It Security+

Front 1

A back door attack is usually a?

Back 1

Acess or Modification attack

Front 2

SSH uses what port for connections

Back 2

22 and TCP

Front 3

is a whole idsk encryption feature that can encrypt an entire volume iwht 128-bit encryption

Back 3

Bitlocker

Front 4

allows a transport protocol to be sent acrross the network and utilized by the equivalent service or protocol at the receiving host

Back 4

Encapsulation

Front 5

Originally designed by MIT, it is becoming very popular as an authentication method.

Back 5

Kerberos

Front 6

are programs or snippets of code the execute when a certain predefined event occurs

Back 6

Logic bomb

Front 7

Two particular areas of interset with web servers are filters and controlling access to

Back 7

Executable scripts

Front 8

Occur when an attacker takes control of one end of a TCP session

Back 8

TCP Sequence number attacks

Front 9

is a facility designed to provide immdiate availability in the event of a system or network failure

Back 9

Hot site

Front 10

is the process of systematically identifying the network and its security proture

Back 10

Footprinting

Front 11

Allow you to isolate systems from unauthorized users

Back 11

Security zones

Front 12

can be thought of as an intermedicary between your network and any other network

Back 12

Proxy firewall

Front 13

cards that are difficult to counterfeit, but they're easy to steal

Back 13

Smart cards

Front 14

is a feature designed into many e-mail servers that allows them to forward e-mail to ther e-mail servers

Back 14

SMTP Relay

Front 15

The most difficult part of the process is attempting to assign values to information

Back 15

Asset-identification

Front 16

is a form of social engineering in which you simply ask someone for a piece of information that you are missing by making it look as if it is a legitimate request.

Back 16

Phishing

Front 17

The purpose of this is to identify and evaluate the enemy, identify and track communication patterns, and identify what type of technology are being used to send them.

Back 17

Analysis and intelligence

Front 18

This model is common in network administrative roles.

Back 18

Role-based access control or Rbac

Front 19

is a newer protocol that merges SSL with other protocols to provide encryption.

Back 19

TLS

Front 20

Attacks on TCP/IP usually occur at what layer,

Back 20

HOST-TO-HOST or INTERNET layer

Front 21

are software programs that have the ability to hide certain things from the operating system.

Back 21

Rootkits

Front 22

a device that has some of the best capabilities of routers and hubs combined.

Back 22

Switch

Front 23

it draws attackers away from a higher-value system or allows administrators to gain intelligence about an attack strategy.

Back 23

Honeypots

Front 24

are freestanding devices that operate in a largely self-contained manner, requiring less maintenance and support than a server-based product

Back 24

Appliances

Front 25

A system that uses smart cards and passwords is referred to as a

Back 25

TWO-FACTOR authentication system

Front 26

are common in an IDS environment and may be the result of unusual traffic in the network.

Back 26

False positives

Front 27

occur when an application receives more data than it’s programmed to accept.

Back 27

Buffer overflow

Front 28

differs from other malware in that it works often actively on behalf of a third party

Back 28

Spyware

Front 29

MAC uses this to identify the level of security that applies to objects

Back 29

LABELS

Front 30

are your first line of defense, and they must be configured to pass only traffic that is authorized by the network administrators.

Back 30

Routers

Front 31

Two primary methods use ICMP to disrupt systems:

Back 31

SMURF attacks and ICMP tunneling.

Front 32

can use multiple public IP addresses

Back 32

NAT

Front 33

uses a single one and shares the port with the network.

Back 33

PAT

Front 34

are a combination of the IP address and the port

Back 34

Sockets

Front 35

is an occurrence in a data source that indicates that a suspicous activity has occurred

Back 35

event

Front 36

involves trying to get access to your system from an attacker's perspective

Back 36

penetration testing

Front 37

viruses change for in order to avoid detection

Back 37

polymorphic

Front 38

works by encapsulating the network traffic in a protocol called Network Control Protocol (NCP)

Back 38

PPP

Front 39

Any wireless access point added to your network that has not been authorized is considered a

Back 39

Rouge

Front 40

help in identifying what services are running on a network.

Back 40

Port scan

Front 41

process of making a workstation or server more secure is

Back 41

Platform hardening

Front 42

exists to detect and report unusual occurrences in a network, not block them.

Back 42

IDS