Karteikarten

Security Plus Definitions

Ches Vernon Englisch 200 Karten

Karten in diesem Stapel (200)

1What is CIAConfidentiality
Integrity
Availability
2What is non-repudiation?The ability of a user to deny that something has happened.
3What is OSINTOpen Source Intelligence which is Facebook, ETC
4Types of Threat Actors & LevelScript Kiddies - Trivial Knowledge
Hacktivist - Requires activism
Organized Crime - Make money
Nation States - APT
Insiders (Infrastructure)
Competitors
5What is an APTAdvanced Persistent Threat - long lasting, persistent threats usually with nation states.
6What do risk assessments includeVulnerability Assessments
Threat Assessments
- Normally done at the same time.
7Types of Security ControlsAdministrative
Technical
Physical
8What are administrative security controls?Control actions towards IT Security
- Laws
- Policies
-Guidelines
- Best Practices
9What are technical security controls?Computer Stuff
Firewalls
Password Links
Authentication
Encryption
10What are physical security controlsGates
Guards
Keys
Man Traps
11Types of security control functionsDeterrents
PReventative
Detective
Corrective
Compensating
12Types of PoliciesAcceptable Use Policy
Data Sensitivity and Classification
Access Control Policy
Password Policy
Care/use of equipment
Privacy Policy
Personnel Policies
13Acceptable Use Policy?Defines what a person can and cannot do on company assets
14Data sensitivity and classification policiesDefines level of importance for data. Classified, secured, etc.
15What is an access control policyHow to get access to data or resources
Or what type of data you have access to
16what is a Password policyDefines use, maintenance and restoration of passwords as well as login issues, etc.
17what is a Care and use of equipment policyhow equipment is maintained, managed, etc
18What is a Privacy policyUsually for customers, explains what they can and cannot do with your data or information
19What is a personnel policyAnything to do with personnel, including mandatory leave policies, etc.
20What is MTTRMean time to repair, or the average time it takes to fix an average fault, error or system failure.
21What is the MMTF?Mean time to failure, or the time the system on average is up.
22What is MTBF?Mean time before failure, or the time from a failure to another failure.
23What is an exposure factor?Exposure factor is the % degradation of a system. 1=100%
24What is SLESingle Loss Expectancy value: SLE=Asset Value * Exposure Value
25What is AROAnnualized rate of occurrence: ARO=SLE*ARO
26What is PIAPrivacy Impact Assessment: What would happen if privacy information is lost
27What is a PTA?Privacy Threshold Assessment:
28What is RTORecovery Time Objective: Minimum time to bring a system back online, or how long till it is down before damage is done
29What is RPO?Recovering Point Objective: maximum data that be lost without substantial damage
30What is confidential data?Limited to authorized viewing as agreed on by parties involved - such as contract terms. Typical NDAs, etc.
31What is private informationPII, or limited to only the individual whom the information is shared.
32What is proprietary information?Private data at the corporate level, for example the Coca-Cola recipe.
33Data User Roles (or Systems)1. Users: Assigned permissions to complete tasks.
2. Privileged Users: Increased access and control relative to a user
3. Executive User: Sets policy on data and incident response plan
4. System Administrator: Manages day-to-day data.
5. Data Owner/System Owner: The ones who own the data.
34Role based data controlsSystem Owner
System Administrator
Data Owner
User
Privileged User
Executive User
35Role based Data Controls: System OwnerManagment Level
Maintains security of the system
Defines a system Administrator
Works with data owners to ensure security
36Role Based Data Controls: System AdministratorDay to Day administration of a system
Implements Security Controls
37Role Based Data Controls: Data OwnerDefines the sensitivity of the data
Defines the protection of the data
Works with the system owner to protect data
Determines Access to the data
38What is a BPA? And what parts to they have?Business Partner Agreement
1. Primary Entities
2. Time Frame
3. Financial Issues
4. Managment
39What is an ISA and what parts does it have?Interconnection Security Agreement (ISA)
1. Statement of requirements
2. System security Considerations
3. Topological Drawing
4. Signature Authority
40What is an SLA and what parts does it have?Service Level Agreement
1. Services to be provided
2. Minimum up-Time
3. Response time
4. Start and end date
41What is obfuscation in regards to CryptographyHiding or confusing the meaning of data.
