SEC401 Study Guide
1. Virtual Sprawl: Condition in an operating environment where
number of virtual machines exceed number that can be managed
or secured effectively.
2. VM Escape Tactics: Use of compromised Guest OS to escape
sandbox and take over other Guest OS or hypervisor
3. Hypervisor: Software that runs on a physical computer and
manages one or more virtual machine operating systems.
4. Defense in Depth: A defense that uses multiple types of
security devices to protect a network. Also called layered security.
5. Middleware: Several different types of software that sit
between and provide connectivity for two or more software
applications
6. Net Flow: Cisco product that collects and monitors network
traffic.
7. Protected Enclaves: An approach to defence-in-depth that
involves segmenting your network using multiple VPNs, VLAN
segmentation, switches, or firewalls to separate out networks.
Reducing the exposure of a system can greatly reduce risk.
Restricting access to critical segments.
8. Least Privilege: Providing only the minimum amount of
privileges necessary to perform a job or function.
,9. Whitelisting: a process in which a company identifies
acceptable software and permits it to run, and either prevents
anything else from running or lets new software run in a
quarantined environment until the company can verify its validity
10. CSMA/CD: Short for carrier sense multiple access with
collision detection. It is the method for multiple hosts to
communicate on a Ethernet.
11. Layer 1: Physical Layer
12. Layer 2: Data Link Layer
13. Layer 3: Network Layer
14. Layer 4: Transport Layer
15. Layer 5: Session Layer - Setup, maintain, and break down a
dialog session between two applications, controls the dialog
organization and synchronization
16. Layer 6: Presentation Layer - Format the data into
standardized format and deals with the syntax of data, not the
meaning
17. Layer 7: Application Layer: Enables user and applications to
access network services (#)
18. CDP: Cisco Discovery Protocol
19. CDP Manipulation: Exploit of CDP traffic to compromise
network devices
, 20. XSS: Cross-site scripting. It scripting allows an attacker to
redirect users to malicious websites and steal cookies. E-mail can
include an embedded HTML image object or a JavaScript image
tag as part of a malicious cross-site scripting attack. Websites
prevent cross-site scripting attacks with input validation to detect
and block input that include HTML and JavaScript tags. Many sites
prevent the use of < and >
characters to block cross-site scripting.
21. SYN flood attack: An attack that takes advantage of the
procedures for initiating a TCP/IP session.
22. Type 1 Hypervisor: Also known as a bare metal hypervisor it
is a software program that acts as an operating system and also
provides the ability to perform virtualization of other operating
systems using the same computer.
23. GDPR: General data protection regulation (2016) companies
have 2 years to transition to GDPR compliance (from EU
directive) after the final text is published
24. VM Introspection: Hypervisor implementation of monitoring
of virtual environ- ment
25. DMA: Direct Memory Access
26. Hyperjacking: An attacker could hijack a VM hypervisor (VM
controlling soft- ware) and then use it as a launch point to attack
other devices on the data center network.
1. Virtual Sprawl: Condition in an operating environment where
number of virtual machines exceed number that can be managed
or secured effectively.
2. VM Escape Tactics: Use of compromised Guest OS to escape
sandbox and take over other Guest OS or hypervisor
3. Hypervisor: Software that runs on a physical computer and
manages one or more virtual machine operating systems.
4. Defense in Depth: A defense that uses multiple types of
security devices to protect a network. Also called layered security.
5. Middleware: Several different types of software that sit
between and provide connectivity for two or more software
applications
6. Net Flow: Cisco product that collects and monitors network
traffic.
7. Protected Enclaves: An approach to defence-in-depth that
involves segmenting your network using multiple VPNs, VLAN
segmentation, switches, or firewalls to separate out networks.
Reducing the exposure of a system can greatly reduce risk.
Restricting access to critical segments.
8. Least Privilege: Providing only the minimum amount of
privileges necessary to perform a job or function.
,9. Whitelisting: a process in which a company identifies
acceptable software and permits it to run, and either prevents
anything else from running or lets new software run in a
quarantined environment until the company can verify its validity
10. CSMA/CD: Short for carrier sense multiple access with
collision detection. It is the method for multiple hosts to
communicate on a Ethernet.
11. Layer 1: Physical Layer
12. Layer 2: Data Link Layer
13. Layer 3: Network Layer
14. Layer 4: Transport Layer
15. Layer 5: Session Layer - Setup, maintain, and break down a
dialog session between two applications, controls the dialog
organization and synchronization
16. Layer 6: Presentation Layer - Format the data into
standardized format and deals with the syntax of data, not the
meaning
17. Layer 7: Application Layer: Enables user and applications to
access network services (#)
18. CDP: Cisco Discovery Protocol
19. CDP Manipulation: Exploit of CDP traffic to compromise
network devices
, 20. XSS: Cross-site scripting. It scripting allows an attacker to
redirect users to malicious websites and steal cookies. E-mail can
include an embedded HTML image object or a JavaScript image
tag as part of a malicious cross-site scripting attack. Websites
prevent cross-site scripting attacks with input validation to detect
and block input that include HTML and JavaScript tags. Many sites
prevent the use of < and >
characters to block cross-site scripting.
21. SYN flood attack: An attack that takes advantage of the
procedures for initiating a TCP/IP session.
22. Type 1 Hypervisor: Also known as a bare metal hypervisor it
is a software program that acts as an operating system and also
provides the ability to perform virtualization of other operating
systems using the same computer.
23. GDPR: General data protection regulation (2016) companies
have 2 years to transition to GDPR compliance (from EU
directive) after the final text is published
24. VM Introspection: Hypervisor implementation of monitoring
of virtual environ- ment
25. DMA: Direct Memory Access
26. Hyperjacking: An attacker could hijack a VM hypervisor (VM
controlling soft- ware) and then use it as a launch point to attack
other devices on the data center network.
