Fichas
Information Security
Fichas del conjunto (37)
- 1What are the 3 Types of Access Controls?Mandatory Access Control, Discretionary Access Controls, Non-Discretionary Access Controls
- 24 fundamental functions of access controlsIdentification, authentication, authorization, accountability
- 3What is a packet filtering firewall?a firewall that examines the header information of data packets, prohibits packet with a certain address from passing
- 4What are the 3 subsets of packet filtering firewalls?Static: Filter rules developed and installed in the firewall
Dynamic: allows the firewall to react and deal with the event
Stateful Packet Inspection: firewalls keep track of network connections between internal and external systems - 5How does a MAC layer firewall work?MAC addresses of specific host computers are linked to the access control list (ACL) entries that identify packets that can be sent, others traffic is blocked
- 6Best Firewall configuration depends on what 3 factors?Budget, the objective of the network, organizations ability to implement it
- 7What are things to consider when implementing a firewall?the cost of implementing, expertise in the organization, training of the employees, simplicity, how much security does it provide
- 8What are the best practices when implementing a firewall?1. All traffic from trusted networks are allowed
2. Firewall device never accessed from public Network
3. all SMTP (simple mail transport) are allowed
4. no ICMP (internet control) allowed - 9What is a VPN?A secure connection between 2 systems, an extension of a public network into a private network
- 10What are the 3 Types of VPN?Secured VPN, Trusted VPN, Hybrid VPN
- 11What is Transport Mode and Tunnel Mode?Transport Mode: users connect to a remote host, encrypting only the data not the header info
Tunnel Mode: Header information is also encrypted so the data cannot be traced to a source or destination - 12What are some reasons to use an IDPS?identify and report intrusions, examine how and why it happened, prevent problems from increasing, increase fear
- 13What is NIDPS?this IDPS resides on an organizations network via a computer, examines packets, looks for attack patterns, can monitor large area, does not interrupt the system when implemented, but can be overwhelmed and miss some attacks
- 14Whats is HIDPS?this IDPS resides no a host computer and monitors network on only that system, can detect attacks that elude NIDPS, can access encrypted info but use large amount of space and effect the peformance of the system
- 15What are the 2 IDPS detection methods? How do they work?Signature Based Detection: scans network and searches for any attack patterns that is already known
Anomaly Based Detection: scans network, if the patterns is abnormal then alert, can detect new attack patterns, may have false positives - 16Active Response vs Passive ResponseActive Response: When IDPS system taking action against intrusion, collect and modify info
Passive Response System: setting off alarm when intrusion detected - 17Strengths & Limitations of IDPSStrengths: test security, alert staff, monitoring and analysis, recognize attacks, non security experts can monitor system
Limitations: detecting reporting responding at same time is a heavy load, detecting new attacks, auto investigate without human interaction - 18What are the three basic deployments (contol strategies) of an IDPS?Cenralized: all IDPS functions managed from one location
Fully Distributed: Control functions applied at each IDPS loaction
Partially Distributed: mix of both, individual agents can still analyze attacks and report to central station to report - 19What is a honeypot? honeynet?decoy systems used to lure attackers away from critical systems, honeynet is a network of multiple honeypots.
- 20What is a padded cell systemworks with IDPS and honeypots, lures attackers to an area where they cannot do any harm, gives time to analyza and deal with attacker
- 21Disadvantages of Honeypots/padded cells?can cause the attacker to get frustrated them causing them to launch a more sever attack, not found generally useful yet, legal problems (enticement, entrapment)
- 22Plain text can be encrypted through ___ stream and _____ streambit, block
- 23What is the difference between Substitution Cipher and Transposition Cipher?Substitution is changing one value for another, monoalphabetic (1 letter), polyalphabetic (2+ letter) or vignere cipher (more complex polyalphabetic) Transposition is rearranging pattern within a block based cipher
- 24Whats is XOR cipher?uses boolean, if two bits are idenitcal binary 0 if not then binary 1.
- 25What are the book based ciphers?Book cipher, running key cipher, template cipher
- 26What are the different types of Cryptographic algorithms?Hash, Symmetric, Assymetric,
- 27What is Hash? how does it work?hashing algorithms are mathematical, converts contents into a fixed size, used in password verifications.
- 28What is the difference between Asymmetric and Symmetric encryption?Symmetric uses only one private key for encrypting and decrypting while Asymmetric uses a public and private key.
- 29What is the weakness of Asymmetric encryption?Distributing and maintaining a secure key among users
- 30The purpose of a digital signature is __________________verify information transfered via an elctronic system using Asymmetric encryption.
- 31______ is the process of hiding messages with digital encoding in a picture.Steganography
- 327 major Sources of physical lossextreme temperatures, gases, liquids, living organisms, projectiles, movement, energy anomalies
- 33What are ways to secure a facility?take advantage of physical location, ID cards, guards, fences, locks, keys, mantraps
- 34What is fingerprinting?Reveals information of a system that is going to be attacked, good for defenders as they can find vulnerabilities in their system
- 353 common implementations of firewall architectures?single bastion hosts, screened hosts, screened subnet
- 364 ways of converting from old security system to new?Direct, phased, pilot, parallel
- 37Difference between Trusted VPN, Secure VPN, and Hybrid VPNTrusted: using private circuits alone
Secure: send encrypted traffic over a public network
Hybrid: using a secure VPN over a trusted VPN
Información
- Descripción
- Fichas sobre Information Security, creado por Rayan Syed el 06/12/2018.
- Creado por
- Rayan Syed
- Visitas
- 1
- Valoración