Security+ Domain 2 - Network Infrastructure

Front 1

What is S/FTP?

Back 1

Offers encryption for both authentication and data traffic using SSH. Client and server must be compatible.

Front 2

What is Blind FTP

Back 2

Write only FTP. Users can upload files, but can not view any files. Vulnerable to packet sniffing.

Front 3

What is TCP/IP Hijacking?

Back 3

A type of Man in the Middle attack. Attacker gains access to a host in network and logically disconnects it from the network. Inserts another machine in its place with same IP address.
Can take over client or server.
Hijacker will possibly acquire privileges to access all information on server.

Front 4

What are Null Sessions?

Back 4

Hacker can log into windows as a null user bypassing basic authentication. Especially a vulnerability with NetBIOS or if other Windows OS security setting is disabled.

Front 5

What is Spoofing?

Back 5

Masquerade as someone else. Usually access attack.
Spoofing can be used in email, redirect packets, bypass traffic filters, steal data, perform social engineering attacks and falsify websites.

Front 6

What is a Man-in-the-Middle attack?

Back 6

A form of communications eavesdropping attack. Attackers position themselves in the communication stream between a client and server. The client and server believe they are communicating with each other.

Front 7

What are Replay Attacks?

Back 7

Capture information login credentials and replay it later gaining access to the system.
Countermeasures include packet sequencing and timestamps. Kerberos is not vulnerable to replay attacks because it uses timestamps

Front 8

What are Denial of Service (DoS) attacks?

Back 8

Form of attack that has the primary goal of preventing the victimized system from performing legitimate activity or responding to legitimate traffic.
May either exploit an existing weakness or error, or may flood the server with garbage network traffic.

Front 9

What are Distributed Reflective Denial of Service (DRDoS)?

Back 9

Uses amplification or bounce network that has been inadvertently left hanging out there with the ability to receive broadcasts or create broadcasts, messages, echoes or bounces.

Front 10

What are Smurf Attacks?

Back 10

Form of DDoS. Uses ICMP echo reply packets and IP spoofing and broadcasting to send a ping to a group of hosts on a network.

Front 11

What is Fraggle?

Back 11

Form of DRDoS. Uses UDP packets commonly directed to port 7 (echo port) to 19 (char gen port)

Front 12

What is a SYN Flood attack?

Back 12

Common form of DoS attack. Exploits TCP three way handshake. Client continually sends and receives ACK packets but doesn't open the session. The server holds the session open and sessions fill up.

Front 13

What is a Teardrop attack?

Back 13

DoS attack. Numerous partial IP packets are sent to a victim with overlapping sequencing and offset values. Victim attempts to assemble complete IP packets, but fragments overwrite each other and produce packet of invalid size. Causes victim to freeze or crash.

Front 14

What is a Land Attack?

Back 14

Numerous SYN packets are sent to the victim with source and destination addresses spoofed as the victims address. The victim is confused because it is unable to respond to a packet it sent to itself and has no record sending. Results in a freeze or crash.

Front 15

What is a Ping Flood attack?

Back 15

Attacker sends numerous ping echo requests to a victim. The victim responds with an echo. If enough inbound and outbound activity, no legitimate traffic can be used.

Front 16

What is Ping of Death attack?

Back 16

The attacker sends oversized ping packets to the victim. The victim doesn't know how to handle them and freezes or crashes.

Front 17

What is Domain Name Kiting?

Back 17

Scheme or scam used to discover which new domain names drive the most profitable traffic and then keep these domain names indefinitely without having to pay for them.

Front 18

What is DNS Poisoning?

Back 18

Falsifying the DNS Information used by a client to reach a desired system.

Front 19

What is ARP Poisoning?

Back 19

Falsifying IP-to-MAC address resolution system employed by TCP/IP protocol.

Front 20

What is an Intranet?

Back 20

Private LAN that uses the same protocol and information as the Internet
Private network that uses TCP/IP and offers web browsing, FTP, email...

