GSEC Exam Review Questions with Verified
Correct Answers
session cookie
only for current session; stored in memory; close browser, exits
SSL/TLS
port 443 | encryption protects confidentiality and integrity, verification of server id |
client/server agree on best encryption; uses symmetric keys; RSA/Diffie; new key for each
request
Secure Coding
initialize vars; input validation; error management; least priv; vuln notifications; check 3rd
party code; no secrets in code; no admin for server, db access | includes performance and load
testing
HTTP authN
in headers; basic (base 64 encode)
digest: MD5
Form-Based Authentication
cleartext unless SSL; authN errors minimal; acct lockouts
password
Private combination of characters associated with a user name that allows access to certain
computer resources.
Certificate-Based Authentication
,An authentication method that uses a certificate instead of a password to establish an entity's
identity.
token-based authentication
Requires a computer user to physically hold a device called a token.
one time password
Password generated by a security token, which expires as soon as it is used.
footprinting (authN)
IP, software / signature / system config to ascertain id of user or device requesting access
Signature Analysis
most common method of identifying EOI on network uses a series of rules and pattern
matching to detect and alert
anomaly analysis based IDS
Anomaly analysis-based IDS looks for changes to the normal patterns of traffic using
inclusive analysis which means the IDS vendor identifies and defines anomalous behavior
biometric authentication
Technology for authenticating system users that compares a person's unique characteristics
such as fingerprints, face, or retinal image, against a stored set profile of these characteristics.
Directory Traversal
An attack that takes advantage of a vulnerability in the Web application program or the Web
server software so that a user can move from the root directory to other restricted directories.
session ID
,makes stateful; inclues: form element; URL; cookie
long and random
sign / hash IDs
new issued on authN
expire / timeout
ROI
Return of investment or return on investment. A performance measure used to identify when
an investment provides a positive benefit to the investor. It is sometimes considered when
evaluating the purchase of new security controls.
ROI(%) = (gain - expenditure)/(expenditure) x 100
threat
activities that represent danger to info or operations | agent of risk
danger
anything that can negatively impact to CIA of systems and services
vulnerability
A flaw or weakness that allows a threat agent to bypass security.
0-day
exploit that is not publicly know or available
security controls (types)
detective corrective and preventive
network mapping
, enumerating hosts responding on a network. NMAP
port scanning
Using a program to remotely determine which ports on a system are open (e.g., whether
systems allow connections through those ports).
vulnerability scanning
look for vulnerabilities associated with discovered systems ports and services
Red Team
A group of people authorized and organized to emulate a potential adversary's attack or
exploitation capabilities against an enterprise's security posture. The Red Team's objective is
to improve enterprise Information Assurance by demonstrating the impacts of successful
attacks and by demonstrating what works for the defenders (i.e., the Blue Team) in an
operational environment.
Blue Team
The network defenders in a blind (or black box) penetration test. Don't have knowledge of the
attack.
Penetration Testing
active analysis of a system through simulated attacks and may involve exploit of live vulns |
does not include maintaining access and covering tracks
Penetration Testing Techniques
war dialing war driving sniffing eavesdropping dumpster diving social engineering
network security devices (3)
Correct Answers
session cookie
only for current session; stored in memory; close browser, exits
SSL/TLS
port 443 | encryption protects confidentiality and integrity, verification of server id |
client/server agree on best encryption; uses symmetric keys; RSA/Diffie; new key for each
request
Secure Coding
initialize vars; input validation; error management; least priv; vuln notifications; check 3rd
party code; no secrets in code; no admin for server, db access | includes performance and load
testing
HTTP authN
in headers; basic (base 64 encode)
digest: MD5
Form-Based Authentication
cleartext unless SSL; authN errors minimal; acct lockouts
password
Private combination of characters associated with a user name that allows access to certain
computer resources.
Certificate-Based Authentication
,An authentication method that uses a certificate instead of a password to establish an entity's
identity.
token-based authentication
Requires a computer user to physically hold a device called a token.
one time password
Password generated by a security token, which expires as soon as it is used.
footprinting (authN)
IP, software / signature / system config to ascertain id of user or device requesting access
Signature Analysis
most common method of identifying EOI on network uses a series of rules and pattern
matching to detect and alert
anomaly analysis based IDS
Anomaly analysis-based IDS looks for changes to the normal patterns of traffic using
inclusive analysis which means the IDS vendor identifies and defines anomalous behavior
biometric authentication
Technology for authenticating system users that compares a person's unique characteristics
such as fingerprints, face, or retinal image, against a stored set profile of these characteristics.
Directory Traversal
An attack that takes advantage of a vulnerability in the Web application program or the Web
server software so that a user can move from the root directory to other restricted directories.
session ID
,makes stateful; inclues: form element; URL; cookie
long and random
sign / hash IDs
new issued on authN
expire / timeout
ROI
Return of investment or return on investment. A performance measure used to identify when
an investment provides a positive benefit to the investor. It is sometimes considered when
evaluating the purchase of new security controls.
ROI(%) = (gain - expenditure)/(expenditure) x 100
threat
activities that represent danger to info or operations | agent of risk
danger
anything that can negatively impact to CIA of systems and services
vulnerability
A flaw or weakness that allows a threat agent to bypass security.
0-day
exploit that is not publicly know or available
security controls (types)
detective corrective and preventive
network mapping
, enumerating hosts responding on a network. NMAP
port scanning
Using a program to remotely determine which ports on a system are open (e.g., whether
systems allow connections through those ports).
vulnerability scanning
look for vulnerabilities associated with discovered systems ports and services
Red Team
A group of people authorized and organized to emulate a potential adversary's attack or
exploitation capabilities against an enterprise's security posture. The Red Team's objective is
to improve enterprise Information Assurance by demonstrating the impacts of successful
attacks and by demonstrating what works for the defenders (i.e., the Blue Team) in an
operational environment.
Blue Team
The network defenders in a blind (or black box) penetration test. Don't have knowledge of the
attack.
Penetration Testing
active analysis of a system through simulated attacks and may involve exploit of live vulns |
does not include maintaining access and covering tracks
Penetration Testing Techniques
war dialing war driving sniffing eavesdropping dumpster diving social engineering
network security devices (3)
