)

Front 750

What is the ALE equation?

Back 750

ALE = SLE x ARO

Front 751

What is the purpose of the ALE?

Back 751

To justify countermeasures.

Front 752

FMEA and FTA are both inputs into which kind of risk analyis?

Back 752

Quantitative Analysis

Front 753

A risk assessment effor originally concerned with manufacting defects and focuses on the upstream and downstream impact of a failure

Back 753

Faule Modes and Effects Analysis (FMEA)

Front 754

An analytical technique for system safety. It is used to consider all possible thereat and then trim down to the most relevant risks

Back 754

Fault Tree Analysis (FTA)

Front 755

4 risk mitigation options

Back 755

Acceptance, Avoidance, Reduction, Transference

Front 756

A type of ethical theory based on outcomes. Try to provide the greatest good for the greatest number of individuals. Utilitarianism

Back 756

Teleology

Front 757

Ethical theory that subscribes to the belief that each person has pre-existing requirements to be good. Their duty to be good.

Back 757

Deontology

Front 758

The things most often thought aobut when considering security solutions. They should meet a specific security requirement

Back 758

Functional Requirements

Front 759

These confirm that security solutions are slected appropriately, performing as intended, and are having the desired effect

Back 759

Assurance Requirements

Front 760

3 Level of security planning

Back 760

strategic, tactical, operational

Front 761

Type of security planning that focuses on high level, long range rquirments of a company long term plan. Overarching security policy and alignment of security program are examples

Back 761

Strategic planning

Front 762

Type of security planning - more a mid-term focus on eventsthat will affect the entire organization. Functional plans fit into this category. Network redesing, installation of new equipment and controls and trcking of incident over a period of time

Back 762

Tactical Planning

Front 763

Type of security planning - focuses on fighting fires. Planning for near term. Concerned with dtecting, responding and recovering from incidents and compliance and monitoring of systems

Back 763

Operational Level Planning

Front 764

Type of algorythm used on small, non repeating key strings such as session keys

Back 764

Electronic Code Book

Front 765

Type of algorythm used on documents, programs and media. Data at rest.

Back 765

Cipher Block Chaining

Front 766

Type of algorythm used on low volume streams

Back 766

Cipher Feed Back

Front 767

Type of algorythm used on medium volume streams although rarely used. Error propagate

Back 767

Output Feed Back

Front 768

Type of algorythm used on high volume streams. Pay per view, WPA2

Back 768

Counter

Front 769

Type of algorithm - fast, weak, same plaintext gives same ciphertext

Back 769

Electronic Code Book

Front 770

Type of algorithm - adds security via IV and key propagation

Back 770

Cihper Block Chaining

Front 771

Type of algorithm - can catch integriy errors

Back 771

Cipher Feed Back

Front 772

Type of algorithm - keystream can be partially pregenerated

Back 772

Output Feed Back

Front 773

Type of algorithm - keystream can be precompouted or generated in parallel

Back 773

Counter

Front 774

What physical goal? - Barriers

Back 774

Deter

Front 775

What physical goal? - Entry and search controls

Back 775

Delay

Front 776

What physical goal? - Physical intrusion detection

Back 776

Detect

Front 777

What physical goal? - Alarm response, testing and maintenance

Back 777

Assses

Front 778

What physical goal? - appropriate action in the face of unauthorized entry

Back 778

Respond

Front 779

Type of fire suppression - water under pressure, heat causes discharge, freezing is a problem

Back 779

Wet Pipe

Front 780

Type of fire suppression - aripressure holds valve shut, protects gainst freeze ups

Back 780

Dry Pipe

Front 781

Type of fire suppression - air pressure like dry pipe, ion/smoke detector opens valve, heat releases water

Back 781

Pre-Action

Front 782

EAL Level - Functionally Tested

Back 782

1

Front 783

EAL Level - structually tested

Back 783

2

Front 784

EAL Level - methodically tested

Back 784

3

Front 785

EAL Level - (3) + One Time Review

Back 785

4

Front 786

EAL Level - semi-formal testing

Back 786

5

Front 787

EAL Level - semi-formal review

Back 787

6

Front 788

EAL Level - semi-formal testing and verification

Back 788

7

Front 789

Single Loss Expectancy (SLE) equation

Back 789

Asset Value (AV) x Exposure Factor (EF)

Front 790

Managing Design - What security functionality do we need to support the design decisions we've made?

Back 790

Conceptual

Front 791

Managing Design - How are we going to deliver the functionality?

Back 791

Functional

Front 792

Managing Design - A measure of how well the functional implementation matched the conceptual design

Back 792

Operational Evaluations

Front 793

Exposure Factor as expressed as what?

