ICTL
Port Forwarding
- Settings of the router which designates ports to be open for specific services, which then sends it on the the destination. - It allows remote computer to connect to a private computer.
FTP (File Transfer Protocol)
- TCP Port 21 (data port 20) - A format and set of rules for transferring files from a host to a remote computer - Typical usage is to upload files to a web server. - It uses a separate port for data and communications.
SMTP (Simple Mail Transfer Protocol)
- TCP Port 25 - Protocol used to transfer mail between network destinations.
Power over Ethernet
- A option in some devices to provide power to a device through the twisted pair CAT5 connection or higher. - Generally found on a switch based on hardware specifications.
connectionless
A type of Transport layer protocol that services a request without requiring a verified session and without guaranteeing delivery of data.
block cipher
A type of algorithm that encrypts a number of bits as individual units known as blocks.
stream cipher
A type of algorithm that encrypts each byte in a message on at a time.
IPsec
(IP security (IPsec) A type of VPN that provides confidentiality, integrity, and authentication.
IntServ
(Integrated Services) Often referred to as hard QoS, because IntServ can make strict bandwidth reservations. IntServ uses signaling among network devices to provide bandwidth reservations. Resource Reservation Protocol (RSVP) is an example of an IntServ approach to QoS. Because IntServ must be configured on every router along a packet's path, a primary drawback of IntServ is its lack of scalability.
AUP
(acceptable use policy) Identifies what users of a network are and are not allowed to do on that network. For example, retrieving sports scores during working hours via an organization's Internet connection might be deemed inappropriate by an AUP.
Switch
- A central network device to connect devices on the same subnet. Sends packets of data between devices within a network. Switches send packets directly to the correct machine. - Due to a system of logging MAC addresses for devices along the network, information sent from one port will only be forwarded to the receiving port. - Operates in full duplex mode since it has separate channels for sending and receiving.
SC (subscriber connector or standard connector)
- A connector used with single-mode or multimode fiber-optic cable. - Snap-in with 2.5 mm ferrule.
In virtualization, what are the host and guest?
- A guest is a virtual machine - The host is the machine that runs the virtual machines
Unix is:
- A trademark - An operating system
Dynamic IP
- IP address assigned by DHCP server. - This method insures there are no overlapping IP addresses within a network.
Linux is not Unix because:
- It hasn't undergone certification
RJ-11
- Most commonly used twisted pair connector for telephone lines and modems.
MAN (metropolitan area network)
- Much like a WAN, this is a network that covers a geographic area such as a city. - It interconnects multiple LANs for the purpose of shared network throughout the region.
Hybrid Topology
- Network topology which combines the use of multiple topology methods.
Mesh Topology
- Network topology which connects each device with one another. - This type has fault tolerance because if a path is down it can reroute through many others.
Which of the following are examples of a web server?
- Nginx - Apache
What are tradeoffs of increasing the level of privacy you have in your web browser?
- Sites may not work properly - You may have to explicitly permit some cookies to be saved
Router Channels
- Specifies portion of wireless frequencies used for a specific router in order to avoid overlapping and causing connectivity issues, especially when dealing with multiple access points.
POP3 (Post Office Protocol, v3)
- TCP Port 110 - Protocol used to retrieve emails from a mail server. - This protocol typically downloads the email and removes it from the server. It is not preferred if you plan to access the email from multiple devices.
VoIP Phones
- Telephone service that operates over an internet connection rather than through an analog signal.
Cable Internet
- Type of internet service that runs over a cable TV network. - The accepted standard for most internet connections today, as it is reliable and fast.
Which of the following are examples of text editors?
- emacs - pico - vim - nano
IMAP (Internet Message Access Protocol)
-TCP Port 143 - Protocol used to retrieve emails from a mail server. - This protocol allows you to synchronize with the mail server and have updated access from multiple devices.
Advantages of a Computer Network
1. File Sharing 2. Resource Sharing 3. Sharing a single internet connection 4. Increasing storage capacity 5. Inexpensive to operate
Class A
10.0.0.0-10.255.255.255
Kilobyte
1024 bytes
Megabyte
1024 kilobytes
Class B
172.16.0.0-172.31.255.255
Class C
192.168.0.0 - 192.168.255.255
Our responsibility to protect a citizens/soldiers private information stored on an automated information system is outlined in The Privacy Act of ___________.
1974
Byte
8 bits
Secure Sockets Layer (SSL)
A cryptographic protocol that provides secure Internet communications such as web browsing, instant messaging, e-mail, and VoIP.
point-to-point
A data transmission that involves one transmitter and one receiver.
web of trust
A decentralized model used for sharing certificates without the need for a centralized CA.
Security Specifications
A detailed description of the safeguards required to protect a system
Packet Sniffer
A device or program that monitors the data traveling between computers on a network
WAP (Wireless Access Point)
A device that connects to a wired network and provides access to that wired network for clients that wirelessly attach to the (AP) access point.
media converter
A device that enables networks or segments using different media to interconnect and exchange signals.
Power Supply
A device that provides power to a computer.
multiplexer (mux)
A device that separates a medium into multiple channels and issues signals to each of those subchannels.
demultiplexer (demux)
A device that separates multiplexed signals once they are received and regenerates them in their original form.
transceiver
A device that transmits and receives signals.
vampire tap
A device used to add computers to a 10BASE5 network. It pierces the copper conductor of a coaxial cable and can also be used for malicious purposes.
ISDN (Integrated Services Digital Network)
A digital telephony technology that supports multiple 64-kbps channels (known as bearer channels or B channels ) on a single connection. ISDN was popular back in the 1980s for connecting PBXs, which are telephone switches owned and operated by a company, to a telephone company's central office. ISDN has the ability to carry voice, video, or data over its B channels. ISDN also offers a robust set of signaling protocols: Q.921 for Layer 2 signaling and Q.931 for Layer 3 signaling. These signaling protocols run on a separate channel in an ISDN circuit (known as the delta channel , data channel , or D channel ).
hertz (Hz)
A measure of frequency equivalent to the number of amplitude cycles per second.
FM (frequency modulation)
A method of data modulation in which the frequency of the carrier signal is modified by the application of the data signal.
RSA
A public key cryptography, asymmetric encryption algorithm created by Rivest, Shamir, Adleman. It is commonly used in e-commerce. Uses the product of two very large prime numbers with an equal length of between 100 and 200 digits. Browsers use it to establish a secure connection
serial
A style of data transmission in which the pulses that represent bits follow one another along a single transmission line. In other words, they are issued sequentially, not simultaneously.
TIA (Telecommunications Industry Association)
A subgroup of the EIA that focuses on standards for information technology, wireless, satellite, fiber optics, and telephone equipment.
Tree Topology
A tree topology combines characteristics of linear bus and star topologies. It consists of groups of star-configured workstations connected to a linear bus backbone cable. Tree topologies allow for the expansion of an existing network, and enable schools to configure a network to meet their needs. pros - Point-to-point wiring for individual segments. - Supported by several hardware and software venders. cons - Overall length of each segment is limited by the type of cabling used. - If the backbone line breaks, the entire segment goes down.
Layer 2 Tunneling Protocol (L2TP)
A tunneling protocol used to connect virtual private networks. It does not include confidentiality or encryption on its own. It uses port 1701 and can be more secure than PPTP if used in conjunction with IPsec.
Cat 7 (Category 7)
A twisted pair cable that contains multiple wire pairs, each separately shielded then surrounded by another layer of shielding within the jacket. It can support up to a 1-GHz signal rate. But because of its extra layers, it is less flexible than other forms of twisted pair wiring.
Wireless Access Point (WAP)
A wireless transmitter which allows devices with a wireless NIC to connect to a network.
rollover cable
A type of cable in which the terminations on one end are exactly the reverse of the terminations on the other end. It is used for serial connections between routers and consoles or other interfaces.
Unix was originally invented at:
AT&T Bell Labs
Cat
Abbreviation for the word category when describing a type of twisted pair cable.
shutdown /a
Abort the shutdown countdown
CRC (cyclic redundancy check)
An algorithm (or mathematical routine) used to verify the accuracy of data contained in a data frame.
birthday attack
An attack on a hashing system that attempts to send two different messages with the same hash function, causing a collision.
cross-site request forgery (XSRF)
An attack that exploits the trust a website has in a user's browser in an attempt to transmit unauthorized commands to the website.
EMI (electromagnetic interference)
A type of interference that may be caused by motors, power lines, televisions, copiers, fluorescent lights, or other sources of electrical activity.
private key
A type of key that is known only to a specific user or users who keep the key a secret.
public key
A type of key that is known to all parties involved in encrypted transactions within a given group.
Cipher
An algorithm that can perform encryption or decryption.
Temporal Key Integrity Protocol (TKIP)
An algorithm used to secure wireless computer networks; meant as a replacement for WEP.
UPS (Uninterruptable Power Supply)
An appliance that provides power to networking equipment in the event of a power outage.
pop-up blocker
An application or add-on to a web browser that blocks pop-up windows that usually contain advertisements.
Mantrap
An area between two doorways, meant to hold people until they are identified and authenticated.
quantitative risk assessment
An assessment that measures risk by using exact monetary values.
Threat
Any circumstance or event with the potential to adversely impact an information system through unauthorized access, destruction, disclosure, modification of data, and/or denial of service.
Output Device
Any device that presents data from the computer to the user.
Input Device
Any device used to enter raw information into a computer.
DTE (data terminal equipment)
Any end-user device, such as a workstation, terminal (essentially a monitor with little or no independent data-processing capability), or a console (for example, the user interface for a router).
Sensitive Data
Any information, the loss, misuse, modification of, or unauthorized access to, could affect the national interest or the conduct of Federal programs, or the privacy to which individuals are entitled under Section 552a of Title 5, U.S. Code, but has not been specifically authorized under criteria established by an Executive order or an act of Congress to be kept classified in the interest of national defense or foreign policy.
Replicator
Any program that acts to produce copies of itself. Examples include; a program, a worm, or virus
Five Layers of Internet Model (Protocol Stack)
Application, Transport, Network, Link, Physical
personal firewall
Applications that protect an individual computer from unwanted Internet traffic; they do so by way of a set of rules and policies.
Tier-1 ISP
Are national ISPs that connect together and exchange data at NAPs.
redundant power supply
An enclosure that contains two complete power supplies, the second of which turns on when the first fails.
Pretty Good Privacy (PGP)
An encryption program used primarily for signing, encrypting, and decrypting e-mails in an attempt to increase the security of e-mail communications.
Advanced Encryption Standard (AES)
An encryption standard used with WPA and WPA2. The successor to DES/3DES and is another symmetric key encryption standard composed of three different block ciphers: AES-128, AES-192, and AES-256.
Public Key Infrastructure
An entire system of hardware and software, policies and procedures, and people, used to create, distribute, manage, store, and revoke digital certificates.
Secondary storage
Backing storage- for when data is no longer being actively used.
vulnerability assessment
Baselining of the network to assess the current security state of computers, servers, network devices, and the entire network in general.
The Data Hierarchy Terms across the layers
Bits -> Frames -> Datagrams -> Segments -> Messages
Ports
Blocking or disabling ports of servers that are connected. Maintain the kind of data flow you want to see and close down possible entry points for hackers.
How are Trojan horses, worms, and malicious scripts spread?
By email attachments
Linux is written in:
C
Network Cabling
Cable is the medium through which information usually moves from one network device to another.
route command
Can add, modify, or delete routes in the IP routing table of Microsoft Windows ® and UNIX hosts. Additionally, the route command can be used to view the IP routing table of Microsoft Windows ® hosts.
ARP command
Can be used in either the Microsoft Windows ® or UNIX environment to see what a Layer 2 MAC address corresponds to a Layer 3 IP address.
netstat command
Can display a variety of information about IP-based connections on a Windows or UNIX host.
nslookup command
Can resolve a FQDN to an IP address on Microsoft Windows ® and UNIX hosts.
dig command
Can resolve a FQDN to an IP address on UNIX hosts.
host command
Can resolve a FQDN to an IP address on hosts.