42Types of Obfuscation1. Diffusion: Make data fuzzy (images, etc)
2. Confusion: stirring or mixing data
43What are the classic cryptography Components?Algorithm
Key for encryption
44What is XOR?Exclsuive Or
A type of Binary Encryption
Has a binary key set
45What is kerckhoffs principle?As long as you don't know the key, you can understand the algorithm but shouldn't be able to break it
46What is Symmetric encryption?The process of encrypting data with a key, sending the data and then decrypting it with the same key. And, it's the primary way we exchange/encrypt data
47What is a session key?A type of symmetric key that can be used to decrypt during a session
48What is an ephemeral key?A temporary key, or one time use
49What keys do we use in sessions?An asymmetric encryption
50What is asymmetric encryptionUses two keys, one public and one private key. Private key is used to decrypt and public key to encrypt. It's pretty slow!
51What are cryptosystems for?Define key properties, communication requirements for the key exchange and the actions taken through encryption and decryption process.
52What is AES?Advanced Symmetric Encryption System - a type of modern encryption algorithm + key generator.
53Technical Data of AES Block Size: Key Size: Rounds:Block Type
128 Bit
128, 192, or 256
10, 12 or 14
54What is RC4A type of streaming encryption system (Used in communications, usually) that encrypts one bit a time.
55RC4 Technical Data Block Size Round Size Key SizeStreaming Cipher
1 Bit at a time
1 Round
40-2048
56What is CBCCipher Block Chaining
57What happens in CBC?Adds an XOR against the IV and creates block repetition from final block to change key.
58What is an IV?Initialization Vector
59What is CFB?Cipher Feedback
60What happens in Cipher Feedback?1. Encrypt IV
2. XOR it to first block
3. Recycle Last block
61What happens in Output Feedback Encryption1. Encrypt IV, XOR to first block, then use blocks.
62What happens in CTRCounter
Uses Nonce Values then counter values, encrypts them and xors it to first block.
Then the counter changes.
63Problem with ECB?Always outputs the same results with the same input
64Tell me about RSARives Shamear and Avilmen
It's an asymmetrical encryption system
Requires two keys (public & Private)
Uses Factoring
Normally 2048 encryption
65What is ECCElliptic Curve Cryptography
66Tell me about ECCNew Asymmetric Algorithm
Uses much smaller keys than RSA
Uses an elliptical formal (graph)
67What is DIffy HelmanA form of Asymmetric Algorithm used to kick off a symmetric session key.
Known as key agreement protocol
68What is PGP?Pretty Good Protocol
An old encryption system
Mostly for email
69Steps in PGP1. Generate Random Key
2. Encrypts the data
3. Encrypts key using receivers public key
70What is hashing for?Offers integrity to data. Not an encryption system.
71What is "Message Digest V5" or MD5A type of hash.
128 Bits
Can have a collision
72What is SHASecure Hash Algorithm
Family of hashes
SHA-1 has 160 bit hash
Can have collisions
73What is SHA-2A type of secure hash algorithm
512 Bit Hash
74RipeMD128, 160, 256 and 320 bit type of secure hash algorithm
75When would we use a hashPasswords, All forms of encryption
76What do I need to know about hashesOne way, deterministic and will produce the same results each time the source is hashed
77What is HMAC?Hash based message authentication code
Data integrity tool
Requires both parties have access to the same key
78What is steganographyHiding data within itself. Can be done with pictures
79What is a digital signature?A hash that is used to confirm that the key sender is the correct key owner
80Tell me about PKIPublic Key Infrastructure
Actually a certificate
Relies on Certificate Authorities
Based on PKCS (which is the standard)
81PKI Structure (levels)1. Certificate Authority for Root Certs
2. Intermediate Authority
82What is PKCS-7A way to store certificates as individual files
83What is PKCS - 12a way to store certificates and the private keys as a package
84What is CRLCertificate Revocation Path
Part of the PKI
List which PKIs are currently bad
85What is OCSPOnline certificate states protocol
Same as CRL but it's in real time
86Explain a hashing attackHashing attacks are comparative attacks, generated hashes vs. stored hashes
87Three authentication FactorsSomething you know - Password
Something you have - Smart Card, etc
Something about you - Biometrics
Something you do - Patterns etc
Somewhere you are - Think zip code
88What is an RSK KeyCan be a device, key or software
Stores some form of secret code
89What is a federated trust systemUsed to establish trust through hierarchy when using shared data/knowledge
90What are permissions applied to?Resources
91What are the two authorization strategies?Least Privilege and Seperation of duties
92Explain mandatory access controlThe other MAC, Used as a kind of filing system - like, secret, top secret etc.
