SEC530 BOOK 2 STUDY GUIDE
Neighbor Authentication - Answers :Prevents the injection of bogus routes into a routing
table
Wormhole Attack - Answers :This takes place when an attacker captures packets at one
location in the network and tunnels them to another location in the network for a second
attacker to use against a target system.
Loopback Interface - Answers :A dedicated IP address that can be used to be managed
through any SSH interfaces.
Types of Cisco Passwords - Answers :Type 0 plaintext (sucks), Type 7 Vigenere
(sucks), Type 9 Scrypt (best), Type 8 PBKDS2 (better), Type 5 Salted MD5 (fair)
Inexpensive vs Expensive Hashing - Answers :Cryptographic communication should be
quick and easy (inexpensive), while hashes should be slow and hard (expensive)
Cisco Smart Install - Answers :Allows the remote configuration of a cisco switch
Secure Technical Implementation Guides (STIG) - Answers :Configurations standards
for DOD systems
CIS Level 1 vs Level 2 - Answers :Level 1 is practical and able to be applied without
downtime to every systems, while level 2 acts as defense in depth and may have a
negative impact
Tool: Nipper NG - Answers :Allows for the auditing of cisco configurations
Nmap Scripting Engine (NSE) - Answers :Enables script building to automate network
scans
SNMP Hardening - Answers :Complex community strings and SNMP V3
SNMP Versions - Answers :No auth - unauthenticated access
auth - authenticated via plaintext
priv - authenticated and encrypted access
Clock Skew - Answers :the difference in absolute time between the times when two
state elements see a clock edge. Kerberos has a maximum tolerance that must be
adhered to.
NTP stratum layers - Answers :some clocks are better than others
Stratum 0- atomic clock, GPS clock, very accurate
Stratum 1- synchronized to stratum 0 servers, primary time servers
Stratum 2- synchorized to stratum 1 server
Neighbor Authentication - Answers :Prevents the injection of bogus routes into a routing
table
Wormhole Attack - Answers :This takes place when an attacker captures packets at one
location in the network and tunnels them to another location in the network for a second
attacker to use against a target system.
Loopback Interface - Answers :A dedicated IP address that can be used to be managed
through any SSH interfaces.
Types of Cisco Passwords - Answers :Type 0 plaintext (sucks), Type 7 Vigenere
(sucks), Type 9 Scrypt (best), Type 8 PBKDS2 (better), Type 5 Salted MD5 (fair)
Inexpensive vs Expensive Hashing - Answers :Cryptographic communication should be
quick and easy (inexpensive), while hashes should be slow and hard (expensive)
Cisco Smart Install - Answers :Allows the remote configuration of a cisco switch
Secure Technical Implementation Guides (STIG) - Answers :Configurations standards
for DOD systems
CIS Level 1 vs Level 2 - Answers :Level 1 is practical and able to be applied without
downtime to every systems, while level 2 acts as defense in depth and may have a
negative impact
Tool: Nipper NG - Answers :Allows for the auditing of cisco configurations
Nmap Scripting Engine (NSE) - Answers :Enables script building to automate network
scans
SNMP Hardening - Answers :Complex community strings and SNMP V3
SNMP Versions - Answers :No auth - unauthenticated access
auth - authenticated via plaintext
priv - authenticated and encrypted access
Clock Skew - Answers :the difference in absolute time between the times when two
state elements see a clock edge. Kerberos has a maximum tolerance that must be
adhered to.
NTP stratum layers - Answers :some clocks are better than others
Stratum 0- atomic clock, GPS clock, very accurate
Stratum 1- synchronized to stratum 0 servers, primary time servers
Stratum 2- synchorized to stratum 1 server