CD
Change into directory or out of directory (aka drills down into a directory folder) example C:\Users\administrator>CD Documents example C:\Users\administrator\documents
Datagram
Chunks from the transport layer segment encapsulated within a network-layer packet
A license where you don't have access to the source code is called:
Closed source
Shared Medium
Coaxial Cable, from sender to multiple recievers
coaxial cable
Coaxial cables have a copper wire running through the middle encased in plastic insulation. - the metal braid acts as a shield against electromagnetic interference. - longer cable - hard to bend
logic bomb
Code that has, in some way, been inserted into software; it is meant to initiate some type of malicious function when specific criteria are met.
Worm
Code that runs on a computer without the user's knowledge; they self-replicate, whereas a virus does not.
xcopy
Command in the command-line interface used to copy multiple directories at once. Not only files but entire directories. -s/ means sub-directory usually used with xcopy to copy all the subdirectory folders within a root directory (along with root directory).
PPPoE (Point-to-Point Protocol over Ethernet)
Commonly used between a DSL modem in a home (or business) and a service provider. Specifically, PPPoE encapsulates PPP frames within Ethernet frames. PPP is used to leverage its features, such as authentication.
Stateful Inspection
Compares certain key parts of the packet to a database of trusted information
CISC
Complex Instruction Set Computer
Browser/ Browser Settings
Configuration strategy to manage the risk associated with active content while still enabling trusted sites
wet pipe sprinkler system
Consists of a pressurized water supply system that can deliver a high quantity of water to an entire building via a piping distribution system.
You receive an email from the Internal Revenue Service (IRS) demanding immediate payment of back taxes of which you were not aware. The email provides a website and a toll-free number where you can make payment. What action should you take?
Contact the IRS using their publicly available, official contact information.
virtual machine (VM)
Created by virtual software; they are images of operating systems or individual applications.
NEXT (near end cross talk)
Cross talk, or the impingement of the signal carried by one wire onto a nearby wire, that occurs between wire pairs near the source of a signal.
CISM (Certified Information Security Manager)
Cybersecurity specialists responsible for managing, developing and overseeing information security systems at the enterprise level
Full Duplex
Data is transmitted via pulsing light sent from a laser or light-emitting diode (LED) through the central fiber (or fibers). Full-Duplex is the two-lanes going both directions at the same time.
Flash memory
Data that is stored permanently but that can be changed.
Ubuntu is derived from which distribution?
Debian
Acceptable usage policies
Define the rules that restrict how a computer, network, or other system may be used
A Mail Transfer Agent's primary purpose is to:
Deliver mail between servers
A maintenance cycle:
Describes how long a version of software will be supported
A release cycle:
Describes how often updates to the software come out
Spear Phishing attacks commonly attempt to impersonate email from trusted entities. What security device is used in email to verify the identity of sender?
Digital Signatures
What is the best protection method for sharing Personally Identifiable Information (PII)?
Digitally sign and encrypt the email.
Certificates
Digitally signed electronic documents that bind a public key with a user identity.
End-to-end connection
Direct, dedicated connection from two end systems.
nbtstat command
Displays NetBIOS information for IP-based networks. The nbt prefix of the nbtstat command refers to NetBIOS over TCP/IP, which is called NBT (or NetBT ). This command can, for example, display a listing of NetBIOS device names learned by a Microsoft Windows ® -based PC. Nessus ® A network-vulnerability scanner available from Tenable Network Security. ®
tasklist
Displays a list of currently running processes on a local or remote machine. Will give the PID, or process ID number-Windows
Security Plan
Document that details the security controls established and planned for a particular system.
chain of custody
Documents who had custody of evidence all the way up to litigation or a court trial (if necessary) and verifies that the evidence has not been modified.
alien cross talk
EMI interference induced on one cable by signals traveling over a nearby cable.
ENTER syntax
ENTER numbytes, nestinglevel
AP (access point) isolation
Each client connected to the AP will not be able to communicate with each other, but they can each still access the Internet.
due diligence
Ensuring that IT infrastructure risks are known and managed.
Physical Medium
Examples of this include twisted-pair copper wire, coaxial cable, multimode fiber-optic cable, terrestrial radio spectrum, and satellite radio spectrum.
A generic term for Open Source and Free Software is:
FLOSS
A server is likely to be running in graphical mode. True or False?
False
To place software under an open source license, you must give up your copyright. True or False?
False
CPU Cache Memory
Fast access memory. More of this means better performance
Ciphertext
Form of cryptoghraphy in which the plaintext is made unintelligible to anyone, who intercepts it by a transformation of the information itself, based on some key
signature-based monitoring
Frames and packets of network traffic are analyzed for predetermined attack patterns. These attack patterns are known as signatures.
permanent DoS (PDoS) attack
Generally consists of an attacker exploiting security flaws in routers and other networking hardware by flashing the firmware of the device and replacing it with a modified image.
honey pot
Generally is a single computer but could also be a file, group of files, or an area of unused IP address space used to attract and trap potential attackers to counteract any attempts at unauthorized access of the network. Specifically, a system designated as a honey pot appears to be an attractive attack target. One school of thought on the use of a honey pot is to place one or more honey-pot systems in a network to entice attackers into thinking the system is real. The attackers then use their resources attacking the honey pot, resulting in their leaving the real servers alone.
Diskpart
Gives access to configure, format or makes changes to existing volumes on PC
security template
Groups of policies that can be loaded in one procedure.
Hardening
Hardening of the operating system is the act of configuring an OS securely, updating it, creating rules and policies to help govern the system in a secure manner, and removing unnecessary applications and services.
cryptographic hash functions
Hash functions based on block ciphers.
Application backdoor
Hidden access that provides some level of control of the program
Back Door
Hidden software or hardware mechanism used to circumvent security controls
Antivirus software installed to scan and monitor malware activities on a server or workstation would be identified as a __________ based intrusion detection/prevention system.
Host
PoP (Points of Presence)
ISP access points
congestion avoidance
If an interface's output queue fills to capacity, newly arriving packet are discarded (or tail dropped ). Congestion avoidance can prevent this behavior. RED is an example of a congestion-avoidance mechanism.
warchalking
If an open WLAN (or a WLAN whose SSID and authentication credentials are known) is found in a public place, a user might write a symbol on a wall (or some other nearby structure) to let others know the characteristics of the discovered network. This practice, which is a variant of the decades-old practice of hobos leaving symbols as messages to fellow hobos, is called warchalking.
promiscuous mode
In a network adapter, this passes all traffic to the CPU, not just the frames addressed to it. When the network adapter captures all packets that it has access to regardless of the destination for those packets.
recovery time objectives (RTO)
In business impact analysis, the acceptable amount of time to restore a function.
recovery point objectives (RPO)
In business impact analysis, the acceptable latency of data.
T3
In the same T-carrier family of standards as a T1, a T3 circuit offers an increased bandwidth capacity. Although a T1 circuit combines 24 DS0s into a single physical connection to offer 1.544 Mbps of bandwidth, a T3 circuit combines 672 DS0s into a single physical connection, with a resulting bandwidth capacity of 44.7 Mbps.
client-server network
In this type of network a dedicated server (ie: file server or a print server) provides shared access to a resources (ie: files or a printer). Clients (ie: a PCs) on the network with appropriate privilege levels can gain access to those shared resources.
content filters
Individual computer programs that block external files that use JavaScript or images from loading into the browser.
personally identifiable information (PII)
Information used to uniquely identify, contact, or locate a person.
Share Cyber Intelligence
InfraGard is an example of
input validation
Input validation or data validation is a process that ensures the correct usage of data.
traffic shaping
Instead of making a minimum amount of bandwidth available for specific traffic types, you might want to limit available bandwidth. Both policing and shaping tools can accomplish this objective. Collectively, these tools are called traffic conditioners . Traffic shaping delays excess traffic by buffering it as opposed to dropping the excess traffic.
policing
Instead of making a minimum amount of bandwidth available for specific traffic types, you might want to limit available bandwidth. Both policing and trafficshaping tools can accomplish this objective. Collectively, these tools are called traffic conditioners . Policing can drop exceeding traffic, as opposed to buffering it.
Decode
Instructions checked in the control unit.
Attack
Intentional act of attempting to bypass one or more computer security controls.
site-to-site VPN
Interconnects two sites, as an alternative to a leased line, at a reduced cost.
radio frequency interference (RFI)
Interference that can come from AM/FM transmissions and cell towers.
IAB
Internet Architecture Board
IANA
Internet Assigned Numbers Authority
IETF
Internet Engineering Task Force.
If you want to store logins and passwords for different websites in a secure manner, you could use:
KeePassX
LOCAL syntax
LOCAL varlist
traffic intensity
La/R La averages bits/sec
port address translation (PAT)
Like NAT, but it translates both IP addresses and port numbers.
CHAP (Challenge-Handshake Authentication Protocol)
Like PAP, CHAP performs one-way authentication. However, authentication is performed through a three-way handshake (challenge, response, and acceptance messages) between a server and a client. The three-way handshake allows a client to be authenticated without sending credential information across a network.
DIR
List files and directories
The bootloader's job is to:
Load the kernel after the computer is powered on
LocalTalk
LocalTalk is a network protocol that was developed by Apple Computer, Inc. for Macs. The method used by LocalTalk is called CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance).
MD
Makes a new directory
Surge
Means that there is an unexpected increase in the amount of voltage provided.
access control model
Methodologies in which admission to physical areas, and more important computer systems, is managed and organized.
MAN
Metropolitan-area network - Interconnects locations scattered throughout a metropolitan area. (ie: Chicago Public Schools)
RAID 1
Mirroring. Data is copied to two identical disks. If one disk fails, the other continues to operate.
Router layers
Network, Link, and Physical Layers
protocol
Networking: A standard method or format for communication between network devices. Protocols ensure that data are transferred whole, in sequence, and without error from one node on the network to another. Web: The set of rules the page follows for communication and provides information to the computers about how the data is formatted, transmitted, received, and acknowledged
Extensible Authentication Protocol (EAP)
Not an authentication mechanism in itself but instead defines message formats. 802.1X would be the authentication mechanism and defines how EAP is encapsulated within messages.
Two
Number of cores required to run two instructions simultaneously
DMZ (demilitarized zone)
Often contains servers that should be accessible from the Internet. This approach would, for example, allow users on the Internet to initiate an e-mail or a web session coming into an organization's e-mail or web server. However, other protocols would be blocked. Subnetwork used to separate a private sector of a network from the public portion allotted to give access to its services to an untrusted network.
ping command
One of the most commonly used command-line commands. It can check IP connectivity between two network devices. Multiple platforms (for example, routers, switches, and hosts) support the ping command.
Honeynet
One or more computers, servers, or an area of a network, used to attract and trap potential attackers to counteract any attempts at unauthorized access of the network.
address bus
Pathway from memory to processing unit that carries the address in memory to and from which data is transferred.
first responders
People who perform preliminary analysis of the incident data and determine whether the incident is an incident or just an event, and the criticality of the incident.
Control Unit (CU)
Processor component that manages the execution of instructions during the fetch-execute cycle.
Internet Standards
RFC: Request for comments IETF: Internet Engineering Task Force
RISC
Reduced Instruction set Computer
Policy
Rules or guidelines used to guide decisions and achieve outcomes. They can be written or configured on a computer.
If Volume is locked during a chkdsk
Run during startup
If you wanted to let a Linux machine share files with Windows clients and servers, you would use:
Samba
Multi-home
Same connection for multiple ISPs to a home
redundant ISP
Secondary connections to another ISP; for example, a backup T-1 line.
IP proxy
Secures a network by keeping machines behind it anonymous; it does this through the use of NAT.
Operation Controls
Security methods that focus on mechanisms that primarily are implemented and executed by people (as opposed to systems)
Virus
Self-replicating, malicious code that attaches itself to an application program or other executable system component and leaves no obvious signs of its presence
Controller
Sends and receives signals from all parts of the computer
Control Bus
Sends control signals to different parts of the computer
TCP reset attack
Sets the reset flag in a TCP header to 1, telling the respective computer to kill the TCP session immediately.
Network Access Control (NAC)
Sets the rules by which connections to a network are governed.
