Karteikarten
Exam
Karten in diesem Stapel (22)
- 1What network layer can interception take place?Interception can occur at any of the network layers.
- 2What is the difference between microwave and radio communication?Microwave is directed, whereas radio is omni-directional.
- 3What are the two main modes of encryption?- End-to-end (link)
- Point-to-point - 4What is the difference between end-to-end (link) and point-to-point encryption?End-to-end encryption occurs at all layers (ie ends at application layer) while point to point only encrypts the communication channel.
- 5What are the two major WiFi authentication schemes?WEP (wired equivalent privacy)
WPA (WiFi protected access) - 6Why would Google collect WiFi information when capturing StreetView footage?I don't know, yet.
- 7What is one way we can protect WiFi physically from access?Shielding.
- 8What is NAT?NAT is Network Address Translation. This can be done to obscure the topology of a network to the external internet.
- 9Explain the concept of "well-known" ports:Well-known ports are the first 2^12 ports, and they are bound to established services, such as HTTP, SSH, and various mail protocols.
- 10Explain the concept of a bastion host:Still looking for a good definition.
- 11How could a firewall be compromised?If someone uses an external internet source (say, a mobile hotspot), attacks can be performed through this, and thus come from "within" the internal network.
- 12What is a rootkit?A rootkit is a piece of malicious software that gains unbounded privileges over the system, and can therefore perform further harmful acts, while evading detection and preventing deletion.
- 13Explain the concept of a Trusted Computing Base (TCB)A Trusted Computing Base is a subsystem that is tasked with the responsibility of enforcing the security policy of the global system.
- 14Think about the security kernel in relation to other parts of the machine:
- 15Explain the difference between a Cold Site and a Hot Site in terms of data redundancyA Cold Site is a spare facility that can be operational in minutes or hours, but does not operate in general. A Hot Site does operate, but has the necessary data/equipment to accommodate the halting of the main site.
- 16What are the primitives of simple encryption? What do they entail?- Transposition (order of letters is changed)
- Substitution (letter exchanged for another) - 17Is the Caesar cipher a block cipher or a stream cipher?I think stream, will confirm.
- 18What is the greatest threat regarding buffer overflow attacks?- Unwarranted privilege escalation.
- Ability to run arbitrary instructions.
- Read/write access to confidential and important information. - 19What is the CIA triad?- Confidentiality
- Integrity
- Availability - 20What is strong authentication?Any authentication that uses more than one authentication mechanism, typically from different authentication modes.
- 21What are the design principles for security?- Least privilege
- Economy of mechanism
- Open design
- Complete Mediation
- Permissions bases
- Separation of Privilege
- Least common mechanism
- Ease of Use - 22What is a demiliterized zone (DMZ) in terms of computer networks?A DMZ is a network architecture that logically separates those portions of the network that should be exposed to the external internet, and those that should not.
Informationen
- Beschreibung
- COS 330 Karteikarten am Exam, erstellt von Regan Koopmans am 14/11/2017.
- Erstellt von
- Regan Koopmans
- Aufrufe
- 2
- Bewertung