Chapter 11: Network Security

Front 1

What are the 3 types of network controls?

Back 1

1. Preventative Controls
2. Detective Controls
3. Corrective Controls

Front 2

What 2 ways must controls be periodically reviewed?

Back 2

1. Verification
2. Testing

Front 3

What is the process of making a network more secure by comparing each security threat with the control designed to reduce it?

Back 3

Risk Assesment

Front 4

What are examples of components that provide redundancy?

Back 4

1. Uninterruptible power supplies (UPS)
2. Fault-tolerant servers
3. Disk mirroring
4. Disk duplexing

Front 5

What is the key to reducing disruption, destruction and disaster?

Back 5

Redundancy

Front 6

<blank> attach themselves to documents and become active when the files are opened.

Back 6

Macroviruses

Front 7

What are 4 types of intruders that attempt to gain unauthorized access to computer networks?

Back 7

1. Casual Hackers
2. Security Experts
3. Professional Hackers
4. Organization Employees

Front 8

What do you call braking into a system simply by asking how?

Back 8

Social Engineering

Front 9

What are 4 ways to control dial-in security?

Back 9

1. Routinely change modem numbers
2. Call-back modems
3. Automatic number identification (ANI)
4. One-time passwords

Front 10

What do you call a packet-level firewall?

Back 10

Packet filters

Front 11

In what way are packet filters vulnerable?

Back 11

IP spoofing - changing the source address on incoming packets from the real address to an address inside the network

Front 12

What do you use to shield a private network from outside interference?

Back 12

Network Address Translation (NAT)

Front 13

What are the 4 main components of encryption?

Back 13

1. Plaintext - unencrypted message
2. Encryption algorithm
3. Key
4. Ciphertext - encrypted text

Front 14

What are the 3 important encryption techniques?

Back 14

1. Symmetric
2. Asymmetric
3. Digital signatures

Front 15

Which type of encryption uses the same algorithm and key to both encrypt and decrypt a message?

Back 15

Symmetric

Front 16

What is a common way to crack symmetric encryption?

Back 16

Brute Force - trying all possible combinations until one is found.

Front 17

Which form of encryption uses a public key and a private key?

Back 17

Asymmetric

Front 18

What are 3 other encryption techniques?

Back 18

1. Pretty Good Privacy (PGP)
2. Secure Sockets Layer (SSL)
3. IP Security Protocol (IPSec)

Front 19

What are the 4 steps of Secure Sockets Layer (SSL)?

Back 19

1. Negotiation
2. Authentication
3. Symmetric Key Exchange
4. Symmetric Key Encryption w/ digital signature

Front 20

What are 3 types of Intrusion Detection Systems (IDS)?

Back 20

1. Network-based IDSs
2. Host-based IDSs
3. Application-based IDSs

Front 21

What are the 2 main techniques of intrusion detection systems?

Back 21

1. Misuse detection - looks for signatures of known attacks
2. Anomaly detection - looks for deviation from the norm