A type of attack where the intruder observes authentication secrets such as a combination or PIN:
Shoulder Surfing
shutdown /r /t nn
Shutdown and restart after nn seconds
Triple DES (3DES)
Similar to DES but applies the cipher algorithm three times to each cipher block.
packet-switched connection
Similar to a dedicated leased line, because this is an always on network. However, unlike a dedicated leased line, this connection allows multiple customers to share a service provider's bandwidth.
Proxy
Software agent that performs a function or operation on behalf of another application or system while hiding the details involved
Malicious Code
Software capable of performing an unauthorized process on an information system.
SNMP agent
Software deployed by the network management system that is loaded on managed devices. The software redirects the information that the NMS needs to monitor the remote managed devices.
IP Class A
Specified IP classing standard within the range of 1.0.0.0 to 126.255.255.255 with the subnet mask of 255.0.0.0
IP Class B
Specified IP classing standard within the range of 128.0.0.0 to 191.255.255.255 subnet mask of 255.255.0.0
IP Class C
Specified IP classing standard within the range of 192.0.0.0 to 223.255.255.255 subnet mask of 255.255.255.0
A type of attack where an intruder is able to forge a biometric sample:
Splicing Attack
Output Queue
Stores packets the router is about to send to a link
If your wireless device is improperly configured someone could gain control of the device? T/F
TRUE
Forwarding Table
Table that maps destination address to a routers outbound links
Fetch
Takes an address, stored in the instruction register and moves the program counter on one.
uninterruptible power supply (UPS)
Takes the functionality of a surge suppressor and combines that with a battery backup, protecting computers not only from surges and spikes, but also from sags, brownouts, and blackouts.
computer security audits
Technical assessments made of applications, systems, or networks.
Source Routing
Technique in which the originator of a packet can attempt to partially or completely control the path through the network to the destination.
Random Access Memory (RAM)
Temporary storage or working memory; a type of volatile memory that can be accessed randomly.
CIR (committed information rate)
The CIR of an interface is the average traffic rate over the period of a second.
Ethernet
The Ethernet protocol is by far the most widely used.Ethernet uses an access method called CSMA/CD(Carrier Sense Multiple Access/Collision Detection). - can use all three cables
Richard Stallman is associated with:
The Free Software Foundation
Most of the tools that are part of Linux systems come from:
The GNU (GNU's Not Unix!) project
HTTP proxy (web proxy)
The HTTP proxy, also known as a web proxy, which caches web pages from servers on the Internet for a set amount of time.
802.3
The IEEE standard for Ethernet networking devices and data handling (using the CSMA/CD access method).
802.16
The IEEE standard for broadband wireless metropolitan area networking (also known as WiMAX).
802.2
The IEEE standard for error and flow control in data frames.
802.5
The IEEE standard for token ring networking devices and data handling.
802.11
The IEEE standard for wireless networking.
Remote Access
The ability to get access to a computer or a network through wifi, phone lines, or DSL
Spim
The abuse of instant messaging systems, a derivative of spam.
privilege escalation
The act of exploiting a bug or design flaw in a software or firmware application to gain access to resources that normally would've been protected from an application or user.
Performance measure - Bandwidth
The amount of data that can be transferred on a network in a given time.
core
The central component of a cable designed to carry a signal.
unified communications
The centralized management of multiple types of network-based communications, such as voice, video, fax, and messaging services.
Certification
The comprohensive evaluation of the technical and non-technical security features of an IT and other safeguards, made in support of the accreditation process, that establishes the extent to which a particular design and implementation meet specified set of security requirements.
latency
The delay between the transmission of a signal and its receipt.
Encryption
The process of changing information using an algorithm (or cipher) into another form that is unreadable by others—unless they possess the key to that data.
risk transference
The transfer or outsourcing of risk to a third party. Also known as risk sharing.
cold site
This has tables, chairs, bathrooms, and possibly some technical setup, for example, basic phone, data, and electric lines, but will require days if not weeks to set up properly.
CSMA/CD (Carrier Sense Multiple Access with Collision Detection)
This is a system where each computer listens to the cable before sending anything through the network.
Basic QoS (quality of service)
This is simply the measured quality of an internet connection.
Fetch-Execute Cycle
This is the process of fetching the instructions from memory, decoding them and then executing them so that the CPU performs continuously.
asymmetric key encryption
This type of cipher uses a pair of different keys to encrypt and decrypt data.
time bomb
Trojans set off on a certain date.
Applications make requests to the kernel and receive resources, such as memory, CPU, and disk in return. True or False?
True
Mobile devices include fitness bands, tablets, smartphones, electronic readers, and Bluetooth- enabled devices.
True
Participating in open source projects can improve your technical skills, even if it is not your day job. True or False?
True
You can configure your computer to check for updates automatically. True or False?
True
twisted-pair cable
Twisted pair cables have pairs of insulated copper wires twisted round each other to cancel out come in two types: - unshielded twisted pair (UTP)(ex: telephone cables): prone to electromagnetic interference - shielded twisted pair (STP): has a metal sheath encasing the twisted pairs, shielding them further from outside electromagnetic interference.
Cluster
Two or more servers that work with each other.
incremental backup
Type of backup that backs up only the contents of a folder that have changed since the last full backup or the last incremental backup.
differential backup
Type of backup that backs up only the contents of a folder that have changed since the last full backup.
full backup
Type of backup where all the contents of a folder are backed up.
stateful packet inspection
Type of packet inspection that keeps track of network connections by examining the header in each packet, also known as SPI.
Flooding
Type off incident involving insertion of a large volume of data resulting in denial of service
Intrusion
Unauthorized act of bypassing the security mechanisms of a system.
Spoofing
Unauthorized use of legitimate identification and authentication data, however it was obtained, to mimic a subject different from the attacker. Impersonating, masquerading, piggybacking, and mimicking are forms of this
Hacker
Unauthorized user who attempts to or gains access to an information system.
Patches (Software Patches)
Updates that fix particular problem or vulnerability within a program. Sometimes, instead of just releasing this vendors will release an upgraded version of their software.
Which tool would be most effective for mapping a target network?
Vulnerability scanner
null session
When used by an attacker, a malicious connection to the Windows interprocess communications share (IPC$).
Internal Memory
Where data is moved to when not actively being used
3DES
a symmetric block cipher with 64-bit block size that uses a 56-bit key, encrypts data three times and uses a different key for at least one of the three passes, giving it a cumulative key size of 112-168 bits
CAM (Content Addressable Memory) table
a table that is in a switch's memory that contains ports and their corresponding MAC addresses.
XSS (Cross Site Scripting)
allows criminals to inject scripts into the web pages viewed by users
ethical hacker
an expert at breaking into systems and can attack systems on behalf of the system's owner and with the owner's consent.
Product Key
code that you type when requested as you install the software
Complex Instruction Set Computer (CISC)
computers designed with a full set of computer instructions that range from very simple to very complex and specialized to provide needed capabilities in the most efficient way.
Methods used to ensure confidentiality
data encryption, authentication, and access control.
mySub PROC enter 0, 0
declare a procedure with no local variables using the ENTER instruction similar to: mySub PROC push ebp mov ebp, esp
Parity
detects data errors
Asynchronous Online Communication
does not require the participants to be online at the same time
type
either a standard type or a user-defined type (used with the LOCAL directive) - standard types are WORD, DWORD..... - user-defined types are Structures .....
help
gives list of commands
input-output parameter
identical to an output parameter, with one exception: The called procedure expects the variable referenced by the parameter to contain some data. The procedure is also expected to modify the variable via the pointer.
Detective Control
identify different types of unauthorized activity
Bitmapped Graphics
images composed of pixels
ENTER
instruction that automatically creates a stack frame for a called procedure. It reserves stack space for local variables and saves EBP on the stack. Specifically, it performs three actions: - Pushes EBP on the stack (puch ebp) - Sets EBP to the base of the stack frame (mov ebp, esp) - Reserves space for local variables (sub esp, numbytes)
PGP (pretty good privacy)
is a widely deployed asymmetric encryption algorithm and is often used to encrypt e-mail traffic.
NSA (National Security Agency)
is responsible for intelligence collection and surveillance activities in the U.S
While Loop
loops through a block of code while a specified condition is true
Scareware
persuades the user to take a specific action based on fear
Administrative Access Control
policies and procedures defined by organizations to implement and enforce all aspects of controlling unauthorized access. These controls focus on personnel and business practices
Giga
prefix multiplier for 1,000,000,000
Confidentiality
prevents the disclosure of information to unauthorized people, resources and processes
Methods
procedure(Action) associated with an object
Overclocking
processor being set to run faster than it's original design
Portable Apps
programs that you carry with you on a flash drive
Software Watermarking
protects software from unauthorized access or modification
Internet Service Providers
provide an access path to the Internet
Compensative Control
provide options to other controls to bolster enforcement in support of a security policy
IPv6 (Internet Protocol version 6)
provides a large number of new addresses to route Internet traffic.The IPv6 address format is much different than the IPv4 format. It contains eight sets of four hexadecimal digits and uses colons to separate each block. , such as "fe80::42:acff:feaa:1bf0".
Oversight and Development
provides for leadership, management, and direction to conduct cybersecurity work effectively
omnidirectional antenna
radiates power at relatively equal power levels in all directions (somewhat similar to the theoretical isotropic antenna). Omnidirectional antennas are popular in residential WLANs and SOHO (small office/home office) locations.
attributes
refers to distance, langType, visibility, prologue (used with the PROC directive)
Unguided Media
signals propagate freely, e.g. radio
IPFix
standard format for exporting router based information about network traffic flows to data collection devices
Preventative Control
stop unwanted or unauthorized activity from happening
Document Management System
store documents on a server or on the Web, and provide security and access to the business documents
Main Memory
stores data and information and is usually volatile; its contents are lost when electrical power is turned off. It plays a major role in a computer's performance.
Mirroring
stores duplicate data on a second drive
External Hard Drive
suitable for backing up home computer systems
Magnetic tape
suitable for backing up large commercial servers.
Flash drive
suitable for moving relatively small files
STDCALL calling convention
supply an integer parameter to the RET instruction, which in turn adds to EBP after returning to the calling procedure. Integer must equal the number of bytes of stack space consumed by the subroutine parameters. Example2 PROC push ebp mov ebp, esp ; base of stack frame mov eax, [ebp + 12] ; second parameter add eax, [ebp + 8] ; first parameter pop ebp ret 8 ; clean up the stack Example2 ENDP NOTE: requires 32-bit operands, smaller operands must be pushed with zero extend
Methods used to ensure availability
system redundancy, system backups, increased system resiliency, equipment maintenance, up-to-date operating systems and software, and plans in place to recover quickly from unforeseen disasters.
Early Warning Systems
the Honeynet project is an example of
address
the code that identifies where a piece of information is stored
IoT
the collection of technologies that enable the connection of various devices to the Internet.
epilogue
the ending of a function consisting of restoring the EBP register and returning to the caller
Transistor
the fundamental building block of modern electronic devices, which is used to control the flow of electricity in electronic circuits.
HMAC (Hash-based Message Authentication Code)
they strengthens hashing algorithms by using an additional secret key as input to the hash function
Cloud storage
third party storage of data- using someone else's servers.
Macros
tools that allow a user to program repetitive tasks into the computer's memory so that they can be quickly accomplished with the touch of a couple keys that the user has selected
Guided Media
transmission flows along physical medium
channel bonding
two wireless bands can be logically bonded together, forming a band with twice the bandwidth of an individual band. Some literature refers to channel bonding as 40 MHz mode , which refers to the bonding of two adjacent 20-MHz bands into a 40-MHz band.
VLANs (Virtual LANs)
use logical connections instead of physical connections
Routing Protocols
used to facilitate the exchange of routing information between routers, set the forwarding tables
IDEA
uses 64-bit blocks and 128-bit keys, performs eight rounds of transformations on each of the 16 blocks that results from dividing each 64-bit block
SEO Poisoning
uses SEO to make a malicious website appear higher in search result
SMiShing
uses Short Message Service to send fake text messages
Rule Based Access Control
uses access control lists (ACLs) to help determine whether to grant access
Wired networks
uses cables to transmit data
PKI (public key infrastructure)
uses digital certificates and a certificate authority to allow secure communication across a public network.
uses store-and-forward technology
CIFS (Common Internet File System)
- TCP Port 445, UDP Port 137, 138, 139 - Dialect of Server Message Block (SMB) protocol. - Enables the sharing of folders/files, printers and ports over a network.