Front 21

What is an Extranet?

Back 21

Intranet that functions as a DMZ for business to business transactions

Front 22

What is a DMZ?

Back 22

Designed for public users to access
Usually controlled by firewalls and/or routers
Buffer between the public untrusted internet and private trusted LAN

Front 23

What is a VLAN?

Back 23

Logical creation of subnets from a single physical network
create groups of users and systems and segment them on the network.
Reduces size of broadcasts

Front 24

What is Network Address Translation (NAT)?

Back 24

Originally extended number of usable internet addresses. Now allows organization to present single address for all computer connections.
Hides your network.
Acts as a firewall.
Can save IP addresses.
Act as a proxy between LAN and Internet

Front 25

What is a Router?

Back 25

Primary instrument for connecting 2 or more networks. Provide path between networks. Router has 2 connections with own address. Intelligent devices. Most can act as packet filtering firewalls. Others more advanced.

Front 26

What is a switch?

Back 26

Multiport devices that improve network efficiency. Virtual circuit capability. These virtual circuits are more difficult to examine with network monitors

Front 27

What is Network Access Control (NAC)?

Back 27

A concept of controlling access to an environment through strict adherence to a security policy. Pre admission philosophy or Post admission philosophy .

Front 28

What s RFC 1918?

Back 28

Defines the ranges of private IP addresses that aren't routable across the Internet.
10.0.0.0-10.255.255.255 (10.0.0.0/8 subnet, 1 Class A range;
172.16.0.0 - 172.32.255.255 (172.16.0.0/12 subnet) 16 Class B ranges;
192.168.0.0 - 192.168.255.255 (192.168.0.0/16 subnets), 255 Class C ranges.

Front 29

What is Subnetting?

Back 29

A divsioning process used on networks to divide larger groups of hosts into smaller collections.

Front 30

What is Network Intrusion Detection System (NIDS)

Back 30

NIDS can detect malicious activity inside the network (it doesn't cross the firewall)
Monitors network traffic in real time and monitors traffic patterns, scans packet header information and examines the contents of packets
Good at detecting network focused attacks like bandwidth based DoS

Front 31

What is Network Intrusion Prevention System (NIPS)

Back 31

NIPS is a subset of NIDS focused on prevention.
NIPS can respond in real time to prevent attacks by dropping packets or otherwise interfere with it

Front 32

What is a Packet Filter Firewall?

Back 32

Typically a router mainly for Internet access. Passes or blocks traffic to specific addresses base on type of application. Doesn't analyze the data of the packet. Filters traffic based on packet header. Least secure but good first line of defense.
Layer 3

Front 33

What is a Circuit Level Gateway Firewall?

Back 33

A type of proxy server that filters traffic by monitoring the activity with a session. Maintains state information.
Occurs at Layer 5 - session layer

Front 34

What is an Application Level Gateway Firewall?

Back 34

A type of proxy server that filters traffic based on user access, group membership, application or service used or type of resource being transmitted.
Examines packets for content.

Front 35

What is a Proxy Firewall?

Back 35

Intermediary between networks and in front of DMZ. Process requests from an outside network. Examines data and makes rules based decisions about whether should be forwarded or refused. Can hide IP addresses. Better security than packet filtering. Increased intelligence.

Front 36

What is Stateful Inspection Firewall?

Back 36

Has intelligence. Perimeter security. Records kept using a state table that tracks every communication channel. Especially used in connectionless protocols such as UDP and ICMP. Vulnerable to DOS attacks. Can overload the state table causing firewall to shut down.

Front 37

What are Internet Content Filters?

Back 37

Tools used to limit access to resources that are deemed insecure.

Front 38

What are Protocol Analyzers?

Back 38

Tool used to examine the contents of network traffic.

Front 39

What are COAX cables?

Back 39

Built around a center conductor or core that caries data. core has wrapping and insulation. Relatively protected. Supports baseband and broadband signals. Terminator, NIC, t-connector or other connector can malfunction or become disconnected. Can become brittle over time. Expensive per foot. Can be vulnerable via t-connector attached to a network sniffer. Can be victim of vampire tap.

