Comptia - Secutiy Plus Chapter 10

Front 1

Integrity

Back 1

Provides assurances that data has not been modified

Front 2

hash

Back 2

a number derived form performing a calculation on data, such as a message or file

Front 3

Confidentiality

Back 3

ensures that data is only viewable by authorized users

Front 4

Symmetric encryption

Back 4

uses the same key to encrypt and decrypt data

Front 5

Asymmetric encryption

Back 5

uses two key (public and private) created as a matched pair

Front 6

Authentication

Back 6

Validates and identity

Front 7

Non-repudiation

Back 7

is a process designed to prevent a party from denying an action

Front 8

MD5

Back 8

Message Digest 5

Front 9

Message Digest 5

Back 9

a hashing algorithm

Front 10

SHA

Back 10

Secure Hash Algorithm

Front 11

Secure Hash Algorithm

Back 11

a hashing algorithm

Front 12

HMAC

Back 12

Hash-based Message Authentication Code

Front 13

Hash-based Message Authentication Code

Back 13

is a secret code the is coupled with hashing algorithm to increase integrity

Front 14

FCIV

Back 14

File Checksum Integrity Verifier

Front 15

File Checksum Integrity Verifier

Back 15

a free command prompt utility that computes and verifies cryptographic hash values

Front 16

RIPEMD

Back 16

Race Integrity Primitives Evaluation Message Digest

Front 17

RIPEMD, NTLM are...?

Back 17

Hashing algorithms

Front 18

Race Integrity Primitives Evaluation Message Digest

Back 18

a hashing algorithm

Front 19

LANMAN

Back 19

LAN Manager

Front 20

LAN Manager

Back 20

a legacy authentication protocol

Front 21

NTLM

Back 21

New Technology LAN Manager

Front 22

New Technology LAN Manager

Back 22

a legacy protocol used with MD4 algorithm, but both are compromised

Front 23

AES

Back 23

Advanced Encryption Standard

Front 24

Advanced Encryption Standard

Back 24

a strong symmetric block cipher. has a key the is 128, 192, or 256

Front 25

DES

Back 25

Data Encryption Standard

Front 26

Data Encryption Standard

Back 26

uses only a 56 bit key so it is now susceptible to brut force attacks.

Front 27

3DES

Back 27

Triple Data Encryption Standard

Front 28

Triple Data Encryption Standard

Back 28

a encryption algorithm that is an improvement over DES since is uses 56 bits, 112 bits or 168 bits.

Front 29

RC4

Back 29

Ron's Code or Rivest's Cipher...is a symmetric stream cipher created by Ron Rivest

Front 30

One-time pads

Back 30

a hardcopy printouts of keys in a pad of paper. Two people have the pads and after identifying which key to use they destroy the page and the person reading uses the key and destroys their page.

Front 31

Blowfish

Back 31

a strong symmetric block cipher

Front 32

Twofish

Back 32

a strong symmetric block cipher

Front 33

Asymmetric Encryption Rule

Back 33

Only a private key can decrypt information encrypted by a matching public key

Only a public key can decrypt information encrypted by a matching private key.

Front 34

Certificates

Back 34

are used in asymmetric encryption to pass on public keys from their owners.

Front 35

Certificates include what info...? (6)

Back 35

Serial Number

issuer

Validity Dates

Subject

Public Key

Usage

Front 36

RSA

Back 36

Rivest, Shamir, and Adleman (RSA)

Front 37

Rivest, Shamir, and Adleman (RSA) what is it?

Back 37

a tool for creating public and private keys. Very secure and used for credit card transactions on the internet

Front 38

Diffie-Hellman

Back 38

is a key exchange algorithm used to privately share a symmetric key between 2 parties.

Front 39

ECC

Back 39

Elliptic Curve Cryptography

Front 40

Elliptic Curve Cryptography

Back 40

is a key algorithm used on wireless devices since it uses smaller key sizes using less power than other encryption methods.

Front 41

Steganography

Back 41

hides data in other data. and example would be hiding data in a written file very small so that it looks like a dot or a dash.

Front 42

Quantum Cryptography

Back 42

entails sending streams of modified protons (either emitting light up and down or side to side). each photon can be read as either a 1 or a zero which allows them to be used to create an encryption key.

Front 43

SSL

Back 43

Secure Sockets Layer

Front 44

Secure Sockets Layer

Back 44

an encryption protocol used to encrypt internet traffic

Front 45

TLS

Back 45

Transport Layer Security

Front 46

Transport Layer Security (TLS)

Back 46

is a replacement for SSL which is an encryption protocol for internet traffic

Front 47

What is required to run SSL and TLS?

Back 47

a CA since certificates are necessary for them to run.

Front 49

Which key encrypts and decrypts for e-mail digital signatures?

Back 49

private encrypts

Public decrypts

Front 50

Which key encrypts and decrypts for e-mail?

Back 50

Public Key Encrypts

Private Key Decrypts

Front 51

Which key encrypts and decrypts for websites?

Back 51

Public Key Encrypts

Private Key Decrypts

Front 52

Signing e-mail with digital signatures provides what security measures? (3)

Back 52

Authentication

Non-repudiation

Integrity

Front 53

S/MIME

Back 53

Secure / Multipurpose Internet Mail Extensions

Front 54

Secure / Multipurpose Internet Mail Extensions (S/MIME)

Back 54

one of the most popular standards used to digitally sign and encrypt e-mail.

Front 55

PGP/GPG

Back 55

Pretty Good Privacy and GNU Privacy Guard both are e-mail encryption protocols that use and RSA Algorithm and public and private keys for encryption and decryption.

Front 56

How does HTTPS us Symmetric and Asymmetric encryption?

Back 56

it uses Asymmetric Encryption to transmit a Symmetric key. Once both parties have the same key the actual data is encrypted using Symmetric Encryption.

Front 57

How do SSL and TLS us Asymmetric and Symmetric encryption in secure web sessions???

Back 57

The websites public key encrypts a symmetric key and the symmetric key encrypts data within the web session

Front 58

Public Key Infrastructure (PKI)

Back 58

Is used to request, create, manage, store, distribute and revoke digital certificates.

Front 59

CA

Back 59

Certificate Authority

Front 60

Certificate authority

Back 60

issues, manages, validates, and revokes

certificates

Front 61

Hierarchical trust model

Back 61

Root CA

I

Intermediate CA

I

Child CA

I

End User

Front 62

RA

Back 62

Registration Authority

Front 63

Registration Authority

Back 63

an individual in a large organization that assists in the certificate registration process.

Front 64

6 Common reasons to revoke a certificate

Back 64

Key Compromise

CA compromise

Change in affiliation

Superseded

Cease of Operation

Certificate hold

Front 65

CRL

Back 65

Certificate Revocation List

Front 66

OCSP

Back 66

Online Certificate Status Protocol

Front 67

Online Certificate Status Protocol

Back 67

allows the client to query the CA with the serial number and then responds with healthy, revoked or unknown.

Front 68

What does it mean is an OCSP responds with unknown?

Back 68

the certificate is a forgery

Front 69

Key Escrow

Back 69

the process of placing a private key in a safe environment in the event the original is lost. is often used if loss of encrypted data is unacceptable.

Front 70

Recovery Agent

Back 70

An designated individual who can recover or restore cryptographic keys (private keys).