SBOLC Security Plus Study Guide latest updated
Goals of Crypto - AnswerConfidentiality (encryption),Integrity (Hashing),Authentication
(Prove yourself), Non-repudiation (can't deny it happened-digital signatures)
/.TCP vs UDP - AnswerUDP is "best effort" delivery with to nodes on a network. Little
overhead and is often used for streaming audio or video traffic. TCP is reliable one-to-
one connection between two hosts. Uses 3-way handshake (SYN-SYN ACK- ACK)
/.Network access control (NAC) - Answergoal is to prevent computers with suboptimal
security from potentially infecting other systems in the network. Enforces policy.
/.Quarantine portal - Answerredirects user to a quarantine area where fixes can be
accessed. Usually a web page with hyperlinks to the fixes. Once necessary software is
installed the system is then in compliance.
/.Captive Portal - AnswerCaptures or redirects the users initial traffic because
something more is needed from the user, such as a credit card, or user name and
password.
/.Identification vs Authentication - AnswerIdentification is the claim of who we are.
/.Authentication is the most critical step in the identification process. It is proving of a
subjects claim to identification. - Answer
/.Authentication types - AnswerSomething you know (password or PIN), Something you
have (smart card, token, or device), Something you are (fingerprints or retinal pattern),
Something you do (keystroke authentication), Somewhere you are (location)
/.Virus (spam) - Answerreplicates itself on a system. Requires a host to move from
system to system
/.Worms - Answer(adware) self-contained
/.Logic bombs - Answer(spyware) Inserted into a system which sets off an action when
specific conditions are met
/.Trojan Horse - Answer(ransomware) Social engineering. Included as an attachment or
as part of an installation program
/.Backdoor - AnswerAllows access to a system without having to authenticate
/.Denial of Service (DOS) attack - Answersystem/service is unavailable for use
/.Ping of Death - Answermassive ping packet to crash server
, /.Teardrop - Answerfragment the packets
/.Man in middle - Answer(redirection attacks)
/.Distributed Denial of Service (DDoS) - multiple attackers prevents access to resources
for authorized users - Answer
/.Smurf -amplification attack (attacker uses router to broadcast attack). ICMP - Answer
/.Fraggle - Answeramplification attack. UDP
/.Security control types - Answermanagerial, technical, operational
/.Managerial - Answerpolicies and procedures put into place to define and guide
employees actions in dealing with sensitive info.
/.Technical - Answerdevices, processes, protocols, and other measures use to protect
the CIA of sensitive info. (technical measures)
/.Operational define how people in the organization should handle data, software and
hardware. should include environmental and physical security. - Answer
/.exception handling - Answerensures the code can handle the error conditions
/.error handling - Answeranticipation, detection and resolution of any errors
/.OS hardening techniques - Answerprocess of securely configuring the system against
security vulnerabilities
/.Stream Cipher - Answerusually found in hardware. Data encrypted bit by bit. Example
is RC4. Fast
/.Block Cipher - Answerfound in software. Applied to block data (64 contiguous bits) at
once as a group. Very slow but more secure than Stream
/.Confidentiality goal - Answerrandom ppl cant see your messages, only the intended
receiver
/.Integrity goal - Answermessage sent has not been changed
/.Availability goal - Answercontinuous operation, available for use
/.Simple Mail Transport protocol (SMTP) - Answertransmits mail from email clients to
email servers and between email servers. Msgs are text or html. SMTP relay (blacklist
and whitelist). Uses TCP port 25. SMTPS uses TCP port 465
Goals of Crypto - AnswerConfidentiality (encryption),Integrity (Hashing),Authentication
(Prove yourself), Non-repudiation (can't deny it happened-digital signatures)
/.TCP vs UDP - AnswerUDP is "best effort" delivery with to nodes on a network. Little
overhead and is often used for streaming audio or video traffic. TCP is reliable one-to-
one connection between two hosts. Uses 3-way handshake (SYN-SYN ACK- ACK)
/.Network access control (NAC) - Answergoal is to prevent computers with suboptimal
security from potentially infecting other systems in the network. Enforces policy.
/.Quarantine portal - Answerredirects user to a quarantine area where fixes can be
accessed. Usually a web page with hyperlinks to the fixes. Once necessary software is
installed the system is then in compliance.
/.Captive Portal - AnswerCaptures or redirects the users initial traffic because
something more is needed from the user, such as a credit card, or user name and
password.
/.Identification vs Authentication - AnswerIdentification is the claim of who we are.
/.Authentication is the most critical step in the identification process. It is proving of a
subjects claim to identification. - Answer
/.Authentication types - AnswerSomething you know (password or PIN), Something you
have (smart card, token, or device), Something you are (fingerprints or retinal pattern),
Something you do (keystroke authentication), Somewhere you are (location)
/.Virus (spam) - Answerreplicates itself on a system. Requires a host to move from
system to system
/.Worms - Answer(adware) self-contained
/.Logic bombs - Answer(spyware) Inserted into a system which sets off an action when
specific conditions are met
/.Trojan Horse - Answer(ransomware) Social engineering. Included as an attachment or
as part of an installation program
/.Backdoor - AnswerAllows access to a system without having to authenticate
/.Denial of Service (DOS) attack - Answersystem/service is unavailable for use
/.Ping of Death - Answermassive ping packet to crash server
, /.Teardrop - Answerfragment the packets
/.Man in middle - Answer(redirection attacks)
/.Distributed Denial of Service (DDoS) - multiple attackers prevents access to resources
for authorized users - Answer
/.Smurf -amplification attack (attacker uses router to broadcast attack). ICMP - Answer
/.Fraggle - Answeramplification attack. UDP
/.Security control types - Answermanagerial, technical, operational
/.Managerial - Answerpolicies and procedures put into place to define and guide
employees actions in dealing with sensitive info.
/.Technical - Answerdevices, processes, protocols, and other measures use to protect
the CIA of sensitive info. (technical measures)
/.Operational define how people in the organization should handle data, software and
hardware. should include environmental and physical security. - Answer
/.exception handling - Answerensures the code can handle the error conditions
/.error handling - Answeranticipation, detection and resolution of any errors
/.OS hardening techniques - Answerprocess of securely configuring the system against
security vulnerabilities
/.Stream Cipher - Answerusually found in hardware. Data encrypted bit by bit. Example
is RC4. Fast
/.Block Cipher - Answerfound in software. Applied to block data (64 contiguous bits) at
once as a group. Very slow but more secure than Stream
/.Confidentiality goal - Answerrandom ppl cant see your messages, only the intended
receiver
/.Integrity goal - Answermessage sent has not been changed
/.Availability goal - Answercontinuous operation, available for use
/.Simple Mail Transport protocol (SMTP) - Answertransmits mail from email clients to
email servers and between email servers. Msgs are text or html. SMTP relay (blacklist
and whitelist). Uses TCP port 25. SMTPS uses TCP port 465