PAP (Password Authentication Protocol)
Performs one-way authentication (that is, a client authenticates with a server). However, a significant drawback to PPP, other than its unidirectional authentication, is its clear-text transmission of credentials, which could permit an eavesdropper to learn authentication credentials.
Spillage occurs when
Personal information is inadvertently posted at a website
IP address (Internet Protocol address)
The Network layer address assigned to nodes to uniquely identify them on a TCP/IP network. IP addresses consist of 32 bits divided into four octets, or bytes. is a numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication.[1][2] An IP address serves two main functions: host or network interface identification and location addressing.
Wardriving
The act of searching for wireless networks by a person in a vehicle through the use of a device with a wireless antenna, often a particularly strong antenna.
Defense in depth
The building up and layering of security measures that protect data from inception, on through storage and network transfer, and lastly to final disposal.
block ID
The first set of six characters that make up the MAC address and that are unique to a particular manufacturer.
incident management
The monitoring and detection of security events on a computer network and the execution of proper responses to those security events.
data emanation (or signal emanation)
The electromagnetic field generated by a network cable or network device, which can be manipulated to eavesdrop on conversations or to steal data.
certificate authority
The entity (usually a server) that issues digital certificates to users.
Key
The essential piece of information that determines the output of a cipher.
business impact analysis
The examination of critical versus noncritical functions, it is part of a business continuity plan (BCP).
attenuation
The extent to which a signal has weakened after traveling a given distance.
FCS (frame check sequence)
The field in a frame responsible for ensuring that data carried by the frame arrives intact. It uses an algorithm, such as CRC, to accomplish this verification.
Session layer
The fifth layer in the OSI model. This layer establishes and maintains communication between two nodes on the network. It can be considered the "traffic cop" for network communications.
segmentation
The process of decreasing the size of data units when moving data from a network that can handle larger data units to a network that can handle only smaller data units.
domain name kiting
The process of deleting a domain name during the five-day grace period (known as the add grace period or AGP) and immediately reregistering it for another five-day period to keep a domain name indefinitely and for free.
license tracking
The process of determining the number of copies of a single application that are currently in use on the network and whether the number in use exceeds the authorized number of licenses
load balancing
The process of distributing data transfer activity evenly across a network so that no single device is overwhelmed.
Risk Analysis
The process of identifying security risks, determining their magnitude, and identifying areas needing safeguards
Configuration Management
The process of keeping track of changes to the system, if needed, approving them.
Baselining
The process of measuring changes in networking, hardware, software, and so on.
reassembly
The process of reconstructing data units that have been segmented.
regeneration
The process of retransmitting a digital signal.
System Integrity
The quality that a system has when it performs its intended function in an unimpaired manner, free from deliberate or inadvertent unauthorized manipulation of the system
bend radius
The radius of the maximum arc into which you can loop a cable before you will cause data transmission errors.
Salting
The randomization of the hashing process to defend against cryptanalysis password attacks and Rainbow Tables. Used to make hashing more secure
Performance measure - Download speed
The rate at which packets can be downloaded from one computer to another.
Performance measure - Upload speed
The rate at which packets of information can be sent from one computer to another.
tip and ring
The red and green wires found in an RJ-11 wall jacks, which carry voice, ringing voltage, and signaling information between an analog device (for example, a phone or a modem) and an RJ-11 wall jack.
chromatic dispersion
The refraction of light as in a rainbow. If light is refracted in such a manner on fiber optic cables, the signal cannot be read by the receiver.
Program Counter (PC)
The register that contains the address of the next instruction to be executed
impedance
The resistance that contributes to controlling an electrical signal. It is measured in ohms.
Optical
Uses lasers to binary data
noise
The unwanted signals, or interference, from sources near network cabling, such as electrical motors, power lines, and radar.
LLC (Logical Link Control Sublayer)
The upper sublayer in the Data Link layer. The LLC provides a common interface and supplies reliability and flow control services.
convergence
The use of data networks to carry voice (or telephone), video, and other communications services in addition to data.
PSTN (public switched telephone network)
The worldwide telephony network comprised of multiple telephone carriers.
group policy
Used in Microsoft environments to govern user and computer accounts through a set of rules.
Backdoors
Used in computer programs to bypass normal authentication and other security mechanisms in place.
Magnetic
Used in hard disks and tapes
Remote Authentication Dial-In User Service (RADIUS)
Used to provide centralized administration of dial-up, VPN, and wireless authentication.
Read head
Used to read data on magnetic storage
Expand command
Used to remove files in a cabinet (.cab file)
Write head
Used to write data to magnetic storage
Hub-and-Spoke Topology
Used when interconnecting multiple sites (ie: multiple corporate locations) via WAN links, a hub-and-spoke topology has a WAN link from each remote site (a spoke site) to the main site (the hub site).
WPA2 (Wi-Fi Protected Access, v2)
Uses Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for integrity checking and Advanced Encryption Standard (AES) for encryption. These algorithms enhance the security offered by WPA.
public key cryptography
Uses asymmetric keys alone or in addition to symmetric keys. The asymmetric key algorithm creates a secret private key and a published public key.
Entity integrity
a database integrity that state that all rows must have a unique identifier called a primary key
Circuit Switching
a dedicated connection is formed between two points and the connection remains active for the duration of the transmission
Wired Equivalent Privacy (WEP)
a deprecated security protocol that attempted to provide a wireless local area network (WLAN) with the same level of security as a wired LAN
Hashing algorithm
a tool that ensures data integrity by taking binary data and producing a fixed-length representation called the hash value or message digest
File encryption
a tool used to protect data stored in the form of files
Cache
a type of memory to store data temporarily in a computing environment often to shorten data access time, reduce latency and improve input/output (I/O).
Authorization
services that determine which resources users can access, along with the operations that users can perform, after the user is granted access once authentication is complete
WriteStackFrameName
similar to WriteStackFrame procedure, except includes additional parameter that holds the name of the procedure owning the stack frame
Freeware
you generally download the software app from the Internet for free and you can use the software for an unlimited period of time
Multimeter
- Tool used to measure the electric currents of various components of a computer. - Can be used to measure voltage (AC and DC), current (amps), resistance (ohms), capacitance and frequency.
What can be done to prevent remote people from running programs on your computer?
- Turn on a firewall - Use strong passwords on all user accounts
RJ-45
- Twisted pair connector used for network cabling. - Uses either T568A or T568B wiring configurations.
LC (local connector)
- Type of connector used in fiber optic cabling. - Uses a connector likened to RJ-45. It has a smaller form factor and uses 1.25 mm ferrule. - Preferred for single mode.
Internet Protocol Security (IPsec)
A TCP/IP protocol that authenticates and encrypts IP packets, effectively securing communications between computers and devices using the protocol.
Simple Network Management Protocol (SNMP)
A TCP/IP protocol that monitors network-attached devices and computers. It's usually incorporated as part of a network management system.
Infrastructure as a Service (IaaS)
A cloud computing service that offers computer networking, storage, load balancing, routing, and VM hosting.
node
A computer or other device connected to a network, which has a unique address and is capable of sending or receiving data
MT-RJ (mechanical transfer-registered jack)
A connector used with single-mode or multimode fiber-optic cable.
security policy
A continually changing document that dictates a set of guidelines for network use. These guidelines complement organizational objectives by specifying rules for how a network is used
Backup
A copy of data and/or applications contained in the IT stored on magnetic media outside of the IT to be used in the event IT data are lost.
GPC (GNU privacy guard)
A free variant of pretty good privacy (PGP), which is an asymmetric encryption algorithm.
Grayware
A general term used to describe applications that are behaving improperly but without serious consequences; often describes types of spyware.
The Internet
A global network connecting millions of computers; has more than 200 million users worldwide, and that number is growing rapidly; a complex WAN that connects LANs and clients around the globe
Botnet
A group of compromised computers used to distribute malware across the Internet; the members are usually zombies.
Secure Hash Algorithm (SHA)
A group of hash functions designed by the NSA and published by the NIST, widely used in government. The most common currently is SHA-1.
service pack (SP)
A group of updates, bug fixes, updated drivers, and security fixes that are installed from one downloadable package or from one disc.
VPN concentrator
A hardware appliance that allows hundreds of users to connect to the network from remote locations via a VPN.
PCI (Peripheral Component Interconnect) Express
A high-speed serial bus interface made by Intel for connecting peripheral devices.
Cat 5e (Enhanced Category 5)
A higher-grade version of wiring that contains highquality copper, offers a high twist ratio, and uses advanced methods for reducing cross talk. It can support a signaling rate of up to 350 MHz
Source code refers to:
A human readable version of computer software
hardware firewall
A network appliance dedicated to the purpose of acting as a firewall. This appliance can have multiple interfaces for connecting to areas of a network requiring varying levels of security.
teardrop attack
A type of DoS that sends mangled IP fragments with overlapping and oversized payloads to the target machine.
SYN flood
A type of DoS where an attacker sends a large amount of SYN request packets to a server in an attempt to deny service.
network intrusion detection system (NIDS)
A type of IDS that attempts to detect malicious network activities—for example, port scans and DoS attacks—by constantly monitoring network traffic.
connection oriented
A type of Transport layer protocol that requires the establishment of a connection between communicating nodes before it will transmit data.
data packet
A discrete unit of information sent from one node on a network to another.
trouble ticket
A problem report explaining the details of an issue being experienced in a network.
ISOC (Internet Society)
A professional organization with members from 90 chapters around the world that helps to establish technical standards for the Internet.
Software
A program or instructions that give directions to the computer.
Secure Shell (SSH)
A protocol that can create a secure channel between two computers or network devices.
IKE (Internet Key Exchange)
A protocol used to set up an IPsec session.
Nonce
A random number issued by an authentication protocol that can only be used once.
decibel (dB)
A ratio of radiated power to a reference value. In the case of dBi, the reference value is the signal strength (that is, the power) radiated from an isotropic antenna, which represents a theoretical antenna that radiates an equal amount of power in all directions (in a spherical pattern). An isotropic antenna is considered to have gain of 0 dBi.
Audit Trail
A record showing who has accessed a computer system and what operations he or she has performed during a given period of time. Useful both for maintaining security and for recovering lost transactions
Current Instruction Register (CIR)
A register inside the CPU which holds the current instruction (not the data)
patch cable
A relatively short section (usually between 3 and 25 feet) of cabling with connectors on both ends.
Terminal Access Controller Access-Control System (TACACS)
A remote authentication protocol similar to RADIUS used more often in UNIX networks.
ACK (acknowledgment)
A response generated at the Transport layer of the OSI model that confirms to a sender that its frame was received. The ACK packet is the third of three in the three-step process of establishing a connection.
black-hole router
A router that drops packets that cannot be fragmented and are exceeding the MTU size of an interface without notifying the sender.
Blackout
When a total loss of power for a prolonged period occurs.
single sign-on (SSO)
When a user can log in once but gain access to multiple systems without being asked to log in again.
least privilege
When a user is given only the amount of privileges needed to do his job.
time of day restriction
When a user's logon hours are configured to restrict access to the network during certain times of the day and week.
Sandbox
When a web script runs in its own environment for the express purpose of not interfering with other processes, possibly for testing.
explicit allow
When an administrator sets a rule that allows a specific type of traffic through a firewall, often within an ACL.
explicit deny
When an administrator sets a rule that denies a specific type of traffic access through a firewall, often within an ACL.
Pharming
When an attacker redirects one website's traffic to another bogus and possibly malicious website by modifying a DNS server or hosts file (domain spoofing)
one-to-one mapping
When an individual certificate is mapped to a single recipient.
risk avoidance
When an organization avoids risk because the risk factor is too great.
risk reduction
When an organization mitigates risk to an acceptable level.
Piggybacking
When an unauthorized person tags along with an authorized person to gain entry to a restricted area.
key escrow
When certificate keys are held in case third parties, such as government or other organizations, need access to encrypted communications.