93What is DACDiscretionary Access Control
Owner of the data defines access
Roles driven
94What is RBACRole based access control
Assigned resources by a set of roles or groups
95What is ACLAn access control list
Based on implicit deny (assumed no)
96Three things to consider with security policyComplexity
Expiration
Password History
97Group Policy ObjectsAllows you to set universal security policies across a network.
98Break Down rwxrwxrwx - X1st RWX Owner
2nd RWX Group
3rd Everyone else
the X = Other
99RWX?R= Read (Open/View)
W=Write (Edit, add or delete)
X=Execute (Run a file)
100CHMOD V1Change Mode
- used to alter permissions
example: Chmod g=RX
Then: ls -l
A is for all.
101CHMOD V2Change Mode
- Used to alter permissions
Uses binary...
102ChownChange ownder
sudo chown
Example
sudo chown root runme
103How to change passwordsudo passwd
104What is the Deny buttons for?To prevent inheritance - not to deny access
105What happens when you copy or move an NTFS file onto a different drive? And, what happens when you move it on the same drive?1. They lose permissions
2. When you copy, you loose NTFS permissions, but if you simply move it the NTFS permissions move within the file
106What is AAAAuthentication, Authorization and Accounting
107What is a Radius Server?A username/password server for internet authentication
108What is TACACAS+Terminal Access Controller Access - Control System Plus which is another Internet Authentication System that decouples authentication with authorization. Uses TCP Port 49
109What is CHAPChallenge Handshake Authentication Protocol
Used in Authentication
Uses Challenge message that uses a hash with the challenge message.
110What is NT LandmanagerUsed to authenticate two Windows Web Server.
111What is KerberosAn authentication system for windows domain controllers. Hashes used to login for authentication then Uses TGT or Ticket Granting Ticket for authorization. Think about it like a the TGT is a box (though it's a session key) to store information in that is provided by the domain controller.
112What is SAMLSecurity Assertion Markup Language
Not really authentication system but is used for web applications.
113What is LDAPLightweight Director Access Protocol
Not really an authentication system, but it allows a user to another computers directory
Uses TCP and UDP port 389
114Windows Active Directory And what does it give you?Single Sign on Across multiple platforms
Creates Federated System (Trust System)
115Cmd Line Tool: PingUsed to:
1. Ping websites for DNS
2. Ping a communications channel can be used with IPv4 or IPv6 (-4) or (-6)
3. Continous ping (ping -t)
116Cmd Line Tool: Netstat1. Provides communication channels
Netstat -n (Who am I talking to)
Netstat -a (who is talking to me)
117Cmd Line Tool: TracertShows if you have problems internally (infrastructure)
118Cmd Line Tool: ARPCan track hackers in your switches
Resolve mac addresses from IP
commands:
Arp -a (ARP Cache)
119Cmd Line Tool: Ipconfig (Cmd prompt) or IP (Linux)nsAnswers "Who am I and what are my addresses"
120Cmd Line Tool: NSLookUPQueries a DNS server
1. WHat is my DNS server
2. Is this particular server a DNS server
3. Can be used to change DNS Servers
121Cmd Line Tool (Linux): digUsed like NSlookup. Can change DNS servers, etc.
122Cmd Line tool: NetCatTool for aggressive use, pen test etc.
