Network Security

Front 1

What does POP stand for?

Back 1

Post Office Protocol

Front 2

What is POP used for?

Back 2

Retrieving emails from server to client, ports 100 & 995

Front 3

What does IMAP stand for?

Back 3

Internet Message Access Protocol

Front 4

Compare POP to IMAP

Back 4

IMAP ports 143 & 993 (More advanced)

Front 5

What is SMTP?

Back 5

Simple Mail Transfer Protocol, for sending out emails from client to server and email exchanges among servers. Ports 25 & 465

Front 6

What is MUA?

Back 6

Mail User Agent- email client or email reader, e.g/ Microsoft Outlook and Mozilla Thunderbird

Front 7

What protocol does Web Email use?

Back 7

HTTP

Front 8

In Email Security what is confidentiality?

Back 8

Keep email content secret

Front 9

In email security, what is message integrity?

Back 9

prevent and detect modification

Front 10

In email security, what is authentication?

Back 10

verify the sender (and hopefully the receiver as well)

Front 11

In email security, what is non-repudiation?

Back 11

one cannot deny sending emails

Front 12

Name 3 ways to secure emails

Back 12

- simple email encryption

-PGP and S/MIME

- detect and prevent email phishing

Front 13

Name an example of simple Email Encryption

Back 13

Secure Mail for Gmail (by Streak)

-- no digital signature

-- links are removed

-- end to end encyption

Front 14

What is the drawback of Simple Email Encryption?

Back 14

Symmetric key. Drawback is getting the password

Front 15

What does PGP stand for?

Back 15

Pretty Good Privacy

-----Thunderbird +GG4win

Front 16

What are some Email Spam and Phishing Defense

Back 16

Reliable/Trustworthy email providers

Identify email senders

Double check links

Don't download or open unfamiliar attachments

Don't forward random emails

Report to IT services

Front 17

Name two non-secured protocols that supports password authentication

Back 17

rlogin-default TCP port #513

telnet- port #23

Front 18

What is SSH?

Back 18

Secure Shell

Supports multiple authentication methods

can be used to secure SFTP and SCP

Default TCP port #22

Front 19

What is SSL?

Back 19

Secure Socket Layer

Developed by Netscape

V.3 published by IETF in 1995, deprecated in June 2015 due to security vulnerability

Front 20

What is TLS

Back 20

Transport Layer Security

Front 21

Front 22

What is FTP and its two ports?

Back 22

File Transfer Protocol

-port #20 for data

-port #21 for control

- No encryption

-simple user authentication, no server authentication

Front 23

What does SCP stand for?

SFTP?

FTPS?

Back 23

Secure Copy (Port 22)

SSH File Transfer Protocol (Port 22)

- security level as SSH, ex program WinSCP

File Transfer Protocol over SSL/TLS (port 443)

Front 24

What is ISM? And why do we use it?

Back 24

(industrial, scientific, medical) unlicensed bands

-- Free

Front 25

What is the importance of session establishment?

Back 25

-Wifi is based off of this

- Clients scan channels to send a broadcast probe request and what for probe responses from access points with SSID

Clients sends an authentication and association request to AP

Front 26

What is SSID?

BSSID?

Back 26

-Service Set Identifier

- name of wi-fi

-Mac address

Front 27

Name and explain 3 Security Mechanisms

Back 27

Hidden wireless networks

-omitted SSID in beacons

-hide SSID

- - BSSID can still be seen

-- inSSIDer

Mac Filtering

Respond to broadcast probe request

Front 28

What can hackers use to find SSID?

Back 28

airodump and aireplay

Front 29

What does WEP stand for?

WPA?

Back 29

Wired Equivalent Privacy (Do Not Use)

Wi-Fi Protected Access (Do Not Use)

Front 30

Types of WPA?

Back 30

- WPA2 (802.11i)

--default using Advanced Encryption Standard (AES)

--TKIP for backward compatibility but not recommended

- WPA 2 Personal

-- Uses Pre-Shared Key

-- PSK used to derive encryption keys

-WPA2 Enterprise

-- uses authentication server

-- WPA2-PSK (TKIP), WPA2-PSK (AES) the current most secure, wPA-PSK(TKIP), WPA-PSK (AES)

Front 31

Other Types of Security Modes

Back 31

- Open (Risky) - no passphase

- WEP 64 (risky) - vulnerable

- WEP128 (Risky) - larger isnt better

Front 32

What Software did was downloaded for Email security?

Back 32

Mozilla- Thunderbird

Enigmail

GnuPG or Linux, Gpg4win (For windows)

Front 33

What was the email software used for?

Back 33

Encrypt and Sign emails

Front 34

How do you unlock the secret key in Enigmail?

Back 34

Enter in the Passphrase

Front 35

What protocol was used to sign and encrypt the message?

Back 35

PGP/MIME

Front 36

What software was used to transfer files between server and client?

Back 36

FileZilla

Front 37

What must you NOT have running while operating FileZilla

Back 37

other FTP servers (Windows ISS FTP or Apache2Triad)

Front 38

What is the default port number an IP address in FileZilla setup?

Back 38

14147

127.0.0.1

Front 39

What is the default port for FTP server control connection?

Back 39

Port 21

Front 40

Should you leave the default message for FileZilla? Why?

Back 40

No, all software has vulnerabilities. IF version number is displayed--easy for hackers

Front 41

What is MODE Z FTP?

Back 41

isa real-time compression and transfer protocol

under Filetransfercompression

Front 42

What protocol does FileZilla use?

Back 42

FTPS (FTP over SSL/TLS)

Front 43

What is the default port number for FTP over TLS?

Back 43

990

Front 44

Sender encrypts emails using symmetric session key (S)

S is then encrypted using recipient’s _______

Recipient decrypts S using ___ ____ ____, and decrypts email using ___

Emails signed using sender’s ______ key

Recipient verifies signing using sender’s paired _____ key

Back 44

- public key

-paired private key

-S

-private

-public

Front 45

What does S/MIME Stand for?

Back 45

-- Secure / Multipurpose Internet Mail Extension

--MIME was developed in the early 90s to allow people to send pictures, sound, programs and general attachments

--MIME has no security features

-- Standard for signing and encrypting emails

Front 46

What is a digital ID?

Back 46

basically same as a digital certificate–your name–public/private key pair–public key certificate for this ID (binding)

Front 47

What is Spam and Phishing?

Back 47

Email spam – junk or unsolicited bulk emails

--often contain disguised links leading to phishing websites

Phishing - a fraudulent process used by spammers to acquire sensitive information from users

Front 48

Name Discovery and Monitoring Tools?

Back 48

WiGLE.net: map of APs

inSSIDer(or NetStumbler): broadcast probe requests to get responses from AP

Kismet: support GPS-tracking, distributed deployment, GUI, a Perl program

airodump-ng: part of aircrack-ng

war-driving to find APs

war-flying with GPS to survey an area