Serial Transmission
When data is sent or received using serial data transmission, the data bits are organized in a specific order, since they can only be sent one after another
Parallel Transmission
When data is sent using parallel data transmission, multiple data bits are transmitted over multiple channels at the same time.
disk duplexing
When each disk is connected to a separate controller.
many-to-one mapping
When multiple certificates are mapped to a single recipient.
load-balancing clusters
When multiple computers are connected in an attempt to share resources such as CPU, RAM, and hard disks.
fuzz testing (fuzzing)
When random data is inputted into a computer program in an attempt to find vulnerabilities
Remote Login
When someone connects to a computer via the Internet
Brownout
When the voltage drops to such an extent that it typically causes the lights to dim and causes computers to shut off.
broadcast storm
When there is an accumulation of broadcast and multicast packet traffic on the LAN coming from one or more network interfaces.
BERT (bit-error rate tester)
When troubleshooting a link where you suspect a high bit-error rate (BER), you can use a piece of test equipment called a bit-error rate tester (BERT), which contains both a pattern generator (which can generate a variety of bit patterns) and an error detector (which is synchronized with the pattern generator and can determine the number of bit errors) and can calculate a BER for the tested transmission link.
mutual authentication
When two computers, for example a client and a server, both verify each other's identity.
classification
is the process of placing traffic into different categories.
URL (Uniform Resource Locator)
is typed in the address bar of a browser to open the home page or other resource on the website
VoIP
is used to transmit calls over the Internet rather than traditional phone lines or cellular towers
Digital certificate
it enable users, hosts, and organizations to exchange information securely over the Internet
Examples of Input Devices
keyboard, mouse, microphone, camera, scanner...
PROC syntax
label PROC [attributes] [USES reglist], parameter_list
varlist form
label: type (used with the LOCAL directive)
Deterrent Control
limit or mitigate an action or behavior
WriteStackFrame
link library procedure that displays the contents of the current procedure's stack frame. It shows the procedure's stack parameters, return address, local variables, and saved registers.
Bottleneck Link
link on end-end path that constrains end-end throughput
PaaS (Platform as a Service)
makes collaboration easier and requires less programming knowledge
Browser Hijacker
malware that alters a computer's browser settings to redirect the user to websites paid for by the cyber criminals customers
Personal Information Manager
manages your email, calendar, contacts, and tasks
Gray Hat Attackers
may find a vulnerability and report it to the owners of the system if that action coincides with their agenda
Sniffing
occurs when attackers examine all network traffic as it passes through their NIC independent of whether or not the traffic is addressed to them or not
short
occurs when two copper connectors touch each other, resulting in current flowing through that short rather than the attached electrical circuit, because the short has lower resistance.
Video Graphics Array (VGA)
one of the de facto display standards for PCs, which supports analog signals rather than digital signals.
ADDR
operator that can be used to pass a pointer argument when calling a procedure using INVOKE - must be assembly time constant - call only be used in conjunction with INVOKE
argumentList
optional comma-deliminated list of arguments passed to a procedure
Database
organises facts about people, places, things, or events
parameterList syntax
paramName:type (used with the PROC directive)
by reference
passing an argument that consists of the address (OFFSET) of an object.
by value
passing an argument using a copy of the value pushed on the stack.
IDS (Intrusion Detection System)
passively monitors the traffic on a network. can recognize the signature of a well-known attack and respond to stop the attack. However, this sensor does not reside in-line with the traffic flow. Therefore, one or more malicious packets might reach an intended victim before the traffic flow is stopped by this sensor.
register
(computer science) Storage location on a CPU; the control unit of a digital computer that stores the current instruction of the program and controls the operation of the computer during the execution of that instruction
buffer
(computer science) a region of a physical memory storage used to temporarily store data while it is being moved from one place to another
interrupt
(computer science) a signal from a device attached to a computer or from a program within the computer that requires the operating system to stop and figure out what to do next
memory unit
(computer science) a unit for measuring computer memory
operating system
(computer science) software that controls the execution of computer programs and may provide various services
processor
(computer science) the part of a computer (a microprocessor chip) that does most of the data processing; "the CPU and the memory form the central part of a computer to which the peripherals are attached"
ELSR
(edge label switch router) Resides at the edge of an MPLS service provider's cloud and interconnects a service provider to one or more customers.
MTU
(maximum transmission unit) The largest packet size supported on an interface through the media of air .
The Samba application is a:
- File Server
Linux is distributed under which license?
- GPLv2
Which of the following licenses was made by the FSF?
- GPLv3
IPv6
- 128-bit hexidecimal network addressing standard - Designed as a backup system when we've run out of traditional IP addresses.
802.11b
- 2.4-GHz band and the DSSS transmission method - 11 Mbps - 300 ft maximum range - 11 total operating channels, 3 non-overlapped
IPv4
- 32-bit decimal network addressing standard - Separated by decimal into 4 octets (8-bits). - OSI Layer 3 address
Router
- A Layer 3 network device used to connect two network that have different subnets. - Destination addresses are compiled by IP so it keeps track of where to forward requests.
Hub
- A central network device to connect devices on the same subnet. - Information sent from one port will be sent out to every other port. - Operates strictly in half-duplex mode due to the limitation of only one send request permitted at a time. - Handles a data type called frames
ST (straight tip) Connector
- A connector used with single-mode or multimode fiber-optic cable. - Uses bayonet connector with 2.5 mm ceramic or polymer ferrule.
Access Point
- A device on a network which creates a position to provide access to incoming connections.
Modem
- A device that acts to convert digital information to analog to send information over telephone lines. - On the receiving end it converts the analog data back into digital.
Bridge (network hardware)
- A device to connect two network segments with the same subnet. - Compiles a list of devices by MAC address in order to know where to forward requests. Bridges connect different physical network types together, e.g. Ethernet to Fast Ethernet etc.A bridge can also separate a network into two segments.Good for when there is a lot of network traffic.
Internet appliance
- A device with an alternate primary purpose yet has the ability to use internet services. - This could be a smart TV, PDA, camera, etc.
WPS (Wi-Fi Protected Setup)
- A method of connecting to a wireless network devised to make it easier to those with less knowledge of network security. - It involves pressing of a button on the router in relation to the computer or other compatible network device, and they will securely connect the computer to the wireless network without the need of a passcode or pre-shared key.
Fiber Optic Internet
- A modern internet delivery variation from cable companies upgrading their networks with the use of high speed fiber optic cabling. - Since the data is literally delivered on beams of light it is able to travel extremely fast and far distances.
WAN (Wide Area Network)
- A network that consists of multiple LANs and covers a larger geographic area such as a town, city or county.
Port Triggering
- A setting of a router which would open a specific port only on request from a local host, to which that host is the designated recipient of communication through that port. - Ports remain closed when there is no activity.
Loopback plug
- A simple plug use to test the outgoing and incoming communication on a port. - It routes the transmit portto the receive porton the same device.
Cable tester
- A tool that validates the usability of a network cable. -It is connected to the network cable at both ends of a cable and will verify that the signals are being sent successfully and that the wiring in the connectors are in the correct position.
Which of the following is true about graphical mode?
- After login, you are provided with a desktop - You access this mode by logging into a - You have menus and tools to help you find what you are looking for
Creative Commons licenses allow you to:
- Allow or disallow commercial use Get a veto on where the work is used - Specify whether or not people may distribute changes - Specify whether or not changes must be shared
The Linux shell:
- Allows you to launch programs - Is customizable - Has a scripting language
Public IP
- An IP address issued by a network provider used to communication with hosts across the world wide web. - This is the IP address used for remote users to access a private network.
Private IP
- An internal IP address assigned to each device on a network for communication between one another. - This IP address must be within a specified group of available addresses in order to operate.
Permission-free software licenses:
- Are not approved by the FSF - Can allow software to be used inside - Don't have a copyleft provision
Which of the following are properties of a strong password?
- At least 10 characters long - Includes symbols - A mix of upper and lower case
Which are examples of permissive software licenses?
- BSD - MIT
The largest difference between the GPLv2 and BSD licenses is:
- BSD has no copyleft provision
Who founded the Open Source Initiative?
- Bruce Perens - Eric Raymond
The two main families of Linux shells are:
- C Shell - Bourne Shell
Which distributions are made by, or clones of, Red Hat?
- CentOS - Fedora
Apple's OS X is:
- Certified as UNIX compatible - Derived from FreeBSD - Only compatible with Apple hardware
Microsoft Windows
- Comes in desktop and server variants - Has powerful scripting capabilities - Has built in virtualization
Client-side DNS
- Compiles a list of frequently used domain name and IP destinations to quickly pull up a destination upon request.
When a computer boots, it can get its network information through:
- DHCP
POP and IMAP are related to:
TKIP (Temporal Key Integrity Protocol)
- Encryption method utilized in WPA
WiMAx
- High speed internet access provided through wireless signals to a larger area of subscribers. - Would require a device or antennae which would receive the signal. - Could potentially eliminate the use of cable internet due to simpler setup.
APIPA (Automatic Private IP Addressing)
- If enabled, this feature will assign a default IP address when the DHCP server is not responding. - The IP address will be assigned between 169.254.0.0 to 169.254.255.255
Cellular/Mobile Hotspot
- Internet connection shared from a device receiving a connection from mobile network towers. - This device can be used as an access point to allow those nearby with internet access. - Mobile phone tethering is also a way to share your phone connection as an access point. - Depending on the level of service this can prove to be a very fast internet connection: EDGE (400-1000 kbps), 3G (2 Mbps+), 4G (3-100+ Mbps), etc.
An interpreted programming language:
- Is converted into machine specific instructions as the program runs - Tends to offer more features than compiled languages
Software is backward compatible if:
- It still supports old file formats or applications
A package manager:
- Keeps track of which files belong to which packages - Downloads software from the Internet
The difference between the GPL and LGPL licenses are:
- LGPL allows linking to non GPLed software
One of the jobs of the kernel is to:
- Manage the system's resources
Static IP
- Manually assigned IP address
Plenum
- Material used to surround twisted pair cabling, especially when wiring above ceiling tiles.
UTP (unshielded twisted pair)
- Most commonly used networking cable. - Lower cost since it doesn't have the extra protection layer of copper grounding material. - Cable type used in networks that do not have any concerns over EMI, RFI, or cross talk. If these are a concern, STP is used.
Ring Topology
- Network topology which connects one computer to another in a continuous loop. - The signal travels in one direction as each device repeats the signal until it reaches the intended destination. - If there is a missing connection in a loop the network connection is down from that point in the setup.
Star Topology
- Network topology which requires each computer to connect to a central point such as a hub or switch. - The typical setup for LANs due to the ease of adding and removing connections.
Bus Topology
- Network topology with a trunk cable that runs the full length with a terminator at both ends to prevent repeated signals. The devices are connected with a drop cable along the trunk cable. - Broken cables prevent communication with any device on the network.
STP (Shielded twisted pair) cable
- Networking cable with extra protection against EMI. prevent loops on a network when switches interconnect via multiple paths - Copper used as grounding material around the internal wires.
The Creative Commons version of Public Domain licensing is:
- No Rights Reserved
PVC (Polyvinyl Chloride)
- Normal material used to surround twisted pair cabling. - Can be toxic when burned, therefore is not permitted for use when wiring above ceiling tiles.
Satellite Internet
- Not known as the fastest, yet reliability from anywhere in the world and not limited by wiring. - This sends and receives radio signal from satellite it is susceptible to interference from weather conditions. - Requires satellite dish setup, to send and receive signals, with a clear line of sight setup. - Can be used as a portable option and available in remote regions. - Expect latency due to distance of travel.
A permissive free software license:
- Places no restrictions on sharing modifications - Means you can use the software for anything you want
HTTPS (HTTP Secure)
- Port 443 - Protocol used to access websites on the world wide web with added SSL protection. - Any website cannot be automatically accesses with this protocol, it is authorized by certificate.
If a podcast is licensed under the CC BY-ND license, you may:
- Post it to your website - Share it as long as you give credit to the author
TCP (Transmission Control Protocol)
- Protocol for data transmission which requires a return receipt on every delivery to ensure the information reached the intended destination. - Packets that are lost or dropped are re-sent. - This system ensures a reliable transfer. - Connection-oriented protocol. - TCP is tightly linked with IP and usually seen as TCP/IP in writing.