1. Opens and listen on a port
2. open and act as a client on a port
123Tool: NMAP/ZNMAPNetwork or port sniffer, ZNMAP is the graphical interface
Can be used for network invetory
124Tool: Advanced Port ScannerNetwork or port sniffer, works like NMAP
Can be used for network inventory
125Protocol Analyzer or Network Analyzer Tool: wiresharkTwo parts: Sniffer
126What is SNMPSimple Network Managment Protocol
A tool used to administer/manage network devices
Talks to equipment agents
Normally uses UDP port 161
127What allows us to talk to SNMP managed devicethe MIB,
or the Managment Information Base
128What is a GET queryA question for a SNMP device
129What is a TRAP in the SNMP world?It is basically a tripwire
130What is WALK in the SNMP world?Basically a series of GET queries
131Types of DNS AttacksVolume Attack (lots of talkers)
Protocol Attack (a disruption to protocol)
Application Attack (Prevents application from working)
132DDOSDistributed Denial of Service attack, most common form of modern DNS attacks, usually the result of malware/botnets
133VISHINGVoice based phishing
134Click JackingThose fucking websites that move the ads around... annoying as fuck. But it can also be more destructive if it downloads viruses, etc.
135Privilege Escalation/ElevationCan be used...
136Man in the Middle AttackThird party intercepting between a two party conversation
Uses the information to the third party's advantage
Usually wireless, but can be done in wired network
137How to perform a man in the middle attack via wired networkYou will need to do some type of spoofing (IP/MAC)
138What do Man in the middle attacks do?Data collection, theft of information
139ARP PoisonTricks other systems (not switch) into believing that the IP address is to the attackers MAC address
140DHCP SpoofingSpoofs a DNS server and reroutes
141Replay attacksYou can steal usernames and hashes to re login to a server
142Non persistenceData that is collected but will not be saved on restart
- Snapshots (Copies Current State)
- Known State (a small aspect, patches etc)
- Rollback (a very small aspect, drivers, etc)
- Live CD (Creates boot media)
143RAID 0"Stripping"
Increases speed only
No redundancy or integrity
144Raid 1Mirroring
Requires even number of drives
Redundancy and integrity
No speed increase
145Raid 2-4Usually 3 hard drives. Has a dedicated parity drive usually in a stripping drive
146Raid 5Requires minimum of 3 drives and is used for parity
It's confusing as fuck... It basically goes round robin with data to ensure that if a drive goes down it doesn't impact the data
147Raid 6Requires 4 drives and has two data parity drives
148Raid 0+1Mirror of stripes
149Raid 10Stripe of mirrors
150What is NASNetwork Storage System
File based sharing protocol
Runs over standard network
151SANStorage Area Network
Works at the block level
Run on Fibre Channel
These are enterprising systems
152iSCSIA poor mans SAN
Uses existing ethernet
Requires targets and initiators
153What is Windows MMC used for?Creates removeable media policies or just local policies
154Data Execution Prevention (DEP)Prevents hardware from being used inappropriately - usually for executables
155Turn off/on portsMust be done via bios.
156Electro magnetic interferenceHappens with all electrical equipment. Try to shield, or move.
157How to harden systemsDisable system services you don't use
get rid of default passwords
Disable unneeded user accounts
Patch your shit
Use malware systems
Firewall your shit
158Patch proccessMonitor for new patches
Test in sandbox
Evaluate performance
Deploy patch
Document
159What is clustering?Shares task across the network.
Good things: Redundancy
Bad things: Price/patches/ pri-machine
160Load balancingNo primary machine, still sorts shares task across the network
161What is server virtualization?The server runs computers internally
Very cost effective and allows you to take snapshots
162What is data encryption for? Pros or consEncrypts stored data, file servers etc usually at rest. Great for mobile data platforms, or unsecure computers
163What is TPM? Or Trusted Platform ModuleChip burned into the motherboard. No way to extract the key outside of the motherboard. Controlled at the motherboard level. Similar to PGP. Firevault for Mac Folks. All are either TPM or non-TPM.
164Full Disk Encryption (FDE)A system designed to encrypt a full disk, usually used with BitLocker or TPM. Can only be turned on via the Bios.
165Self Encrypting Hard drive (SED)has a TPM ish component to the hardware. Requires a password to crack. Easier to use then TPM.
