O GoConqr está de visual novo! Conte para nós o que você achou.

Registre-se grátis

Flashcards

Security+

Kermit Russell SY0-601 Security+ CompTIA Security+ Inglês 69 flashcards

Flashcards do conjunto (69)

  1. 1ConfidentialityEncryption is the best way to ensure confidentiality, which ensures data is only viewable by authorized users. The next best way is ACLs (Access Control Lists).
  2. 2IntegrityHashes (like SHA & AES) are the best way to ensure the integrity of data, i.e., that it has not changed by accident or unauthorized access.
  3. 3AvailabilityBest way to ensure systems remain up and operational is to have redundancies, like RAID (redundant array of inexpensive disks), failover clusters, NIC (network interface card) teaming, fault-tolerance, backups, UPS (universal power supplies), and power generators.
  4. 4RiskThe likelihood that a threat will exploit a vulnerability.
  5. 5Risk MitigationReduces the chances that a threat will exploit a vulnerability or reduces the risk's impact by implementing security controls.
  6. 6Managerial ControlsControls that are administrative in function and documented in security policies.
  7. 7Operational ControlsControls that are implemented by people who perform day-to-day operations to comply with an organization's security plan.
  8. 8Three Categories of Security Controls1. Managerial (documented in written policies).
    2. Operational (performed in day-to-day operations).
    3. Technical (implemented with technology)
  9. 9Six Control Types1. Preventive
    2. Detective
    3. Corrective
    4. Deterrent
    5. Compensating
    6. Physical
  10. 10Preventive ControlAttempt to prevent/stop security events from happening. Examples, harden systems, security guards, bollards, CCTV (closed-circuit Television)
  11. 11ipconfigWindows systems use ipconfig to view network interfaces.
  12. 12ifconfigLinus systems use ifconfig to view network interfaces.
  13. 13IdentificationOccurs when a user claims an identity, like a username or email address and the credentials are verified by a password and/or pin.
  14. 14AuthorizationSystems provide authorization by granting access to resources based on permissions granted to the proven identity.
  15. 15Complex PasswordsUse a mix of character types, upper-case, lower-case, numbers, special characters, and must have a minimum length of at least eight characters.
  16. 16Password ExpirationHow long a password is valid before it expires, for example, 60 days.
  17. 17Smart CardsSmart Cards (PIV or CAC) are often used with multi-factor authentication (MFA). They have embedded certificates used with digital signatures and encryption. Used to gain access to secure locations and log on to systems.
  18. 18One-Time-Used Passwords1. HOTP creates a one-time-used password that does not expire until used.
    2. TOTP creates a one-time password that expires after 30 seconds.
  19. 19Two-Step Verification MethodTypically use a PIN retrieved from a user's smartphone. They can be sent via SMS/text, a phone call, a push notification, or retrieved from an authentication application.
  20. 20Prevent Privilege EscalationRequire administrators to use their regular user account for everyday work that does not required administrator privileges. Use the administrator account only when performing administrator functions. This prevents privilege escalation.
  21. 21KerberosA network authentication protocol within Microsoft Windows Active Directory domain or a Unix/Linus realm. It uses database objects such as Active Directory and a KDC (or TGT server) to issue timestamped tickets that expire after a certain period of time.
  22. 22SAMLAn XML-based standard used to exchange authentication and authorization between different parties. It provides single-sign-on (SSO) for web-base applications.
  23. 23SSHSecure Shell (SSH) encrypts traffic over TCP port 22. TCP Port 22 also includes Secure FTP (SFTP - Secure File Transfer Protocol)
  24. 24Directory ServicesProvide authentication services for a network.
    1. Microsoft Active Directory (AD)
    2. Kerberos
    3. LDAP (Light-weight Directory Access Protocol)
  25. 25Remote Access Protocol for WindowsRemote Desktop Protocol (RDP) allows users to remotely log into Windows desktops and servers
  26. 26Remote Access Protocol for LinxSSH (Secure Shell) allows users to remotely access Linux workstations and servers.
  27. 27ssh-keygenCreates a public/private key pair on Linux systems.
  28. 28ssh-copy-idCopies the public key of a Linux system to a remote server for password-less access between the servers.
  29. 29Two Command-Line-Interface (CLI) tools to test DNS (Domain Name Service)1. nslookup works on Windows and Linux
    2. dig works on Linux
  30. 30Port Security1. Disabling unused ports
    2. Limiting the number of MAC addresses per port
  31. 31How to Prevent Broadcast Storm and Loops in a network switch?STP and RSTP protect against switching loops.
  32. 32Access Control Lists (ACL)Routers and stateless firewalls perform basic filtering with an access control list (ACL) that identify what traffic is allowed and what traffic is blocked.
  33. 33False PositiveWhen an alert indicates an attack is occurring when an attack is not occurring/has not occurred.
