Security+ Chapter 2

Front 1

FTP

Back 1

File Transfer protocol. Allow authenticated or anonymous access. Port 20 or 21

Front 2

SFTP

Back 2

A secure alternative to FTP. Uses SSH to secure comm

Front 3

Anonymous FTP

Back 3

Nameless FTP logon

Front 4

Blind FTP

Back 4

Blind FTP is a configuration of anonymous or authenticated FTP where uploaded files are unseen and unreable by visitors.

Front 5

FTP vulnerabilities

Back 5

Not all OS support long name

Front 6

TCP/IP hijacking attacks

Back 6

TCP/IP hijacking is a form of attack where the attacker takes over an existing comm session

Front 7

Null session

Back 7

A null session is a connection made to a system where no redentials are supplied by the client and thus no authentication process is performed by the server

Front 8

Spoofing

Back 8

Spoofing is the act of falsifying data

Front 9

man-in-the-middle attack

Back 9

A man-in-the-middle attack is a form of comm eavesdropping attack. Attackers position themselves in the comm stream between a client and server.

Front 10

DoS

Back 10

DoS is a form of attack that has the primary foal of preventing the victimized system from performing legitimate activity or responding to legitimate traffic.

Front 11

Domain name kiting

Back 11

A scheme or scam used to discover which new domain names drive the most profitable traffic and then keep those names indefinitely without having to pay the reg frees.

Front 12

DNS poisoning

Back 12

DNS poisoning is the act of falsifying the DNS info used by a client to reach a desired system

Front 13

ARP poisoning

Back 13

ARP poisoning is the act of falsifying the IP-to-MAC address resolution system employed by the TCP/IP protocol

Front 14

Security Zones

Back 14

A security zone is an area of network that has a single defined level of security.

Front 15

DMZ

Back 15

A demilitarize zone is an area of a network that is designed specifically for public users to access. The DMZ is a buffer network between the public untrusted Internet and the private LAN

Front 16

Intranet

Back 16

A private LAN

Front 17

Extranets

Back 17

An extranet is an intranet that functions as the DMZ for business-to-business transaction.

Front 18

VLAN

Back 18

Switches are often used to create VLANs, a logical creation of subnets out of a single physical network.

Front 19

NAT

Back 19

Network address translation

Front 20

RFC 1918

Back 20

Defines a list of non-routable address
A: 10.0.0.0 - 10.255.255.255.255
B: 172.16.0.0 - 172.31.255.255
C: 192.168.0.0 - 182.168.255.255

Front 21

Routers

Back 21

Connect broadcast domains

Front 22

Switches

Back 22

Used to create VLAN

Front 23

Subnetting

Back 23

Dividing a large network into segments

Front 24

PBX

Back 24

A private branch exchange is a computer or network controlled telephone system.

Front 25

VoIP

Back 25

VoIP ids a tunneling mechanism used to transport voice/data over TCP/IP network.

Front 26

IDS

Back 26

Intrusion detection system that either watches activity in real time or reviews the contents of audit logs in order to detect intrusions or security policy violations.

Front 27

2 types of IDS

Back 27

Host based or network based

Front 28

NIDS

Back 28

Network-based IDS watches traffic in real time.

Front 29

HIDS

Back 29

Host-based IDS watches the audit trails and log files of a host system.

Front 30

Detection mechanisms

Back 30

Signature detection compares event patterns against known attack patterns stored in the IDS database.

Front 31

Response methods

Back 31

An IDS with active detection and response id designed to take the quickest action to reduce potential damage caused by an intruder.

Front 32

Firewalls

Back 32

Firewalls provide protection by controlling traffic entering and leaving a network. They manage traffic using filters or rules.

Front 33

Types of firewalls

Back 33

4 types of firewalls: Packet filtering, circuit-level gateway and application-level gateway. Stateful inspection firewall uses a combo of the first 3.

Front 34

Honeypots

Back 34

A honeypot is a fictitious environment designed to fool and lure attackers and intruders away from the private secured network. The purpose of deploying a honeypot is to provide an extra layer of protection for your private network and to gather sufficient evidence for prosecution against malicious intruders and attackers.

Front 35

Protocol analyzer

Back 35

A protocol analyzer is a tool used to examine the contents of network traffic.

Front 36

Privilege escalation

Back 36

Privilege escalation occurs when a user account is able to obtain unauthorized access to higher level of privileges.

