ISA 301 EXAM 2 STUDY GUIDE
Information included in data packets - Answers -IP address
packet size
data and other header
Two points of attack in security - Answers -data packet itself
devices that connect the network
Two points of security - Answers -protect the data (encryption)
secure network devices
Two perspectives in relation to security: - Answers -There is no real threat
all hackers are experts and ready to break into my network
Classification of threats (3) - Answers -intrusion
blocking
malware
Intrusion - Answers -meant to gain unauthorized access to a system via breach of
security
Blocking: - Answers -Attacks designed to prohibit legit traffic or access to network (Dos
& DDoS)
Malware: - Answers -Software wit malicous intent installed on the machine
Intrusion types - Answers -cracking
social engineering
war-dialing / war-driving
Malware types - Answers -viruses, worms
trojan horses
spyware (cookies and key loggers)
, Blocking types - Answers -DoS & DDoS
Threat assessment factors and the equation (each on a 10 point scale) - Answers -
attractiveness of system
nature of the info in the system
traffic to system (security devices in place)
(A + I) - S = V
Approaching newtork security (perimeter approach) - Answers -Focus on perimeter
devices such as firewalls, proxy servers, password policies etc
Approaching newtork security (layered approach) - Answers -Perimeter is secured and
selected systems within network are secured
Approaching network security (proactive/reacticve) - Answers -These lie on opposite
ends
Approaching newtork security (hybrid) - Answers -A mix of proactive and reactive.
Multiple security paradigms are overlapped.
Network security and law - Answers -Know: Sabarnes Oxley - companies implement
strong IT controls to prevent fraud and protect shareholders
Computer Security Act of 1987- establishes minimum security for federal computer
networks
HIPAA- ensure confidentiality of info
Gramm-Leach-Bliley Act- any company offering financial products must disclose
information sharing practices
Denial of Service Attack - Answers -based on the premise all computers have
operational limitations
utilized ping utility to execute attack
Distributed denial of service DDoS - Answers -Variation of denial of service
launched from multiple clients
more difficult track due to use of zombie machines
Information included in data packets - Answers -IP address
packet size
data and other header
Two points of attack in security - Answers -data packet itself
devices that connect the network
Two points of security - Answers -protect the data (encryption)
secure network devices
Two perspectives in relation to security: - Answers -There is no real threat
all hackers are experts and ready to break into my network
Classification of threats (3) - Answers -intrusion
blocking
malware
Intrusion - Answers -meant to gain unauthorized access to a system via breach of
security
Blocking: - Answers -Attacks designed to prohibit legit traffic or access to network (Dos
& DDoS)
Malware: - Answers -Software wit malicous intent installed on the machine
Intrusion types - Answers -cracking
social engineering
war-dialing / war-driving
Malware types - Answers -viruses, worms
trojan horses
spyware (cookies and key loggers)
, Blocking types - Answers -DoS & DDoS
Threat assessment factors and the equation (each on a 10 point scale) - Answers -
attractiveness of system
nature of the info in the system
traffic to system (security devices in place)
(A + I) - S = V
Approaching newtork security (perimeter approach) - Answers -Focus on perimeter
devices such as firewalls, proxy servers, password policies etc
Approaching newtork security (layered approach) - Answers -Perimeter is secured and
selected systems within network are secured
Approaching network security (proactive/reacticve) - Answers -These lie on opposite
ends
Approaching newtork security (hybrid) - Answers -A mix of proactive and reactive.
Multiple security paradigms are overlapped.
Network security and law - Answers -Know: Sabarnes Oxley - companies implement
strong IT controls to prevent fraud and protect shareholders
Computer Security Act of 1987- establishes minimum security for federal computer
networks
HIPAA- ensure confidentiality of info
Gramm-Leach-Bliley Act- any company offering financial products must disclose
information sharing practices
Denial of Service Attack - Answers -based on the premise all computers have
operational limitations
utilized ping utility to execute attack
Distributed denial of service DDoS - Answers -Variation of denial of service
launched from multiple clients
more difficult track due to use of zombie machines