166Secure Boot?Part of the operating system. Checks certificates upon boot. Very difficult or impossible to over ride. Creates a hardware root of trust.
167OS Types?Server OS
Workstations
Embedded systems: Think Cameras/routers/appliances, ETC.
Kiosk: Very Limited Functionality
Mobile: Mac IOS or Android
*Least Functionality
168What is a VirusA piece of software that gets on your computer through some type of drive or medium. Attaches to other files and propagates. Auto spreads to other devices and requires activation.
169What exactly is adware?Programs that create ads, pop ups, etc.
170What is spyware?A form of malware that tracks what you are doing and communicates with another computer that you don't know about.
171What is a trojanReal program that serves as malware in the background.
172What is RATRemote access trojan. Like a trojan that creates backdoor that allows other some form of control over your system.
173What is ransomware?Forces you to pay for information that it locks. These are like, the worst.
174What is a logic bomb?A program that sits on a computer that activates when an event takes place. Favorite among disgruntled employees.
175Rootkit/BackdoorCreates administrative privileges and allows control via a backdoor. Very difficult to detect.
176Polymorphic MalwareMalware that changes itself in order to defeat security system detection.
177Armored VirusMakes it difficult to reverse engineer. Usually difficult through code engineering and logic.
178System File CheckerTool that checks core OS files/system files for integrity and change via hashes or comparison. Not used for standard files. Gets an output file.
179Application WhitelistBased on implicit denial.
Also tracks licensing and inventory
Achieves standardization
180What does the intrusion detection system do?Inside of the actual network, and manages communication within the information exchange domain and can talk to the firewall to prevent further attacks.
181What does an intrusion prevention system do?Usually inline with router and firewall still serves the same basic function as an IDS.
182What does automation give us?Repetition
Consistent
Template restoration
Continous Monitoring
Automatic Updates
Application Whitelisting
Continous Integration
183Levels of data destructionClearing (erase)
Wiping (Uses binary code to overwrite)
Purge (Degaussing or Crypto Erase)
Destroy (Burning, pulping, shredding)
184What do switches do?Filter and forward data based on MAC address
185What is VLAN? or Virtual Area NetworkAllows you to assign ports to specific VLANs in order to split up your LAN. In essence it virtually connects two virtual networks..... or, it separates the hardware via a virtual network to create two logical networks. Logical Segmentation of Networks.
186Layer two Seperation of networks?Can only be done via VLANs and by the switch
187What is flood guarding with spanning tree protocol.Spanning Tree Protocol, it prevents flood loops or circular reasoning.
188Where can you do with switches?VLANs and STEP or flood guard
189What is level 3 Seperation of?Occurs at the router level.
190WHat can you do with a router?Filters and forward based on IP address - which is layer 3. Can act as different pass to network IDs.
191Gateway NAT?Network Address Translation
Works as interface between internet and Local Area Network
192What does firewall do?Acts as a barrier between the internet to the internal LAN. Normally part of the gateway NAT.
193Basic Structure of a network topologyComputers > Switch > Broadcast Domain (is the architecture) > Routers (To talk to other networks) > Wide Area Network > Metropolitan Area Network (still a Wide Area Network) > Internet
194What is TCP/IP for?Underlying address system that interconnects the intranet.
195Components of a Local Area NetworkUses switches to connect to multiple computers, all LANs are wired.
196What is a DMZ or Demilitarized Zone?Two routers from the internet to the LAN. Usually has a Gateway router (Public Facing Setup) > Public Facing Server > Router > LAN.
197Wireless Network StructureLand > Wireless Network Point using 802 Standard
198Guest Network StructureGuest Medium > Wireless Access Point > >Fire Wall > LAN.....
*Almost always a separate VLAN
199What is Network Access Control?Wireless, Network or VPN that is accessed through an authentication server through point to point protocol, CHAP (handshake protocol), or EAP
200What is Extensible Authentication Protocol or EAPA framework designed to run at some transport layer protocol. Handles authentication.

Informationen

Beschreibung: Training Aids for CompTIA Security Plus
Erstellt von: Ches Vernon
Aufrufe: 6
Tags: cyber security
Bewertung