  34. 34False NegativeWhen there is no alert but the system is under attack or has been under attack.
  35. 35IPSAn Intrusion Prevention System (IPS) is placed in place with traffic and can detect, react to, and prevent attacks.
  36. 36IDSAn Intrusion Detection System (IDS) detects and responds to an attack. It is not inline, but instead collects data passively (also known as out-of-band).
  37. 37MAC FilteringTo restrict access to a wireless network to only specific MAC addresses as a mean of network access control.
  38. 38Heat MapA map that shows wireless coverage and dead spots that exist in the wireless footprint
  39. 39Open ModeAllows all users to access the wireless access point (AP) and does not use any security.
  40. 40WPA2-PSKUses a pre-shared key (PSK) and does not provide individual authentication.
  41. 41WPA2Supports CCMP (based on AES)
  42. 42WPA3Uses Simultaneous of Equal (SAE) instead of pre-shared key (PSK) used with WPA
  43. 43Disassociation AttackAn attack that effectively removes a wireless client from a wireless network, forcing it to reauthenticate.
  44. 44BluejackingUnauthorized sending of text messages to a nearby Bluetooth device.
  45. 45BluesnarfingUnauthorized access to, or theft of information from, a Bluetooth device.
  46. 46Network Access Control (NAC)Methods to inspect clients for health, such as having up-to-date antivirus software, and can restrict access of unhealthy clients to a remediation network. You can use NAC for VPN clients and internal clients.
  47. 47Master ImageProvides a secure starting point for systems. Administrators create them with templates or other tools to create a secure baseline. They then use integrity measurements to discover when a system deviates from the baseline.
  48. 48Patch ManagementProcedures ensure that operating systems, applications, and firmware are up to date with current patches. This protects systems against known vulnerabilities.
  49. 49Change ManagementDefines the process and accounting procedures for authorizing and planning modifications and upgrades. The goal is to reduce risk related to unintended outages and provide documentation for all changes.
  50. 50Application Approved ListList of authorized software, and it prevents users from installing or running software that isn't on the list.
  51. 51Application Block ListList of unauthorized software and it prevents users from installing or running software on the list.
  52. 52Self-Encrypting Drive (SED)Automatically encrypts and decrypts data on a drive without user intervention. Requires users to enter credentials to unlock the drive when booting the system.
  53. 53Hardware Security Module (HSM)A removable or external device that can generate, store, and manage RSA keys used in asymmetric encryption. Many server-based applications use an HSM to protect keys.
  54. 54Primary methods of protecting confidentiality of data1. Encryption (e.g., database column encryption protects individual fields within a database)
    2. Strong Access Control (ACLs, )
  55. 55Platform as a Service (PaaS)Provides customers with a fully managed platform including hardware, operating systems, and limited applications.
  56. 56Infrastructure as a Service (IaaS)Provides customers with access to hardware in a self-managed platform.
  57. 57Software as a Service (SaaS)Allows users to connect to and use cloud-based apps over the Internet.
  58. 58Anything as a Service (XaaS)Refers to cloud-base services other than SaaS, PaaS, or IaaS, such as, communications, datbase, desktops, storage, security, and more.
  59. 59Private CloudOnly available for one organization.
  60. 60Public CloudAvailable to anyone. Provided by Third-Party companies
  61. 61Hybrid CloudA combination of two or more clouds.
  62. 62Managed Service Provider (MSP)Provides any IT services needed by an organization including security services an managed security service provider (MSSP) a third-party vendor that provides security services for an organization.
  63. 63Cloud Access Security Broker (CASB)A software tool or service deployed between an organization's network and the cloud provider. It provides security by monitoring traffic and enforcing security polices.
  64. 64Mobile Device Management (MDM)Tools help enforce security policies on mobile devices. This includes the use of storage segmentation, containerization, and full device encryption to protect data.
  65. 65JailbreakingRemoves all software restrictions from an Apple device.
  66. 66RootingModifies an Android device, giving users root-level access on the device.
  67. 67SideloadingProcess of installing software on an Android device from a source other than an authorize store.
  68. 68Tethering and Mobile HotspotsAllow devices to access the Internet and bypass network controls.
  69. 69Supervisory Control and Data Acquisition (SCADA)Embedded systems that control industrial control systems (ICS) suchas a power plant or water treatment facility. Embedded systems are also used in medical devices, automobiles, aircraft and unmanned aerial vehicles (UAVs).

Informações

Descrição
Comptia Security+
Criado por
Kermit Russell · mai 2023
Atualizado
4 mai 2023
Visualizações
33
Avaliação

Fale Conosco

Sobre o que é sua mensagem?

O que você acha do novo visual?

Você gostou?