Front 40

What are Twisted Pair?

Back 40

Unshielded Twisted pair (UTP) and Shielded Twisted Pair (STP) most prevalent today. Comes in 7 grades and categories. Cost common is CAT 5. Can be easily tapped into, primarily for internal wiring. Known as 10BaseT (category 3)supports 10Mbps of throughput. Max length of 100 meters. More susceptible to EMI

Front 41

What are Fiber Optic Cables?

Back 41

High level of performance, but expensive. Uses light so less vulnerable to interference. Can’t be tapped easily. However passive connections can bee made at the connections. Usually bridged to wire connections. Not as susceptible to EMI. More difficult to eavesdrop. Throughput of 1Gbps and max length of 2-26km

Front 42

Describe Category 1 Twisted Pair cables.

Back 42

Voice grade. Used for phones and modems.

Front 43

Describe Category 2 Twisted Pair cables.

Back 43

4 Mbps. used in older mainframe systems.

Front 44

Describe Category 3 Twisted Pair cables.

Back 44

10Mbps Ethernet, used in 10BaseT networks

Front 45

Describe Category 4 Twisted Pair cables.

Back 45

16 Mbps. Used in Token ring networks

Front 46

Describe Category 5 and 5e Twisted Pair cables.

Back 46

100Mbps, 1000 Mbps, used in 10, 100 and 1000 baseT and similar networks. Most common in newer networks

Front 47

Describe Category 6 Twisted Pair cables.

Back 47

1000 Mbps. Used in highspeed network installations

Front 48

Describe Category 7 Twisted Pair cables.

Back 48

10Gbps. Very high speed. Not available. Proposed

Front 49

What is Wired Equivalent Privacy (WEP)?

Back 49

Defined by the IEEE 802.11 standard. Security standard for wireless devices. Encrypts and provides data security. Some weaknesses in encryption. Protects against packet sniffing and eavesdropping.

Front 50

What is Wi-Fi Protected Access (WPA)?

Back 50

Designed to address core problems with WEP. Implement 802.11i standard. WPA is backward compatible but limited. WPA2 is not backward compatible but implements full standard

Front 51

What is Wireless Application Protocol (WAP)?

Back 51

Equivalent to TCP/IP for wireless. Standard. Uses smaller version of html called wireless markup language (WML). Communicate using a WAP gateway system. Gap in the WAP - interconnection between the WAP server and internet isn't encrypted and can be intercepted

Front 52

What is Data Emanation?

Back 52

Transmission of data across electromagnetic signals. Most computer and network activity are performing some sort of data emanation.

Front 53

What is Blue jacking?

Back 53

Sending messages to Bluetooth capable devices without permission.

Front 54

What is Bluesnarfing?

Back 54

Unauthorized accessing of data via bluetooth connection. Data theft.

Front 55

What is a Rogue Access Point?

Back 55

Access point that can be connected to any open network port or cable.

Front 56

What is Network Access Control (NAC)?

Back 56

Can be used to protect network from malicious hosts. Ensures computers are properly configured. Can not grant access based on users computer.

Front 57

What is Dual Backbone?

Back 57

Lan redundancy

Front 58

What is LDAP Data Interchange Format (LDIF)?

Back 58

Protocol designed to enable LDAP Servers to exchange directory information.

Front 59

What do you use the Netstat tool for?

Back 59

Display incoming and outgoing network connections, routing tables, and network interface statistics.

Front 60

What do you use the tracert tool for?

Back 60

Determine the route a packet takes across a Windows IP network.

Front 61

What is Directory Information Tree (DIT)?

Back 61

Hierarchial structure that can be used to search directory information.

Front 62

What is X.500?

Back 62

Directory service specification on which LDAP is based.

Front 63

What is the purpose of a dual backbone?

Back 63

To provide LAN redundancy