UDP (User Datagram Protocol)
- Protocol for quicker transmission of data since there is no requirement of receipt. - Dropped or lost packets are not re-transmitted. - More reliable method to deliver audio or video due to the increased rate of transmission. - Connectionless protocol. - UDP uses a best-effort delivery mechanism.
How can you make money from open source software?
- Provide paid consulting services for users - Take payments for fixing bugs - Sell hardware that's built to work with the software
Which of the following are traits of a multiuser operating system?
- Resources are shared between users - Users can protect their information from other - Many users can log in simultaneously with a unique account
SMB (Server Message Block)
- TCP Port 445, UDP Port 137, 138, 139 - Protocol implemented in Microsoft Windows. - This system allows users to share resources across the network remotely. (ie. shared folders/files, printers)
DNS (Domain Naming Server)
- TCP Port 53 - Translates real name network commands to associated IP destinations. A protocol used to convert URLs into IP addresses when loading a webpage.
HTTP (Hyper Text Transfer Protocol)
- TCP Port 80 - Protocol used to access websites on the world wide web.
SSH (Secure Shell)
- TCP/UDP Port 22 - A secured protocol used to access and control remote systems. - Generally used in terminal mode.
SFTP (SSH File Transfer Protocol)
- TCP/UDP Port 22 - Used to access and transfer server files from a host system with a secure shell protocol.
TELNET
- TCP/UDP Port 23 - Network protocol to connect to a server and operate it as a native user in terminal mode. - This method of server control, though it has username and password as security, is unencrypted and not the most secure method.
RDP (Remote Desktop Protocol)
- TCP/UDP Port 3389 - Used to access, view and control one computer from another while connecting through a network and/or internet connection.
LDAP (Lightweight Directory Access Protocol)
- TCP/UDP port 389 (secure port 636) - Protocol used to build and share information within a network. - An Application Layer protocol used for accessing and modifying directory services data.
What is the meaning of a public domain license?
- The author has relinquished the copyright on the work
Which of the following is a tool that helps you anonymize your Internet browsing?
- The onion router (TOR)
Gateway
- The point on a network that connects all of the devices together at a central point or bridges two networks - This address is required for a private network to access a public network. - Typically the first or last IP address assigned within an available range.
Punchdown tool
- The required tool used to attach network wiring to a punchdown block.
Dial-up
- The service whereby a computer terminal can use the telephone to initiate and effect communication with a computer. - Connects a phone line to a modem to provide a rather slow internet connection. - Data transfer rates can be 28.8, 33.3, 56 Kbps based on compression rates. - Compression standards: V.24, V.32bis, V.34, V.42, V.44, V.90, and V.92. - Can be used over any telephone line, but not simultaneous to phone usage.
Subnet Mask
- This network setting dictates which portion of the IP address is available within a network addressing schematic.
Crimper
- Tool used to attach RJ-45 or RJ-11 connections to ethernet cabling by use of closing force.
Line of sight wireless internet service
- Type of internet service that would require a device to point directly to an internet providers tower without anything blocking its path. - Could be susceptible to interference due to disturbance of path by weather conditions.
SNMP (Simple Network Management Protocol)
- UDP 161, 162 - Part of the TCP/IP suite, this protocol shares information devices on a network for management purposes.
802.11g
- Uses 2.4-GHz band and either the OFDM or DSSS transmission method - 54 Mbps - 300 ft maximum range - 11 total operating channels, 3 non-overlapped - Compatible with other wireless networking standard which also operates at the same frequency.
802.11n
- Uses the 2.4-GHz and/or 5.75-GHz band and the OFDM transmission method - 150, 300 or 600 Mbps depending on network configuration - 1200 ft maximum range - Compatible with other wireless networking standards operating at 2.4-GHz and 5.75-GHz depending on specifications of the hardware
802.11a
- Uses the 5.75-GHz band and the OFDM transmission method - 54 Mbps - 150 ft maximum range - 23 total operating channels, 12 non overlapped
When choosing a distribution of Linux, you should consider:
- Which distributions are supported by the software you need to run - The maintenance cycle of the distribution - Which management tools are provided by the distribution - Whether or not the distribution is under active development - If you need support on the distribution itself
Which of the following is provided by a graphical interface that isn't normally provided to a non graphical interface?
- Windows - Menus - Popups - Desktop
T568A
- Wiring standards used for configuring twisted pair networking cable with RJ-45 connections based on a specified color order of the individual wires. - The color order for this standard is as follows: green-white, green, orange-white, blue, blue-white, orange, brown-white, brown
T568B
- Wiring standards used for configuring twisted pair networking cable with RJ-45 connections based on a specified color order of the individual wires. - The color order for this standard is as follows: orange-white, orange, green-white, blue, blue-white, green, brown-white, brown - This particular scheme is the accepted standard.
Methods used to ensure high availability
- eliminate single points of failure - design for reliability - detect failures as they occur
Two components that provide the ability to implement a firewall include:
- iptables - gufw
stack frame use
- passed arguments, if any, are pushed on the stack. - the subroutine is called, causing the subroutine return address to be pushed on the stack. - as the subroutine begins to execute, EBP is pushed on the stack - EBP is set equal to ESP. From this point on, EBP acts as a base reference for all of the subroutine parameters - If there are local variables, ESP is decremented to reserve space for the variables on the stack - If any registers need to be saved, they are pushed on the stack (this method is used frequently with API)
Queueing Delay
- time waiting at output link for transmission - depends on congestion level of router
In graphical mode, you can get to a shell by running which applications?
- xterm - terminal
Which package manager is used in Fedora, a Red Hat derived system?
- yum
MAC address
A 12-character string that uniquely identifies a network node. The manufacturer hard codes the MAC address into the NIC. This address is composed of the block ID and device ID.
Message-Digest Algorithm 5 (MD5)
A 128-bit key hash used to provide integrity of files and messages.
BRI (Basic Rate Interface)
A BRI circuit contains two 64-kbps B channels and one 16-kbps D channel. Although such a circuit can carry two simultaneous voice conversations, the two B channels can be logically bonded together into a single virtual circuit (by using PPP's multilink interface feature) to offer a 128-kbps data path.
Trusted Computer System Evaluation Criteria (TCSEC)
A DoD standard that sets basic requirements for assessing the effectiveness of computer security access policies. Also known as The Orange Book.
How do you describe the Command Line Interface?
A GUI is sometimes called a WIMP interface: Windows, Icons, Menus, Pointer
Wireless Local Area Network (WLAN)
A LAN connected using wireless protocols. For example, a network in a café.
SONET (Synchronous Optical Network)
A Layer 1 technology that uses fiber-optic cabling as its media. Because SONET is a Layer 1 technology, it an be used to transport various Layer 2 encapsulation types, such as TM. Also, because SONET uses fiber-optic cabling, it offers high data rates, typically in the 155 Mbps-10 Gbps range, and long-distance limitations, typically in the 20 km-250 km range.
Frame Relay
A Layer 2 WAN technology that interconnects sites using virtual circuits. These virtual circuits are identified by locally significant data-link connection identifiers (DLCI).
ATM (Asynchronous Transfer Mode)
A Layer 2 WAN technology that interconnects sites using virtual circuits. These virtual circuits are identified by a pair of numbers, called the VPI/VCI pair. A virtual path identifier (VPI) identifies a logical path, which can contain multiple virtual circuits. A virtual circuit identifier (VCI) identifies the unique logical circuit within a virtual path.
RRAS (Microsoft Routing and Remote Access Server)
A Microsoft Windows Server ® feature that allows Microsoft Windows ® clients to remotely access a Microsoft Windows network.
tracert command
A Microsoft Windows ® -based command that displays every router hop along the path from a source host to a destination host on an IP network. Information about a router hop can include such information as the IP address of the router hop and the round-trip delay of that router hop.
ipconfig command
A Microsoft Windows ® command that can be used to display IP address configuration parameters on a PC. Additionally, if DHCP is used by the PC, the ipconfig command can be used to release and renew a DHCP lease, which is often useful during troubleshooting.
MS-CHAP (Microsoft Challenge-Handshake Authentication Protocol)
A Microsoft-enhanced version of CHAP, offering a collection of additional features not present with PAP or CHAP, including two-way authentication.
fragmentation
A Network layer service that subdivides segments it receives from the Transport layer into smaller packets.
POTS (plain old telephone service)
A POTS connection connects a customer device (such as a telephone) to the public switched telephone network (PSTN).
PRI (primary rate interface)
A PRI circuit is an ISDN circuit built on a T1 or E1 circuit. Recall that a T1 circuit has 24 channels. Therefore, if a PRI circuit is built on aT1 circuit, the ISDN circuit has 23 B channels and a one 64 kbps D channel. The24th channel in the T1 circuit is used as the ISDN D channel (that is, the channel used to carry the Q.921 and Q.931 signaling protocols, which are used to set up, maintain, and tear down connections).
RS-232 (Recommended Standard 232)
A Physical layer standard for serial communications, as defined by EIA/TIA.
TACACS+ (Terminal Access Controller Access-Control System Plus)
A TCP-based protocol used to communicate with a AAA server. encrypts an entire authentication packet rather than just the password. offers authentication features, but they are not as robust as the accounting features found in RADIUS. is a Cisco-proprietary protocol.
traceroute command
A UNIX command that display every router hop along the path from a source host to a destination host on an IP network. Information about the router hop can include the IP address of the router hop and the round-trip delay of that router hop.
ITU (International Telecommunication Union)
A United Nations agency that regulates international telecommunications and provides developing countries with technical expertise and equipment to advance their technological bases.
L2F (Layer 2 Forwarding)
A VPN protocol designed (by Cisco Systems ® ) with the intent of providing a tunneling protocol for PPP. Like L2TP, L2F lacks native security features.
L2TP (Layer 2 Tunneling Protocol)
A VPN protocol that lacks security features, such as encryption. However, it can still be used for a secure VPN connection if it is combined with another protocol that provides encryption.
MPLS (Multiprotocol Label Switching)
A WAN technology popular among service providers. MPLS performs labels switching to forward traffic within an MPLS cloud by inserting a 32-bit header (which contains a 20-bit label) between a frame's Layer 2 and Layer 3 headers and making forwarding decisions based on the label within an MPLS header.
IBSS (Independent Basic Service Set)
A WLAN can be created without the use of an AP. Such a configuration, called an IBSS, is said to work in an ad-hoc fashion. An ad-hoc WLAN is useful for temporary connections between wireless devices. For example, you might temporarily interconnect two laptop computers to transfer a few files.
robocopy (robust file copy)
A Windows command that is similar to and more powerful than the xcopy command, used to copy files and folders. -used to copy a lot of files and folders to a lot of different servers to a lot of different network connections. -able to resume a copy in case a session or connection is lost for whatever reason. -robocopy /s is used also for subdirectories
Towers of Hanoi
A backup rotation scheme based on the mathematics of the Towers of Hanoi puzzle. Uses three backup sets. For example, the first tape is used every second day, the second tape is used every fourth day, and the third tape is used every eighth day.
10 tape rotation
A backup rotation scheme in which ten backup tapes are used over the course of two weeks.
grandfather-father-son
A backup rotation scheme in which three sets of backup tapes must be defined—usually they are daily, weekly, and monthly, which correspond to son, father, and grandfather.
braiding
A braided metal shielding used to insulate some types of coaxial cable.
Denial of Service (DoS)
A broad term given to many different types of network attacks that attempt to make computer resources unavailable.
open
A broken strand of copper that prevents current from flowing through a circuit.
CO (central office)
A building containing a telephone company's telephone switching equipment is referred to as a central office (CO). COs are categorized into five hierarchical classes. A Class 1 CO is a long-distance office serving a regional area. A Class 2 CO is a second-level long-distance office (that is, it is subordinate to a Class 1 office). A Class 3 CO is a third-level long-distance office. A Class 4 CO is a fourth-level long-distance office, which provides telephone subscribers access to a live operator. A Class 5 CO is at the bottom of the five-layer hierarchy and physically connects to customer devices in a local area.
