Fichas
Network Security Overview
Fichas del conjunto (32)
- 1What is the difference between a security threat and a vulnerability?A vulnerability refers to a weakness in the system that can be exploited, while a threat is an active attempt to exploit a vulnerability, such as a hacker or a virus.
- 2What are some common forms of vulnerabilities in a network?Hardware, software, physical security of buildings, and human factors can all be vulnerabilities in a network.
- 3Why are weak or default passwords considered a major vulnerability?They are easily compromised by attackers using brute force tools or by guessing, providing easy access to the network.
- 4How can misconfigured firewall rules impact network security?They can leave open holes for attackers, similar to leaving a key under the doormat, allowing unauthorized access to the network.
- 5What is the purpose of conducting a vulnerability assessment?To detect vulnerabilities within servers, computers, and network devices early for mitigation before they can be exploited.
- 6What are some risk responses to network-related risks?Eliminating vulnerabilities where possible, mitigating the impact, or accepting the risk if it cannot be adequately addressed.
- 7What is an Advanced Persistent Threat (APT)?A hidden and dormant malware or virus that waits for a trigger to activate, potentially infecting backups and causing widespread damage.
- 8What is a zero-day exploit, and why is it dangerous?A vulnerability that is not yet known to the public and has no patch available, making it a significant threat as there are no existing defenses against it.
- 9How can organizations protect against zero-day vulnerabilities?Some intrusion prevention systems (IPS) allow unknown code patterns to be forwarded to the vendor for analysis, potentially blocking the threat if deemed risky.
- 10Why is it important to have both physical and electronic security measures?To protect against both digital threats and physical theft of data or equipment, as each poses a significant risk to data security.
- 11What is the role of a vulnerability tester?Responsible for scanning servers and network devices for known vulnerabilities using tools like Nessus.
- 12What is the purpose of a red team in network security?To simulate attacks on the network's security to test and find vulnerabilities, acting as the offensive force in penetration testing.
- 13What role does the blue team play in network security?Defends against attacks by the red team, focusing on strengthening and protecting the network's security.
- 14How does the purple team contribute to network security?Combines the efforts of red and blue teams to iterate and improve security measures through cross-training and debriefing.
- 15What distinguishes white hat hackers from black hat hackers?White hat hackers aim to improve security with permission and compliance with laws, while black hat hackers breach systems for personal gain or harm without permission.
- 16Who are gray hat hackers, and what is their motivation?Hackers who may operate without permission but without malicious intent, existing between the ethical boundaries of white hat and black hat hackers.
- 17What are insider threats and why are they significant?Insiders with legitimate access who can pose risks through malicious actions or accidental harm, highlighting the need for restricted access and audit logging.
- 18What role do nation states play in cybersecurity threats?Engage in industrial espionage to steal intellectual property and data, often with larger budgets than criminal enterprises.
- 19Who are script kiddies, and what is their impact on network security?Individuals with minimal InfoSec knowledge using advanced hackers' tools for curiosity or entertainment, leading to unpredictable and varied levels of damage.
- 20What is wiretapping in the context of cybersecurity?Eavesdropping on digital communications, traditionally through physical connections but now often involving packet sniffers or EMF listening to intercept network traffic.
- 21What is the purpose of port scanning in network attacks?To identify open TCP ports and determine what services or applications are running on a computer, facilitating targeted attacks.
- 22How do attackers exploit database servers through SQL injection?By inserting malicious SQL commands into input fields, attackers can take control of the database server, often due to applications not validating user input properly.
- 23What is a buffer overflow attack?An attack where user input exceeds the memory buffer's capacity, overwriting adjacent memory and potentially executing malicious code.
- 24Describe the spoofing threat in network security.Impersonating another device or user to intercept or alter communications, often part of man-in-the-middle attacks.
- 25What is a Denial-of-Service (DoS) attack?An attack aimed at making a service unavailable by overwhelming it with traffic, disrupting normal operations.
- 26How does social engineering exploit security?By manipulating human trust to gain unauthorized access or information, often through impersonation or phishing.
- 27How can organizations mitigate the risk of wiretapping?By using fiber optic cables for high-security areas, which are immune to EMF listening devices.
- 28What are two main protections against buffer overflow and SQL injection attacks?Reviewing source code for input validation and enabling NX-bit functionality to prevent execution of data as code.
- 29How can spoofing and man-in-the-middle attacks be mitigated?Through network security measures like Ethernet switching that limit eavesdropping and authentication protocols to verify user and device identities.
- 30What is a critical step in preventing SQL injection and buffer overflow attacks?Implementing rigorous input validation and sanitization in applications to ensure only expected data is processed.
- 31How can organizations defend against DoS attacks?By using network security appliances that can detect and filter out malicious traffic, and by implementing rate limiting and traffic analysis.
- 32What practices help prevent social engineering attacks?Educating employees on security awareness, enforcing strict verification processes, and discouraging the sharing of sensitive information without authentication.
Información
- Descripción
- GRE NetSec Foundations Fichas sobre Network Security Overview, creado por Joseph Rubino el 05/03/2024.
- Creado por
- Joseph Rubino
- Visitas
- 1
- Valoración