Gsec Full Exam 2023.

GSEC FULL EXAM ptual design - ANSWER high level design that includes core components of network architecture | 'black box' I/O | legal, environmental safety | customer experience | multidisciplinary logical design - ANSWER depicts how data flows across different devices in network | detailed, rather than abstract network diagram | services, application names | for developers and security architects | shows servers workstations routers firewalls... physical design - ANSWER last before implementation | all known details | physical components and connections | OS versions communications flow - ANSWER dictated by logical design, shows how data flows in and out of the network | informs threat model; attack surface and vectors; estimate impact; determines defense intellectual property (IP) - ANSWER dictated by logical architecture | key is reduce number or locations where present; subject to copyright router - ANSWER device that connects different networks together internal and external | forwards data packets between computer networks | operates at OSI L3, handles packets switch - ANSWER networking device that connects computers together to form physical and virtual networks | handles frames at OSI L2 Kismet - ANSWER Linux WLAN sniffer completely passive used for vulnerability assessment and intrusion detection threat enumeration - ANSWER list threat agents | list attack methods | list system-level objectives threat agents (3) - ANSWER human or not | organized crime | espionage | hactivist Advanced Persistent Threat (APT) - ANSWER An organized group of attackers who are highly motivated, skilled, and patient. They are often sponsored by a government, are focused on a specific target, and will continue attacking for a very long time until they achieve their goal. DoS - ANSWER An availability attack, to consume resources to the point of exhaustion; Denial of Service; flood of ICMP requests targets router takes down server