ISP (internet service provider )
A business that provides organizations and individuals with Internet access and often, other services, such as e-mail and Web hosting.
one-time pad
A cipher that encrypts plaintext with a secret random key that is the same length as the plaintext.
symmetric key algorithm
A class of cipher that uses identical or closely related keys for encryption and decryption.
special hazard protection system
A clean agent sprinkler system such as FM-200 used in server rooms.
Kerberos
A client-server authentication protocol that supports mutual authentication between a client and a server. Kerberos uses the concept of a trusted third party (a key distribution center ) that hands out tickets to be used instead of a username and password combination.
Platform as a Service (PaaS)
A cloud computing service that provides various software solutions to organizations especially the ability to develop applications without the cost or administration of a physical platform.
Software as a Service (SaaS)
A cloud computing service where users access applications over the Internet that are provided by a third party.
BNC (Bayonet Neill-Concelman, or British Naval Connector)
A coaxial cable connector type that uses a twist-and-lock (or bayonet) style of coupling, generally made of nickel plated brass, named after its coupling method and its inventors
baseline
A collection of data portraying the characteristics of a network under normal operating conditions. Data collected while troubleshooting can then be contrasted against baseline data.
ISO (International Organization for Standardization)
A collection of standards organizations representing 157 countries with headquarters located in Geneva, Switzerland.
PPP (Point-to-Point Protocol)
A common Layer 2 protocol offering features such as multilink interface, looped link detection, error detection, and authentication.
X.509
A common PKI standard developed by the ITU-T that incorporates the single sign-on authentication method.
CRAM-MD5 (Challenge-Response Authentication Mechanism Message Digest 5)
A common variant of HMAC frequently used in e-mail systems. Like CHAP, this only performs one-way authentication (the server authenticates the client).
nonbroadcast point-to-multipoint transmission
A communications arrangement in which a single transmitter issues signals to multiple, defined recipients.
point-to-multipoint
A communications arrangement in which one transmitter issues signals to multiple receivers. The receivers may be undefined, as in a broadcast transmission, or defined, as in a nonbroadcast transmission.
Blended Threat
A computer network attack that seeks to maximize the severity of damage and speed of contagion by combining methods, for example using characteristics of both viruses and worms, while also taking advantage of vulnerabilities in computers, networks, or other physical systems. An attack using a blended approach might send a virus via an e-mail attachment, along with a Trojan horse embedded in an HTML file that will cause damage to the recipient computer. EX. Nimba, CodeRed, Bugbear.
Server
A computer that awaits and responds to requests for data; serves up resources to a network. For example, E-mail access provided by an E-mail server, web pages provided by a web server, or data files available on a file server.
host
A computer that enables resource sharing by other computers on the same network
Web server
A computer that manages Web site services, such as supplying a Web page to multiple users on demand.
workstation
A computer that runs a desktop operating system and connects to a network.
stand-alone computer
A computer that uses applications and data only from its local disks and that is not connected to a network.
local loop
A connection between a customer premise and a local telephone company's central office.
virtual private network (VPN)
A connection between two or more computers or devices that are not on the same private network.
session
A connection for data exchange between two parties. The term session may be used in the context of Web, remote access, or terminal and mainframe communications, for example.
circuit-switched connection
A connection that is brought up on an as-needed basis. This connection is analogous to phone call, where you pick up a phone, dial a number, and a connection is established based on the number you dial.
Smart Card
A credit-card-sized device with embedded microelectronics circuitry for storing information about an individual. This is not a key or token, as used in the remote access authentication process.
terminal
A device with little (if any) of its own processing or disk capacity that depends on a host to supply it with applications and data-processing services.
DCE (data circuit-terminating equipment)
A device, such as a multiplexer or modem, that processes signals. It supplies a clock signal to synchronize transmission between DTE and DCE.
E3
A digital circuit in the same E-carrier family of standards as an E1. An E3 circuit's available bandwidth is 34.4 Mbps.
channel
A distinct communication path between two or more nodes, much like a lane is a distinct transportation path on a freeway. may be separated either logically (as in multiplexing) or physically (as when they are carried by separate wires).
electromagnetic interference (EMI)
A disturbance that can affect electrical circuits,devices, and cables due to electromagnetic conduction or radiation.
Packet Filtering
A feature incorporated into routers to limit the flow of information based on pre-determined communications such as source, destination, or type of service being provided by the network; let the administrator limit protocol specific traffic to one network segment, isolate email domains, and perform many other traffic control functions. Packet filtering as it applies to firewalls inspects each packet passing through the firewall and accepts or rejects it based on rules. Two types of packet filtering include stateless packet filters and stateful packet inspection (SPI).
Security Incident
An adverse event in a computer system or the threat of such an event occurring.
application firewall
A firewall that can control the traffic associated with specific applications. Works all the way up to the Application Layer of the OSI model.
Cat 3 (Category 3)
A form of UTP that contains four wire pairs and can carry up to 10 Mbps, with a possible bandwidth of 16 MHz.
Cat 4 (Category 4)
A form of UTP that contains four wire pairs and can support up to 16- Mbps throughput. It may be used for 16-Mbps token ring or 10-Mbps Ethernet networks.
Cat 5 (Category 5)
A form of UTP that contains four wire pairs and supports up to 100-Mbps throughput and a 100-MHz signal rate.
Data Driven Attack
A form of attack that is encoded in seemingly innocuous data which is executed by a user pr a process to implement an attack; concern for firewalls, since it may get through the firewall in data form and launch an attack against a system behind the firewall.
man-in-the-middle (MITM) attack
A form of eavesdropping that intercepts all data between a client and a server, relaying that information back and forth. Examples include: Wi-Fi Eavesdropping, Email Hijacking, IP Spoofing Attacks, IP Spoofing Attacks, HTTPS Spoofing, SSL (Secure Socket Layer) Stripping, Session Hijacking, ARP (Address Resolution Protocol) Spoofing, Man-in-the-Browser
baseband
A form of transmission in which digital signals are sent through direct current pulses applied to a wire. This direct current requires exclusive use of the wire's capacity, so this systems can transmit only one signal, or one channel, at a time.
Broadband
A form of transmission in which signals are modulated as radiofrequency analog pulses with different frequency ranges. Also, the general term used to refer to high-speed network connections; typical for connections in excess of 1 Megabit per second (Mbps) to be so named
multiplexing
A form of transmission that allows multiple signals to travel simultaneously over one medium.
Partial-mesh Topology
A hybrid of a hub-and-spoke topology and a full-mesh topology. A partial-mesh can be designed to provide an optimal route between selected sites, while avoiding the expense of interconnecting every site to every other site.
IDF (intermediate distribution frame)
A junction point between the MDF and concentrations of fewer connections—for example, those that terminate in a telecommunications closet.
RFI (radiofrequency interference)
A kind of interference that may be generated by broadcast signals from radio or TV towers.
Linear Bus Topology
A linear bus topology consists of a main run of cable with a terminator at each end. All nodes (file server,workstations, and peripherals) are connected to the linear cable.(uses ethernet & local talk network) pros - easy to connect peripherals - requires less cable than star topology cons - entire network shuts down if there is a break in the main cable - hard to find the problem - need terminators at each end - not for a large building
certificate revocation list (CRL)
A list of certificates no longer valid or that have been revoked by the issuer.
ACL (access control list)
A list of permissions attached to an object. They specify what level of access a user, users, or groups have to an object. When dealing with firewalls, an ACL is a set of rules that apply to a list of network names, IP addresses. and port numbers.
decibel (dB) loss
A loss of signal power. If a transmission's dB loss is too great, the transmission cannot be properly interpreted by the intended recipient.
Trojan Horse
A malicious or harmful code contained inside apparently harmless programming or data in such a way that it can get control and do its chosen from of damage, such as ruining the file allocation table on your hard disk
hash function
A mathematical procedure that converts a variable-sized amount of data into a smaller block of data.
amplitude
A measure of a signal's strength.
checksum
A method of error checking that determines if the contents of an arriving data unit match the contents of the data unit sent by the source.
penetration testing
A method of evaluating the security of a system by simulating one or more attacks on that system.
flow control
A method of gauging the appropriate rate of data transmission based on how fast the recipient can accept data.
statistical multiplexing
A method of multiplexing in which each node on a network is assigned a separate time slot for transmission, based on the node's priority and need.
TDM (time division multiplexing)
A method of multiplexing that assigns a time slot in the flow of communications to every node on the network and, in that time slot, carries data from that node.
MAC filtering
A method used to filter out which computers can access the wireless network; the WAP does this by consulting a list of MAC addresses that have been previously entered. - Feature of a wireless router which permits access based upon hardware address provided. - Can be set to allow/block specified systems.
Graphical Processing Unit (GPU)
A microprocessor designed to handle graphics operations.
OSI (Open Systems Interconnection) model
A model for understanding and developing computer-to-computer communication developed in the 1980s by ISO. It divides networking functions among seven layers: Physical, Data Link, Network, Transport, Session,Presentation, and Application.
AM (amplitude modulation)
A modulation technique in which the amplitude of the carrier signal is modified by the application of a data signal.
behavior-based monitoring
A monitoring system that looks at the previous behavior of applications, executables, and/or the operating system and compares that to current activity on the system.
WDM (wavelength division multiplexing)
A multiplexing technique in which each signal on a fiber-optic cable is assigned a different wavelength, which equates to its own subchannel. Each wavelength is modulated with a data signal. In this manner, multiple signals can be simultaneously transmitted in the same direction over a length of fiber.
DWDM (dense wavelength division multiplexing)
A multiplexing technique used over single-mode or multimode fiber-optic cable in which each signal is assigned a different wavelength for its carrier wave.
hot site
A near duplicate of the original site of the organization, complete with phones, computers, networking devices, and full backups.
Intranet
A network based on an internet belonging to an organization, usually a corporation, accessible only by the organization's members, employees, or others with authorization. Its Web sites look and act just like any other Web site, but the firewall surrounding it fends off unauthorized access.
Computer Network
A network is a system that sends and receives data and messages enabling two or more computers to communicate with each other.
populated segment
A network segment that contains end nodes, such as workstations. punch-down block A panel of data receptors into which twisted pair wire is inserted, or punched down, to complete a circuit.
unpopulated segment
A network segment that does not contain end nodes, such as workstations. Also called link segments.
Wide Area Network (WAN)
A network which connects networks in different geographical locations. For example, the school network.
Nmap
A network-vulnerability scanner.
Remote Access Service (RAS)
A networking service that allows incoming connections from remote dial-in clients. It is also used with VPNs.
token ring
A networking technology developed by IBM in the 1980s. It relies upon direct links between nodes and a ring topology, using tokens to allow nodes to transmit data.
RIR (Regional Internet Registry)
A not-for-profit agency that manages the distribution of IP addresses to private and public entities.
Network
A number of devices connected together to allow them to communicate.
frame
A package for data that includes not only the raw data, or "payload," but also the sender's and recipient's addressing and control information. Frames are generated at the Data Link layer of the OSI model and are issued to the network at the Physical layer.
Subnet
A part of a network in which all devices share the same network portion of their IP address. A logical subset of a larger network, created by an administrator to improve network performance or to provide security.
cryptanalysis attack
A password attack uses a considerable set of precalculated encrypted passwords located in a lookup table.
brute force attack
A password attack where every possible password is attempted.
remote user
A person working on a computer on a different network or in a different geographical location from the LAN's server.
hardware security module (HSM)
A physical device that deals with the encryption of authentication processes, digital signings, and payment processes.
Storage Device
A piece of computer equipment on which information can be stored.
Router
A piece of hardware responsible for transmitting data between networks.
NIC (Network Interface Controller/Card)
A piece of hardware that allows a computer to connect to a network
butt set (or lineman's handset)
A piece of test equipment typically used by telephone technicians. The clips on a butt set can connect to the tip and ring wires on a punch-down block (for example, a 66 block or a 110 block) connecting to a telephone. This allows the technician to check the line (for example, to determine if dial tone is present on the line and determine if a call can be placed from the line).
ping flood
A ping flood, also known as an ICMP flood attack, is when an attacker attempts to send many ICMP echo request packets (pings) to a host in an attempt to use up all available bandwidth.