Front 37

Password guessing

Back 37

Password attack by guessing and trying different passwords

Front 38

Birthday attacks

Back 38

The birthday attack exploits a mathematical property that states that if the same mathematical function is performed on two values and the result is the same then the original values are the same.

Front 39

Back door attacks

Back 39

The term back door can refer to two types of problems or attacks on a system: a developer-installed or hacker installed access.

Front 40

Default accounts

Back 40

Default accounts are any accounts that are predefined by the vendor.

Front 41

Data emanation

Back 41

Data emanation is the transmission of data across electromagnetic signals.

Front 42

War driving

Back 42

War driving is the act of using a detection tool to look for open AP for unauthorized access

Front 43

SSID broadcast

Back 43

Wireless networks announce their SSID on a regular basis that others can use to connect to the AP

Front 44

Blue jacking

Back 44

Blue jacking is the sending of messages to Bluetooth-capable devices without permission of the owner/user

Front 45

Bluesnarfing

Back 45

Bluesnarfing is the unauthorized accessing of data via a Bluetooth connection. This is data theft and is a crime

Front 46

Rogue access points

Back 46

A rogue wireless access point can be connected to any open network port or cable.

Front 47

Weak encryption

Back 47

Any cryptography system that either has a design or implementation flaw

Front 48

802.11 and 802.11x

Back 48

IEEE standard for wireless network comm

Front 49

WEP

Back 49

Wired Equivalent Privacy is defined by the IEEE 802.11 standard.

Front 50

Site surveys

Back 50

A site survey is the process of investigating the presence, strength and reach of wireless AP deployed in an environment.

Front 51

Why proxy service?

Back 51

The two major benefits of a proxy service are address masking and caching. Since the proxy service would browse the internet on behalf of the clients, the clients have no need to expose their own IP addresses to the outside world. In addition, since the proxy service usually comes with a proxy cache for caching contents, browsing performance can be enhanced even when you have a large group of web users to serve.

Front 52

Why Network IDS?

Back 52

You rely on intrusion detection systems to detect direct unauthorized attempts and to determine if a trend of unauthorized attempts is occurring. In a network-based IDS system, individual packets that flow through a network are analyzed.

Front 53

Your company is in the process of locking down CIFS and SMB file and print sharing. Which of the following ports do you have to secure? (Choose all that apply.

Back 53

138, 139

Front 54

Services using an interprocess communication share such as network file and print sharing services leave the network susceptible to which of the following attacks?

Back 54

A null session is a connection without specifying a user name or password. Null sessions are a possible security risk because the connection is not really authenticated. Spoofing is incorrect because spoofing involves modifying the source address of traffic or source of information. DNS kiting is incorrect because domain kiting refers to the practice of taking advantage of this AGP period to monopolize domain names without even paying for them. ARP poisoning is incorrect because ARP poisoning allows a perpetrator to trick a device into thinking any IP is related to any MAC address.

Front 55

An intrusion detection system (IDS) detects an attacker and seamlessly transfers the attacker to a special host. What is this host called?

Back 55

Padded cell

Front 56

On a Windows Server, what tool can you use to analyze and configure computer security?

Back 56

Security configuration and analysis

Front 57

Which of the following specifically refers to the act of exploiting a bug in order to gain access to system resources that are under the protection of an application or user?

Back 57

Privilege escalation

Front 58

Logic bombs may be used for providing which of the following functions?

Back 58

setting off a malicious function

Front 59

Proxy server

Back 59

Hiding internal IP configuration from public. Block external queries to internal servers. Content filtering and caching

Front 60

Proxy server

Back 60

1. Hiding internal client and IP
2. Support NAT
3. Provide caching
4. Content filtering

Front 61

Teardrop

Back 61

Numerous partial IP packets are send to a victim with overlapping sequencing and offset values

Front 62

Land attack

Back 62

Numerous SYN packets are sent to the victim with src and dest addresses spoofed as the victim's address. The victim is confused because it is getting data that it has not sent

Front 63

Ping flood

Back 63

The attacker sends numerous ping echo request to pictim.

Front 64

Ping of death

Back 64

The attacker sends oversized ping packets to the victim.

Front 65

Bonk

Back 65

The attacker sends a corrupt UDP packet to DNS port 53

Front 66

Boink

Back 66

Same as Bonk but multiple UDP packets are send to multiple ports

Front 67

Smurf

Back 67

This form DRoS uses ICMP echo reply packets

Front 68

Fraggle

Back 68

This form of DRDoS uses UDP commonly directed to port 7 (echo port) or 19 (chargen port)