Security Plus Chapter 7

Front 1

Which system should have personal firewalls setup?

Back 1

1. Mobile i.e. Laptops and devices that can be connected to other networks.
2. Specific servers to ensure that communication to that server is limited.
   

Front 2

Name five features of personal firewalls

Back 2

1. Block incoming traffic
2. Block outgoing traffic
3. Notification
4. A default rule (deny all traffic unless it is a response)
   
5. Create rules
   

Front 3

What are TCP Wrappers?

Back 3

Used in Linux to control access to different services i.e. Telnet, SSH, or FTP.

Configured in in two files: /etc/hosts.allow, /etc/hosts.deny

Remember host.allow is read first

Front 4

What is HIDS?

Back 4

A host-based intrusion detection system that monitors activity (application based anomaly) on the system and alerting about suspicious activity.

Front 5

Name five of the areas that HIDS monitor?

Back 5

1. Memory (suspicious programs running)
   
2. System files (uses hash values database)
3. Log files
4. File System (Changes to files)
5. Connections (port scans)
   

Front 6

One of the limitation of a network-base IDS is?

Back 6

(Packet based anomaly) If the traffic is encrypted the IDS is unable to analyze it and NIDS cannot decipher information.

Front 7

Does encryption hinder HIDS?

Back 7

No Host based software decrypts the encrypted communication and then logs the activity and then HIDS looks for suspicious activity in the unencrypted files.

HIDS involves installing an agent on the local host that monitors and reports on the system configuration and application activity

Front 8

What is the first line of defense against malicious software?

Back 8

Antivirus Software

Front 9

Name four Data Policy elements that should be included in your Security Policy?

Back 9

1. Wiping
2. Disposing
3. Retention
4. Storage
   

Front 10

What is:

1. TPM
2. HSM
3. Mobile Device encryption
   

Back 10

1. Trusted Platform Module is a computer chip on system that stored the cryptographic keys that are used to encrypt data. TPM has a dictionary attack prevention module built in.
   
2. Hardware Security Module is a card that contains a crypto-processor to perform asymmetric crypto functions and store keys
3. USB and hard drive encryption.
   

Front 11

What should one consider before storing data in the cloud?

Back 11

The company's security policy for storing the data.

Front 12

What security item must be taken in to account when using a SAN?

Back 12

When using a Storage Area Network device close attention must be paid to the configuration.

Front 13

What security two item must be taken in to account when storing Big Data?

Back 13

Handling Big Data

1. It must be stored in a secure state.
2. It must be accessed in a secure manner.
   

Front 14

What is a big drawback with VoIP?

Back 14

VoIP will suffer from delay.

Front 15

What is Data Loss Prevention (DLP)?

Back 15

DLP is a hardware and software solution that performs deep content inspection of data(such as e-mail bodies and attachments to prevent information leakage.

Front 16

What are Hardware Security Modules (HSM)?

Back 16

Devices that are designed to handle cryptographic duties allowing servers to focus on other tasks.

Front 17

What is the Encrypting File System (EFS)?

Back 17

Software used to encrypt data.can be used with NTFS 3.0

Front 18

What kind of control is a Firewall?

Back 18

Protective