Back 793

A percent

Front 794

Minimum permissions to do the job

Back 794

Least privilege

Front 795

Minimum knowledge to do the job

Back 795

Need to Know

Front 796

Ensures that users can securely access the TCB for login and other confidential functions

Back 796

Trusted Path

Front 797

Assureance that sensitive data is destroyed before the resource is reissued

Back 797

Object Reuse

Front 798

A record of security related transactions

Back 798

Audit

Front 799

Security models that provide confidentiality

Back 799

Bell Lapadula, Biba,

Front 800

5 identity management challenges

Back 800

Consistency, Efficiency, Usability, Reliabilty, Scalability

Front 801

Security Framework - About planning

Back 801

TQM

Front 802

Security Framework - About managing quality

Back 802

ITIL

Front 803

Security Framework - about managing risks

Back 803

COSO

Front 804

Security Framework - about control points

Back 804

COBIT

Front 805

Security Framework - about the skills and disciplines

Back 805

Six Sigma

Front 806

Security Framework - about maturing these processes

Back 806

CMM/CMMI

Front 807

Security Framework - financial stability standards

Back 807

Basel II

Front 808

Security Framework - the outermost perspective

Back 808

ISO Standards

Front 809

A function without which a business will ceast to operate

Back 809

Critical Business Function

Front 810

An event tha will cause a CBF to be unavailable for longer than the MTD

Back 810

Disaster

Front 811

The amount of time needed to recover a cbf

Back 811

Recovery Time Objective

Front 812

The amount of data that has to be recovered to meet the needs of a CBF

Back 812

Recovery Point Objective

Front 813

A set of previously decided actions to take when faced with a distaster. Includes everything form declaration of disaster to recovery and return to primary

Back 813

Disaster Recovery Plan

Front 814

The location from which the disaster recovery will be managerd

Back 814

Emergency Operations Center (EOC)

Front 815

Process of automating the factors that go into decision making

Back 815

Knowledge Management

Front 816

Knowledge Management type - based on probabilities and data interdependencies

Back 816

Probabilitstic Approach

Front 817

Knowledge Management type - observe and generalize patterns and construct rules based on them

Back 817

Statistical Approach

Front 818

Knowledge Management type - pattern discovery and data cleaning model that reduces large database to a few representative examples

Back 818

Classfication Approach

Front 819

Knowledge Management type - uses giltering techniques to detect patterns

Back 819

Trend Analysis

Front 820

Knowledge Management type - detects associations among input pattern. Organized data into nodes, arranges them into layers, and discovers the links between them

Back 820

Nerual Networks

Front 821

Knowledge Management type - uses a knowledge base and a set of rules that an infer new facts from existing knowldge plus incoming data

Back 821

Expert System Approach

Front 822

WEP and WPA use what algorithm?

Back 822

RC4

Front 823

What type of integrity for WEP?

Back 823

CRC

Front 824

What type of integrity for WPA?

Back 824

Michael

Front 825

What type of integrity for WPA2?

Back 825

CBC-MAC

Front 826

What type of IV for WEP?

Back 826

Static

Front 827

What type of IV for WPA?

Back 827

Random

Front 828

Tunneling Protocol - Created by Cisco, not dependent on IP, allows multiple endpoints, unencrypted

Back 828

Layer 2 Forwarding (L2F)

Front 829

Tunneling Protocol - windows only, useses PPP authentication, two factor possible (EAP), weak encryption

Back 829

Point to Point Tunneling (PPTP)

Front 830

Tunneling Protocol - joint effort of Cisco and Microsoft, supports 2 factor authentication, supports FR/ATM tunnels, supports IPSEC over IP

Back 830

Layer 2 Tunneling Protocol (L2TP)

Front 831

Tunneling Protocol - Only true VPN/Tunneling protocol

Back 831

IPSEC

Front 832

Lock Controls - All parts of a transaction complete or none do (rollback if necessary)

Back 832

Atomicity

Front 833

Lock Controls - A change is allowed only when it makes internal and external consistency

Back 833

Consistency

Front 834

Lock Controls - results of a transaction are invisible until complete

Back 834

Isolation

Front 835

Lock Controls - a completed transaction is persistent even in the event of a system failure

Back 835

Durability

Front 836

Can it be cross-examined?

Back 836

Hearsay

Front 837

Testimony that will cause the witness to be arrested, tried and probably convicted. Unlikely to be false

Back 837

Statement against penal interest

Front 838

Records created in the ordinary course of business, relied on by the businees, testified to by someone with knowledge of the contents and the collection procedures

Back 838

Business Records

Front 839

5 rules of evidence

Back 839

Admissable, Authentic, Complete, Reliable, Believable

Front 840

Types of Computer Crimes - Virus, Worm, Denial of Service

Back 840

Crimes Against Computers

Front 841

Types of Computer Crimes - Email, Fraud, Embezzlement

Back 841

Crimes Using Computers

Front 842

Types of Computer Crimes - Suicide Note, Checklist

Back 842

Crimes Where a Computer is Incidental

Front 843

4 elements of a tort

Back 843

Duty, Breach, Proximate Cause, Damage

Front 844

3 elements of a crime

Back 844

Means, Opportunity, Motive