Security+

Front 1

Risk assessments

Back 1

Deals with the threats, vulnerabilities, and impacts of a loss of information-processing capabilities or a loss of info itself.

Front 2

Key Components of Risk Assessment

Back 2

1. Risks to which the organization is expised

2. Risks that need addressing

3. Coordination with BIA

Front 3

Risks to which the organization is exposed

Back 3

Allows you to develop scenarios that can help you evaluate how to deal with these risks of they occur.

Creating a plan if something goes wrong you know the best way to respond.

Front 4

Risks that need addressing

Back 4

Allows an organization to provide a reality check on which risks are real and which are unlikely.

Focuses on problems that are more likely to occur and shifts more resources to prevent that problem.

Example- industrial espionage and theft are likely, but the risk of a hurricane damaging a server room in Indiana is very low.

Front 5

Coordination of BIA

Back 5

Provides an organization with an accurate picture of the situation facing it. Allows the organization to make intelligent decisions about how to respond to various scenarios.

Front 6

Risk assessment formula

Back 6

SLE × ARO = ALE

Example- if you can reasonably expect that every SLE, which is equal to asset value times exposure factor, will be equivalent of $1,000 and that there will be 7 such occurrences a year, then ALE is $7,000.

Conversely, if there's only a 10% chance of an event occurring within a year time period ( ARO= 0.1), then the ALE drops to $100.

Front 7

ALE

Back 7

Annual Lost Expextancy- monetary measure of how much loss you could expect in a year

Front 8

SLE

Back 8

Single Loss Expectancy- represents how much you expect to lose at any one time.

It can be divided by two components

AV- asset value

EF- exposure factor

Front 9

ARO

Back 9

Annualized Rate Occurrence- Likelihood often drawn from historical data, of an event occurring within a year.

Front 10

Qualitive, risk assessments

Back 10

Opinion based, objective.

Hint 10

Anytime you see the word quantitative, think of the goal as determining a dollar amount. Anytime you see the word qualitive, think of a best guess or opinion of the loss, including reputation, goodwill, and irreplaceable info, pics, or data that get you to a subjective loss amount.

Front 11

Quantitative, risk assessments

Back 11

Losses that can be calculated by the amount of business lost.

Based upon facts, subjective.

Hint 11

Anytime you see the word quantitative, think of the goal as determining a dollar amount. Anytime you see the word qualitive, think of a best guess or opinion of the loss, including reputation, goodwill, and irreplaceable info, pics, or data that get you to a subjective loss amount.

Front 12

Likelihood

Back 12

There are actual values that can be assigned to likelihood. The National Institute of Standards and Technology recommends viewing likelihood as a score representing the possibility of threat initiation.

In this way, it can be expressed in qualitive or quantitative terms.

Hint 12

Front 13

Threat Vectors

Back 13

Is the way in which an attacker loses a threat. Example- fake emails that lure you into clicking a link or an insecure hotspot and everything in between.

Front 14

MTBF

Back 14

Mean Time Between Failures- is the measure of the anticipated incidence of failure for a system or component.

The measurement determines the components anticipated lifetime.

Example- if the MTBF of a cooling system is 1 yr, you can anticipate that the system will last 1 yr period. Be prepared to replace it in 1 yr.

Front 15

MTF

Back 15

Mean Time Failure- is the average time to failure for a nonrepairable system. But if the system can be repaired the MTBF is the measurement to focus on.

Front 16

MTR

Back 16

Mean Time to Restore- is the measurement of how long it takes to repair a system or component once a failure occurs.

Hint 16

Front 17

RTO

Back 17

Recovery Time Objective- Is the maximum amount of time that a process or service is allowed to be down and the consequences still be considered acceptable.

Front 18

RPO

Back 18

Recovery Point Objective- similar to RTO, but it defines the point at which the system needs to be restored.

Front 19

SLA

Back 19

Service Level Agreement

Front 20

FTP (data channel)

Back 20

Port 20

Front 21

FTP (control channel)

Back 21

Port 21

Front 22

SSH and SCP

Back 22

Port 22

Front 23

Telnet

Back 23

Port 23

Front 24

SMPT

Back 24

Port 25

Front 25

TACACS authentication service

Back 25

Port 49

Front 26

HTTP

Back 26

Port 80

Front 27

POP3

Back 27

Port 110

Front 28

SFTP

Back 28

Port 115

Front 29

NNTP

Back 29

Port 119

Front 30

NetBIOS name service

Back 30

Port 137

Front 31

NetBIOS datagram service

Back 31

Port 138

Front 32

NetBIOS session service

Back 32

Port 139

Front 33

IMAP

Back 33

Port 143

Front 34

LDAP

Back 34

Port 389

Front 35

HTTPS

Back 35

Port 443

Front 36

FTPS data channel

Back 36

Port 989

Front 37

FTPS control channel

Back 37

Port 990

Front 38

MS WBT Server

Back 38

Port 3389

Front 39

DNS name queries

Back 39

Port 53

Front 40

TFTP

Back 40

Port 69

Front 41

HTTP

Back 41

Port 80

Front 42

EAP

Back 42

Extensible Authentication Protocol- provides framework for the authentication that is often used with wireless networks.

Front 43

LEAP

Back 43

Lightweight Extensible Authentication Protocol- created by Cisco as an extension to EAP, but it's being phased out in favor of PEAP.

Requires mutual authentication to improve security, but it's susceptible to dictionary attacks. It's considered a weak EAP protocol, and Cisco doesn't curse you recommend using it.

Front 44

PEAP

Back 44

Protected Extensible Authentication Protocol- more secure bc it establishes channel between the server and the client. Replaced LEAP, and there's native support for it in Windows, beginning with Windows XP. Supports all Windows operating systems.