Security+ Domain 1 - Systems Security

Front 1

What is Privilege Escalation?

Back 1

The theft of privileges or access to resources that a user is not authorized to possess.

Front 2

What are viruses?

Back 2

Programs that are designed to spread from one system to another thorough self-replication and to perform any of a wide range of malicious activities. Require a host to infect.

Front 3

What are Worms?

Back 3

Designed to exploit a single flaw in a system and then use that hole to replicate itself to other systems with the same flaw. Do not require host to infect.

Front 4

What are Trojan Horses?

Back 4

Form of malicious software that is disguised as something useful or legitimate.

Front 5

What are Spyware and Adware?

Back 5

Usually unwanted software that gathers information without authorization. Spyware uses it to target advertisements or steal identities. Adware uses it to direct advertisements.

Front 6

What are Armored Viruses?

Back 6

Designed to be difficult to detect and analyze.

Front 7

What are Boot sector viruses?

Back 7

Attach themselves to the boot sector of the hard drive

Front 8

What are Companion viruses?

Back 8

Attaches themselves to a legitimate program and then creates a program with different file extension. When you try to run the original program, the companion program launches.

Front 9

What are Macro viruses?

Back 9

Live in documents and emails and exploit scripting capabilities.

Front 10

What are Multipartite viruses?

Back 10

Attacks your system in multiple ways. Boot sector and executables and destroys application files.

Front 11

What are Phage viruses?

Back 11

Modify and alter other programs and databases.

Front 12

What are Polymorphic viruses?

Back 12

Alter its own code in order to avoid being detected.

Front 13

What are Retroviruses?

Back 13

Attacks or bypasses antivirus software. Anti-antivirus.

Front 14

What are Stealth viruses?

Back 14

Attempts to avoid detection by masking itself from applications. Attach selves to boot sector.

Front 15

What are Rootkits?

Back 15

A type of malicious code that fools the OS into thinking that active processes and files don't exist. Rootkits render compromised systems completely untrustworthy.

Front 16

What is a Botnet?

Back 16

A network of robots or malicious software agents controlled by a hacker in order to launch massive attacks against targets.

Front 17

What are Logic Bombs?

Back 17

Programs or snippets of code that execute when predefined event occurs.

Front 18

What are the security risks associated with BIOS?

Back 18

- If attacks can alter BIOS and CMOS, they may be able to bypass security features.
- Avoid by controlling physical access and using strong malware protection

Front 19

What are the security risks associated with USB Devices?

Back 19

- Can be used to bring malicious code or leak information
- Only protection is to fully disallow USB devices

Front 20

What are the security risks associated with Cell Phones?

Back 20

- Can interact with internet and corporate network
- Targets of hackers and malicious code
- Eavesdropping

Front 21

What are the security risks associated with Network Attached Storage?

Back 21

- Storage system connected to LAN.
- Don't always offer strong security such as authentication and authorization

Front 22

What are Hotfixes?

Back 22

Hotfixes are used during normal operations even though may require reboot. Install only if you are having problems.

Front 23

What are Service Packs?

Back 23

Service packs and support packs are comprehensive set of fixes consolidated into a single product. More thoroughly tested than hotfixes, and should be installed

Front 24

What are Patches?

Back 24

Patches are temporary quick fix to a problem. Corrects programming flaws and security vulnerabilities. More tested than hotfixes.

Front 25

What are Group Policies?

Back 25

Group Policies create restrictions that apply to workstations when users authenticate. Those are applied to the registry. Use security templates. New security requirements can be quickly distributed

Front 26

What are security baselines (or configuration baselines)?

Back 26

Used to maintain a hardened system
Standardized minimum level of security that all systems in the org must comply with
Is defined by the organizations security policy

Front 27

Describe ActiveX vulnerabilities

Back 27

Mobile code that runs on client. Uses current users security privileges.
Uses Authenticode for security which is a certificate technology.
ActiveX components are saved to the desktop and can be run again later

Front 28

Describe CGI vulnerabilities

Back 28

Run on web server and interact with client browser.
All folders must have execute rights.
Can leak information about server. May execute commands on server.

Front 29

Describe Java applet vulnerabilities

Back 29

Small self contained java script that is downloaded from server and runs from browser.
Run on the client but does not use current users security privileges.
Run in restricted area of memory called the sandbox. It is considered safe in the sandbox. Errors can allow the aps to run outside the sandbox.

Ability to execute instructions
Resource Monopolization
Unexpected Redirection

Front 30

Describe SMPT Relay vulnerabilities

Back 30

Feature designed into many email servers. Allows them to forward email to other email servers. Has helped generate a great deal of spam. “Open relays” can be used to send ads and other messages.

Front 31

What is Buffer overflow?

Back 31

When hacker can input more data into the buffer than can be handled. Can cause system crashes, corrupt data, user privilege escalation, etc.

Front 32

What is Host Based Intrusion Detection (HIDS)?

Back 32

A security application designed to monitor a local computer. Anti virus and anti spyware are examples of HIDs.
Designed to run as software on a host computer system. Examine machine logs, system events and applications interactions. Don’t normally monitor network traffic on the host. If system is compromised, the log files may become corrupt or inaccurate.
Must be deployed on each system that needs it.

Front 33

What is S/MIME?

Back 33

The internet standard for encrypting and digitally signing email. Uses RSA.

Front 34

What is PGP used for?

Back 34

To encrypt and digitally sign email messages. It uses RSA and Diffie-Hellman.

Front 35

What vulnerabilities are associated with Java scripts?

Back 35

Allow file access, cache acces, file upload and email exposure.