Flashcards
NetSec Test 1
Cards in this deck (41)
- 1Security ishe state of being free from danger or threat.
- 2What are the three security goals?Confidentiality, Integrity, Availability
- 3Denial-of-Service is an attack onAvailability
- 4This system uses two keys per user. Only one key is distributed so that there are n keys for n users. It provides encryption and digital signatures.Public Key Cryptography
- 5The availability of plans, methodologies, and algorithms for community analysis and feedback is part of the security best practices defined inOpen Design
- 6When performing and exhaustive and brute force attack on a password, the most important factor for keeping it secure islength
- 7"Hi Bob, this is John. I'm here with Jack in the middle of a presentation. He's actually on stage right now. His wi-fi is not working well and he asked me to call you and see if you could reset his VPN password to his date of birth. Do you think you can help him out?" This is an example ofpretexting
- 8A manhole inside a bank vault is vulnerable to what kind of attack?Side Channel
- 9A device used to steal credit card information by copying the data on the magnetic stripe is called askimmer
- 10When a user is first created, it should have only the necessary access to perform its functions. When a browser is installed, it should not allow for plugin code execution. When an operating system is installed, the firewall should be turned on. These are examples ofFail-Safe Defaults
- 11A Security model that focuses on integrity and does not allow the user to "read down" or "write up" is called the:Biba
- 12One way to make sure data stored on a hard drive is safe from thieves is byencrypting the data and placing it in a hidden volume
- 13Kerberos Authentication is guaranteed secure even over an insecure channelTrue
- 14This segment of memory stores data generated during execution of the program.heap
- 15A collection of users with similar functions and responsibilities in the same organization can be grouped into aRole
- 16One way to protect yourself from Buffer Overflow Attacks is towrite code to check the length of the buffer against the input and avoid filling up the
buffer past its capacity. - 17In a "Default Secure" policy, the following rules have been set: - Give Tom read and write access to "bar" - Give Bob read access to "fred" the following are true:Tom: read fred = Access Denied
Tom: modify fred = Access Denied - 18The use of _______ in passwords makes them more secure since it increases the total search space for a brute force attack.salt
- 19Which of the statements below demonstrate bad practices when performing a penetration test?-Keep all user sensitive information obtained during testing for future reference.
-Post the details of vulnerability findings online. - 20This part of memory houses the binary machine code of the program.Text
- 21the avoidance of the unauthorized disclosure of informationconfidentiality definition
- 22the property that information has not been altered in an unauthorized way.availability definition
- 23authenticity, assurance, anonymityA.A.A
- 24-economy of mechanism -fail-safe defaults -complete mediation -open design -separation of privilege -least privilege -least common mechanism -psychological acceptability -psychological acceptability -work factor -compromise recording10 security principles
- 25economy of mechanismthis principle stresses simplicity in design and implementation of security measures
- 26fail safe defaultsthe default configuration of a system should have a conservative protection scheme
- 27complete mediationevery access to a resource must be checked for compliance with a protection scheme
- 28open designthe security architecture and design of a system should be made publicly available
- 29separation of privilegemultiple conditions should be required to achieve access to restricted resources or have a program perform some action
- 30least privilegeeach program and user of a computer system should operate with the bare minimum privileges necessary to function properly
- 31least common mechanismmechanisms allowing resources to be shared by more than one user should be minimized
- 32psychological acceptabilityuser interfaces should be well designed and intuitive, and all security related settings should adhere to what an ordinary user might expect
- 33work factorthe cost of circumventing a security mechanism should be compared with the resources of an attacker when designing a security scheme
- 34compromise recordingsometimes it is more desirable to record the details of an intrusion than to adopt more sophisticated measures to prevent it
- 35Caesar cipherreplace each letter with the one "three over" in the alphabet
- 36symmetric cryptosystemsboth members share a secret key used for both encryption and decryption
- 37memory organizationstack---dynamic, bss, data, text
- 38datathis segment contains static program variables that have been initialized in the program code
- 39bssblock started by symbol, contains static variables that are uninitialized
- 40stacka stack data structure that grows downwards and is used for keeping track of the call structure of subroutines and their arguments
- 41page faultswhen something is asked for in memory which has been temporarily written to disk and needs to be retrieved
Information
- Description
- Flashcards on NetSec Test 1, created by Joshua Arteaga on 05/02/2019.
- Created by
- Joshua Arteaga
- Views
- 1
- Rating