SBOLC Security Plus Study Guide
Goals of Crypto - Answers -Confidentiality (encryption),Integrity
(Hashing),Authentication (Prove yourself), Non-repudiation (can't deny it happened-
digital signatures)
TCP vs UDP - Answers -UDP is "best effort" delivery with to nodes on a network. Little
overhead and is often used for streaming audio or video traffic. TCP is reliable one-to-
one connection between two hosts. Uses 3-way handshake (SYN-SYN ACK- ACK)
Network access control (NAC) - Answers -goal is to prevent computers with suboptimal
security from potentially infecting other systems in the network. Enforces policy.
Quarantine portal - Answers -redirects user to a quarantine area where fixes can be
accessed. Usually a web page with hyperlinks to the fixes. Once necessary software is
installed the system is then in compliance.
Trojan Horse - Answers -(ransomware) Social engineering. Included as an attachment
or as part of an installation program
Backdoor - Answers -Allows access to a system without having to authenticate
Denial of Service (DOS) attack - Answers -system/service is unavailable for use
Ping of Death - Answers -massive ping packet to crash server
Teardrop - Answers -fragment the packets
Captive Portal - Answers -Captures or redirects the users initial traffic because
something more is needed from the user, such as a credit card, or user name and
password.
Identification vs Authentication - Answers -Identification is the claim of who we are.
Authentication is the most critical step in the identification process. It is proving of a
subjects claim to identification. - Answers -
Authentication types - Answers -Something you know (password or PIN), Something
you have (smart card, token, or device), Something you are (fingerprints or retinal
pattern), Something you do (keystroke authentication), Somewhere you are (location)
, Virus (spam) - Answers -replicates itself on a system. Requires a host to move from
system to system
Worms - Answers -(adware) self-contained
Logic bombs - Answers -(spyware) Inserted into a system which sets off an action when
specific conditions are met
Man in middle - Answers -(redirection attacks)
Distributed Denial of Service (DDoS) - multiple attackers prevents access to resources
for authorized users - Answers -
Smurf -amplification attack (attacker uses router to broadcast attack). ICMP - Answers -
Fraggle - Answers -amplification attack. UDP
Security control types - Answers -managerial, technical, operational
Managerial - Answers -policies and procedures put into place to define and guide
employees actions in dealing with sensitive info.
Technical - Answers -devices, processes, protocols, and other measures use to protect
the CIA of sensitive info. (technical measures)
Operational define how people in the organization should handle data, software and
hardware. should include environmental and physical security. - Answers -
exception handling - Answers -ensures the code can handle the error conditions
error handling - Answers -anticipation, detection and resolution of any errors
OS hardening techniques - Answers -process of securely configuring the system
against security vulnerabilities
Stream Cipher - Answers -usually found in hardware. Data encrypted bit by bit. Example
is RC4. Fast
Block Cipher - Answers -found in software. Applied to block data (64 contiguous bits) at
once as a group. Very slow but more secure than Stream
Confidentiality goal - Answers -random ppl cant see your messages, only the intended
receiver
Integrity goal - Answers -message sent has not been changed
Goals of Crypto - Answers -Confidentiality (encryption),Integrity
(Hashing),Authentication (Prove yourself), Non-repudiation (can't deny it happened-
digital signatures)
TCP vs UDP - Answers -UDP is "best effort" delivery with to nodes on a network. Little
overhead and is often used for streaming audio or video traffic. TCP is reliable one-to-
one connection between two hosts. Uses 3-way handshake (SYN-SYN ACK- ACK)
Network access control (NAC) - Answers -goal is to prevent computers with suboptimal
security from potentially infecting other systems in the network. Enforces policy.
Quarantine portal - Answers -redirects user to a quarantine area where fixes can be
accessed. Usually a web page with hyperlinks to the fixes. Once necessary software is
installed the system is then in compliance.
Trojan Horse - Answers -(ransomware) Social engineering. Included as an attachment
or as part of an installation program
Backdoor - Answers -Allows access to a system without having to authenticate
Denial of Service (DOS) attack - Answers -system/service is unavailable for use
Ping of Death - Answers -massive ping packet to crash server
Teardrop - Answers -fragment the packets
Captive Portal - Answers -Captures or redirects the users initial traffic because
something more is needed from the user, such as a credit card, or user name and
password.
Identification vs Authentication - Answers -Identification is the claim of who we are.
Authentication is the most critical step in the identification process. It is proving of a
subjects claim to identification. - Answers -
Authentication types - Answers -Something you know (password or PIN), Something
you have (smart card, token, or device), Something you are (fingerprints or retinal
pattern), Something you do (keystroke authentication), Somewhere you are (location)
, Virus (spam) - Answers -replicates itself on a system. Requires a host to move from
system to system
Worms - Answers -(adware) self-contained
Logic bombs - Answers -(spyware) Inserted into a system which sets off an action when
specific conditions are met
Man in middle - Answers -(redirection attacks)
Distributed Denial of Service (DDoS) - multiple attackers prevents access to resources
for authorized users - Answers -
Smurf -amplification attack (attacker uses router to broadcast attack). ICMP - Answers -
Fraggle - Answers -amplification attack. UDP
Security control types - Answers -managerial, technical, operational
Managerial - Answers -policies and procedures put into place to define and guide
employees actions in dealing with sensitive info.
Technical - Answers -devices, processes, protocols, and other measures use to protect
the CIA of sensitive info. (technical measures)
Operational define how people in the organization should handle data, software and
hardware. should include environmental and physical security. - Answers -
exception handling - Answers -ensures the code can handle the error conditions
error handling - Answers -anticipation, detection and resolution of any errors
OS hardening techniques - Answers -process of securely configuring the system
against security vulnerabilities
Stream Cipher - Answers -usually found in hardware. Data encrypted bit by bit. Example
is RC4. Fast
Block Cipher - Answers -found in software. Applied to block data (64 contiguous bits) at
once as a group. Very slow but more secure than Stream
Confidentiality goal - Answers -random ppl cant see your messages, only the intended
receiver
Integrity goal - Answers -message sent has not been changed
