Security Plus Chapter 6

Front 1

Name four procedures for Hardening the Network?

Back 1

1. Port Security: limiting which MAC address connect to Switch ports. MAC limiting.
   
2. MAC Limiting: and Filtering: Limits which MAC addresses connects to ACL or switch
3. Disable Unused Interfaces (Ports)
4. RADIUS 802.1x: Sends all network access request to an authenticating server
   

Front 2

Name steps to Harden Network Switch?

Back 2

1. Connect to the console port through a serial connection.
2. Disable unused ports
3. Configure Port Security
4. Test the Port Security
   

Front 3

How is are Rogue system/device handled?

Back 3

Disable the port the device is connected to then investigate.

Front 4

What are Security Templates?

Back 4

Security templates are text files that can be used to configure policy settings in a Windows environment.

Front 5

What is a security Baseline?

Back 5

A standard configuration that has been approved by the company for a specific type of system or device. It is required for all systems.

Front 6

What are the four key stages of managing a Security Baseline?

Back 6

1. Security Posture: baseline requirement established and documented.
2. Initial Baseline Configuration: Template or imaging.
3. Continuous Security Monitoring: Running Vulnerability Scans
4. Remediation: Correcting a fault in the system
   

Front 7

Name three methods of reporting?

Back 7

1. Alarms: report critical events
2. Alerts: used to notify admin an event has occurred
3. Trends: analysis typically involves looking at log files or packet capture looking for trends
   

Front 8

Purposely Inputting Invalid data into a data entry screens is?

Back 8

Fuzzing

Front 9

What is the Application Security Issue with ActiveX controls, Java, Scripting Browser and Cookies?

Back 9

1. ActiveX: controls can manipulate the system.
2. Java: Sandbox exclusivity.
3. Scripting: Can modify the system.
4. Browser: Because most Web sites have different types of content.
5. Cookies: info can be viewed by others and unencrypted and can be viewed.

Front 10

What is the Application Security Issue with Instant messaging, Peer-to-Peer File sharing, P2P and Buffer overflow?

Back 10

1. Instant Messaging: Can give hacker free rein
   
2. Peer-to-Peer: Can contain malicious code
3. Cross-site scripting: Overloading a system and then taking it over.Script code is inserted into a form that executes when the page is displayed by another user.
4. Buffer Overflow:Can result allow admin access
   

Front 11

The best practice for preventing application security fall into two categories what are they?

Back 11

1. Validate input
   
2. Apply patches
   

Front 12

Application Hardening is accomplished by?

Back 12

1. Disabling unused features

Front 13

Cross-site Scripting is prevented by?

Back 13

Validating input.

Front 14

Cross-site request forgery is prevented by?

Back 14

1. Do not check Remember Me Box
2. Application cookies should be set to expire in a short time.
   

Front 15

Server and Client side validation can be used is a method of?

Back 15

Application Hardening.

Front 16

What is the first thing to do on all servers to harden them?

Back 16

Disable unnecessary software and services.

Front 17

Once all unnecessary software and services have been disabled what should be done next.

Back 17

1. Patch the system
2. Configure password and account lockout policies and enable auditing
3. Set strong passwords on accounts
4. Rename default accounts.

Front 18

In addition to applying standard hardening procedures what should be done with the HTTP servers?

Back 18

1. Place servers in the DMZ outside firewall and the internal firewall.
2. The Server is not accessed by the public then disable anonymous access.
3. Use SSL when needed
   

Front 19

In addition to applying standard hardening procedures what should be done with the DNS servers?

Back 19

1. Limit Zone transfers i.e. when the primary DNS server sends the DNS data to the secondary DNS server.
2. Enable port UDP 53 to open the firewall to allow DNS queries to reach the DNS server and block TCP 53 if zone transfers are not allowed.
   

Front 20

In addition to applying standard hardening procedures what should be done with the DHCP servers?

Back 20

1. Create a scope (IP addresses for the DHCP to give out)
2. Associate MAC with the in scope IPs
   

Front 21

In addition to applying standard hardening procedures what should be done with the SMTP and FTP servers?

Back 21

1. Protect the SMTP with and firewall and open TCP port 25 and disable relaying to destination server.
2. Protect FTP by limiting who can upload and decide about using anonymous or forcing authentication.
   

Front 22

Network segmentation allow for control of?

Back 22

Which systems can communicate with one another on the network.VLANs and IP subnets can be used for segments.

Front 23

Control redundancy and diversity is the security principle of?

Back 23

Ensuring that there is diversity of product

Front 24

These provide granular control of access to specific network services. What are they?

Back 24

Wrappers

Front 25

In addition to patching the Operating System it is a good practice also patch the ________________?

Back 25

Applications