Cissp Telecommunications

Front 1

1. Target Acquisition
2. Target Analysis
3. Target Access
4. Target Appropriation

Back 1

Target Acquisition

Front 2

discovery, compliance, & vulnerabilty

Back 2

network scanners

Front 3

LAN with a central cable to which all nodes connect
Advantage-Scalable, Permits node failure
Disadvantage-Bus failure

Back 3

Bus Toplogy

Front 4

even small networks are complex, layout affect scalibility and security,

Back 4

Network Topology

Front 5

devices connect to a branch on the network; Advantage Scalable, permits node failure, Disadvantage failures split the network

Back 5

Tree Topology

Front 6

closed-loop topology; advantages-deterministic; disadvantage-single point of failure

Back 6

Ring Topology

Front 7

every node in the network is connected to every other node in the network;Advantage-redundacy;Disadvatage-expensive, complex, scalabilty

Back 7

Mesh Topology

Front 8

All nodes connect to a central device; advantage-permits node.cable failure; Disadvantage-single point of failure

Back 8

Star Topoloy

Front 9

three component- light source, optical fiber cable, two types, light detector

Back 9

Fiber Optics

Front 10

DSSS,FHSS,OFDM

Back 10

Wireless multiplexing technologies

Front 11

The connection between a wireless and wired network.

Back 11

Access point

Front 12

A layer 2 device that used to connect two network segments and regulate traffic.

Back 12

Bridge

Front 13

A device that provides the functions of both a bridge and a router.

Back 13

Brouter

Front 14

A cable consisting of a core, inner conductor that is surrounding by an insulator, an outer cylindrical conductor

Back 14

Coaxial cable

Front 15

Used to code/decode a digital data stream.

Back 15

Codec

Front 16

Layer 1 network device that is used to connect network segments together, but provides no traffic control (a hub).

Back 16

Concentrator

Front 17

An asymmetric cryptography mechanism that provides authentication.

Back 17

Digital signature

Front 18

A passive network attack involving monitoring of traffic.

Back 18

Eavesdropping

Front 19

Forgery of the sender’s email address in an email header

Back 19

E-Mail spoofing

Front 20

Potentially compromising leakage of electrical or acoustical signals.

Back 20

Emanations

Front 21

Disruption of operation of an electronic device due to a competing electromagnetic field.

Back 21

EMI

Front 22

A shield against leakage of electromagnetic signals.

Back 22

Faraday Cage/ Shield

Front 23

Bundles of long strands of pure glass that efficiently transmit light pulses over long distances. Interception without detection is
difficult.

Back 23

Fiber optics

Front 24

A system that enforces an access control policy between two networks.

Back 24

Firewalls

Front 25

A Denial of Service attack initiated by sending spoofed UDP echo request to IP broadcast addresses. (See Smurf)

Back 25

Fraggle

Front 26

A secure connection to another network.

Back 26

Gateway

Front 27

Interception of a communication session by an attacker.

Back 27

Hijacking

Front 28

Layer 1 network device that is used to connect network segments together, but provides no traffic control (a concentrator).

Back 28

Hub

Front 29

An attack technique that exploits systems that do not perform input validation by embedding partial SQL queries inside input.

Back 29

Injection

Front 30

Unauthorized access of information (e.g. tapping, sniffing, unsecured wireless communication, emanations)

Back 30

Interception

Front 31

Forging of an IP address.

Back 31

IP address spoofing

Front 32

An attack that breaks up malicious code into fragments, in an attempt to elude detection.

Back 32

IP Fragmentation

Front 33

High frequency, highly directional radio signals. Attackers target interception attempts at transmission and relay stations.

Back 33

Microwave

Front 34

A device that converts between digital and analog representation of data.

Back 34

Modems

Front 35

A type of attack involving attempted insertion, deletion or altering of data.

Back 35

Modification

Front 36

A device that sequentially switches multiple analog inputs to the output.

Back 36

Multiplexers

Front 37

A mail server that improperly allows inbound SMTP connections for domains it does not serve.

Back 37

Open mail relay servers

Front 38

A Denial of Service attack that exploits packet filter firewalls that only inspect the initial fragment of a
fragmented packet.

Back 38

Overlapping fragment attack

Front 39

A basic level of network access control that is based upon information contained in the IP packet header.

Back 39

.
Packet filtering

Front 40

Provides a physical cross connect point for devices.

Back 40

Patch panels

Front 41

A Private Branch Exchange is telephone exchange for a specific office or business.

Back 41

PBX

Front 42

A social engineering attack that uses spoofed email or websites to persuade people to divulge information.

Back 42

Phishing

Front 43

Unauthorized access of network devices.

Back 43

Physical tampering

Front 44

Mediates communication between un-trusted hosts on behalf of the hosts that it protects.

Back 44

Proxies

Front 45

Layer 1 network device that is used to connect network segments together, but provides no traffic control (a concentrator).

Back 45

Repeaters

Front 46

Radio Frequency Interference is a disturbance that degrades performance of electronic devices and electronic communications.

Back 46

RFI

Front 47

Unauthorized wireless network access device

Back 47

Rogue access points

Front 48

A layer 3 device that used to connect two or more network segments and regulate traffic.

Back 48

Routers

Front 49

A specialized wireless receiver/ transmitter placed in orbit that facilitates long distance communication.

Back 49

Satellite

Front 50

An attack involving the hijacking of a TCP session by predicting a sequence number.

Back 50

Sequence Attacks

Front 51

“Worldwide Interoperability for Microwave Access” (IEEE 802.16) is specification for wireless Metropolitan Area Networks that
provides an alternative to the use of cable and DSL for last mile delivery.

Back 51

WI-MAX

Front 52

“Wireless fidelity” is a world-wide wireless technology

Back 52

Wi-Fi

Front 53

Searching for wireless networks in a moving car.

Back 53

War Driving

Front 54

Reconnaissance technique, involving automated, brute force identification of potentially vulnerable modems.

Back 54

War dialing

Front 55

Voice over Internet Protocol (VoIP) – a protocol for the efficient transmission of voice over the Internet

Back 55

Voice over IP

Front 56

A simple, inexpensive cabling technology consisting of two conductors that are wound together to decrease interference.

Back 56

Twisted pair

Front 57

Potential danger to information or systems

Back 57

Threats

Front 58

A codename that refers to the study and mitigation of information disclosure via electromagnetic emanations from electronic
equipment

Back 58

TEMPEST

Front 59

A Denial of Service attack that exploits systems that are not able to handle malicious, overlapping and oversized IP fragments.

Back 59

Teardrop

Front 60

Mitigation of spamming and other attacks by delaying incoming connections as long as possible.

Back 60

Tar Pits

Front 61

Eavesdropping on network communications by a third party.

Back 61

Tapping

Front 62

A Denial of Service attack that floods the target system with connection requests that are not finalized.

Back 62

SYN flooding

Front 63

A layer 2 device that used to connect two or more network segments and regulate traffic.

Back 63

Switches

Front 64

Unsolicited commercial email

Back 64

Spam

Front 65

A vulnerability in IP that allows an attacker to dictate the path of a communication and thereby access an internal
network

Back 65

Source routing exploitation

Front 66

Eavesdropping on network communications by a third party.

Back 66

Sniffing

Front 67

A Denial of Service attack initiated by sending spoofed ICMP echo request to IP broadcast addresses.

Back 67

Shielding

Front 68

A Denial of Service attack initiated by sending spoofed ICMP echo request to IP broadcast addresses.

Back 68

Smurf