Contingency Plan
A plan for emergency response, back up operations, and post-disaster recovery maintained by an activity as a part of its security program that will ensure the availability of critical resources and facilitate the continuity of operations in an emergency situation
Disaster recovery plan
A plan that details the policies and procedures concerning the recovery and/or continuation of an organization's technology infrastructure. Includes activities the organization takes to assess, salvage, repair and restore damaged facilities or assets
Easter egg
A platonic extra added to an OS or application as a sort of joke; the harmless cousin of the logic bomb.
phase
A point or stage in a wave's progress over time.
User Account Control (UAC)
A security component of Windows Vista that keeps every user (besides the actual Administrator account) in standard user mode instead of as an administrator with full administrative rights—even if they are a member of the administrators group.
Wi-Fi Protected Access (WPA)
A security protocol created by the Wi-Fi Alliance to secure wireless computer networks, more secure than WEP.
WEP (Wired Equivalent Privacy)
A security standard for WLANs. With WEP, an AP is configured with a static WEP key. Wireless clients needing to associate with an AP are configured with an identical key (making this a preshared key [PSK] approach to security). The IEEE 802.11 standard specifies a 40-bit WEP key, which is considered to be a relatively weak security measure. - Original wireless network encrypted security associated with 802.11 in 1997. - It is designed to emulate the same security as a wired network infrastructure. - Uses the same pre-shared key on the network and connecting devices as its form of securing a connection. - The pre-shared key is also used for encryption. - Not the most secure or recommended method.
remote access server
A server that runs communications services that enable remote users to log on to a network. Also known as an access server.
DHCP (Dynamic Host Configuration Protocol)
A service used to dynamically assign TCP/IP configuration information to clients. DHCP is often used to assign IP addresses, subnet masks, default gateways, DNS server addresses, and much more.
AWG (American Wire Gauge)
A standard rating that indicates the diameter of a wire, such as the conducting core of a coaxial cable.
incident response
A set of procedures that an investigator goes by when examining a computer security incident.
API (application programming interface)
A set of routines, protocols, and tools for building software applications. APIs specify how software components should interact, such as what data to use and what actions should be taken.
Spike
A short transient in voltage that can be due to a short circuit, tripped circuit breaker, power outage, or lightning strike.
ferrule
A short tube within a fiber-optic cable connector that encircles the fiber strand and keeps it properly aligned.
analog
A signal that uses variable voltage to create continuous waves, resulting in an inexact transmission.
UDP flood attack
A similar attack to the Fraggle. It uses the connectionless User Datagram Protocol. It is enticing to attackers because it does not require a synchronization process.
cross talk
A type of interference caused by signals traveling on nearby wire pairs infringing on another pair's signal.
demilitarized zone (DMZ)
A special area of the network (sometimes referred to as a subnetwork) that houses servers that host information accessed by clients or other networks on the Internet.
token
A special control frame that indicates to the rest of the network that a particular node has the right to transmit data.
file server
A specialized server that enables clients to share applications and data across the network.
Open Vulnerability and Assessment Language (OVAL)
A standard and a programming language designed to standardize the transfer of secure public information across networks and the Internet utilizing any security tools and services available.
SSID (Service Set Identifier)
A string of characters that identify a WLAN. APs participating in the same WLAN can be configured with identical SSIDs. Required to connect to a wireless network. An SSID shared among multiple APs is called an extended service set identifier (ESSID).
change management
A structured way of changing the state of a computer system, network, or IT procedure.
Hash
A summary of a file or message. It is generated to verify the integrity of the file or message.
syslog
A syslog-logging solution consists of two primary components: syslog servers, which receive and store log messages sent from syslog clients, and syslog clients, which can be a variety of network devices that send logging information to a syslog server.
Firewall
A system designed to prevent unauthorized access to or from a private network; can be implemented in both hardware and software, or a combination if both; frequently used to prevent unauthorized Internet users from accessing private networks connected to the Internet, especially intranets. All messages entering or leaving the intranet pass through this, which examines each message and blacks those that do not meet the specified security criteria
modulation
A technique for formatting signals in which one property of a simple carrier wave is modified by the addition of a data signal during transmission.
telco
A telephone company. Some countries have government-maintained telcos, while other countries have multiple telcos that compete with one another.
Distributed Tool
A tool that can be distributed to multiple hosts, which can then be coordinated to anonymously perform an attack on the target host simultaneously after some time delay
Logical Topology
A topology that describes the data-flow and IP addressing scheme of a network. The actual traffic flow of a network determines the network's Logical topology.
Point-to-Point Tunneling Protocol (PPTP)
A tunneling protocol used to support VPNs. Generally includes security mechanisms, and no additional software or protocols need to be loaded. A VPN device or server must have inbound port 1723 open to enable incoming PPTP connections.
Cat 6 (Category 6)
A twisted pair cable that contains four wire pairs, each wrapped in foil insulation. Additional foil insulation covers the bundle of wire pairs, and a fire-resistant plastic sheath covers the second foil layer. The foil insulation provides excellent resistance to cross talk and enables it to support a signaling rate of 250 MHz.
crossover cable
A twisted pair patch cable in which the termination locations of the transmit and receive wires on one end of the cable are reversed. Networking cable which is configured to use the T568A standard at one end and T568B at the other.
straight-through cable
A twisted pair patch cable in which the wire terminations in both connectors follow the same scheme.
3-leg perimeter
A type of DMZ where a firewall has three legs that connect to the LAN, Internet, and the DMZ.
back-to-back perimeter
A type of DMZ where the DMZ is located between the LAN and the Internet.
Fraggle
A type of DoS similar to the Smurf attack, but the traffic sent is UDP echo traffic as opposed to ICMP echo traffic.
Ping of Death (POD)
A type of DoS that sends an oversized and/or malformed packet to another computer.
Smurf attack
A type of DoS that sends large amounts of ICMP echoes, broadcasting the ICMP echo requests to every computer on its network or subnetwork. The header of the ICMP echo requests will have a spoofed IP address. That IP address is the target of the Smurf attack. Every computer that replies to the ICMP echo requests will do so to the spoofed IP.
RG-8
A type of coaxial cable characterized by a 50-ohm impedance and a 10 AWG core.
RG-58
A type of coaxial cable characterized by a 50-ohm impedance and a 24 AWG core.
RG-59
A type of coaxial cable characterized by a 75-ohm impedance and a 20 or 22 AWG core, usually made of braided copper. Less expensive but suffering greater attenuation than the more common RG-6 coax, it is used for relatively short connections.
RG-6
A type of coaxial cable with an impedance of 75 ohms and that contains an 18 AWG core conductor. It is used for television, satellite, and broadband cable connections.
DB-9 connector
A type of connector with nine pins that's commonly used in serial communication that conforms to the RS-232 standard.
MMF (multimode fiber)
A type of fiber-optic cable that contains a core with a diameter between 50 and 100 microns, through which many pulses of light generated by a lightemitting diode (LED) travel at different angles.
SMF (single-mode fiber)
A type of fiber-optic cable with a narrow core that carries light pulses along a single path data from one end of the cable to the other end. Data can be transmitted faster and for longer distances. However, it is expensive.
FDM (frequency division multiplexing)
A type of multiplexing that assigns a unique frequency band to each communications subchannel. Signals are modulated with different carrier frequencies, then multiplexed to simultaneously travel over a single channel.
Vishing
A type of phishing attack that makes use of telephones and VoIP.
spear phishing
A type of phishing attack that targets particular individuals.
Tailgating
A type of piggybacking where an unauthorized person follows an authorized person into a secure area, without the authorized person's consent.
IV attack
A type of related-key attack, which is when an attacker observes the operation of a cipher using several different keys, and finding a mathematical relationship between them, allowing the attacker to ultimately decipher data.
Rootkit
A type of software designed to gain administrator-level control over a computer system without being detected; captures passwords and message traffic to and from a computer. A collection of tools that allows a hacker to provide a backdoor into a system, collect information on other systems on the network, mask the fact that the system is compromised, and much more
host-based intrusion detection system (HIDS)
A type of system loaded on an individual computer; it analyzes and monitors what happens inside that computer, for example, if any changes have been made to file integrity.
Half Duplex
A type of transmission in which signals may travel in both directions over a medium, but in only one direction at a time. The only advantage that Half-Duplex would have is a single lane is cheaper than a double lane.
Simplex
A type of transmission in which signals may travel in only one direction over a medium. A good example would be your keyboard to your CPU.
cross-site scripting (XSS)
A type of vulnerability found in web applications used with session hijacking.
SA (Security Association)
An agreement between the two IPsec peers about the cryptographic parameters to be used in an ISAKMP session.
network address
A unique identifying number for a network node that follows a hierarchical addressing scheme and can be assigned through operating system software.
PDU (protocol data unit)
A unit of data at any layer of the OSI model.
Retro-virus
A virus that waits until all possible backup media are infected too, so that it is not possible to restore the system to an uninfected state.
patch panel
A wall-mounted panel of data receptors into which cross-connect patch cables from the punch-down block are inserted.
Cloud computing
A way of offering on-demand services that extend the capabilities of a person's computer or an organization's network.
Digital Signature
A way to verify that an email message is really from the person who supposedly sent it and that it hasn't been changed. You may have received emails that have a block of letters and numbers at the bottom of the message - this mathematical algorithm is used to combine the information in the message. The result is a random-looking string of letters and numbers.
Vulnerability
A weakness in automated system security procedures, technical controls, environmental controls, administrative controls, internal controls, etc., that could be used as an entry point to gain unauthorized access to information or disrupt critical processing
Countermeasures
Action, device, procedure, technique or other measure that reduces the vulnerability of an information system
Execute
Actions occur dependent on the instruction
CSU/DSU (channel service unit/data service unit)
Acts as a digital modem, which terminates a digital circuit (for example, a T1 or an E1 circuit).
Sound Card
Additional card fitted into a PCI slot to output sound.
Networking advantages
Allows for sharing of files, Allows for peripheral devices such as printers to be shared, Allows people to communicate easily, Allowing people to use the same account on multiple devices
FHSS (Frequency-Hopping Spread Spectrum)
Allows the participants in a communication to hop between predetermined frequencies. Security is enhanced, because the participants can predict the next frequency to be used while a third party cannot easily predict the next frequency. FHSS can also provision extra bandwidth by simultaneously using more than one frequency.
client-to-site VPN
Also known as a remote access VPN, a client-to-site VPN interconnects a remote user with a site, as an alternative to dial-up or ISDN connectivity, at a reduced cost.
active interception
Also known as active inception in the CompTIA 2008 Security+ objectives; normally includes a computer placed between the sender and the receiver in an effort to capture and possibly modify information.
open mail relay
Also known as an SMTP open relay; it enables anyone on the Internet to send e-mail through an SMTP server.
failover clusters
Also known as high-availability clusters, these are designed so that a secondary server can take over in the case that the primary one fails, with limited or no downtime.
anomaly based monitoring
Also known as statistical anomaly based; establishes a performance baseline based on a set of normal network traffic evaluations.
directory traversal
Also known as the ../ (dot dot slash) attack is a method of accessing unauthorized parent directories.
MDF (main distribution frame)
Also known as the main cross-connect, the first point of interconnection between an organization's LAN or WAN and a service provider's facility.
marking
Alters bits within a frame, cell, or packet to indicate how a network should treat that traffic. Marking alone does not change how a network treats a packet. Other tools (such as queuing tools) can, however, reference markings and make decisions (for example, forwarding decisions or dropping decisions) based on those markings.
ANSI
American National Standards Institute
Thinnet
An IEEE Physical layer standard for achieving 10-Mbps throughput over coaxial copper cable. It is also known as 10Base-2. Its maximum segment length is 185 meters, and it relies on a bus topology.
Thicknet
An IEEE Physical layer standard for achieving a maximum of 10-Mbps throughput over coaxial copper cable. It is also known as 10Base-5. Its maximum segment length is 500 meters, and it relies on a bus topology.
S/MIME
An IETF standard that provides cryptographic security for electronic messaging such as e-mail.
AH (Authentication Header)
An IPsec protocol that provides authentication and integrity services. However, it does not provide encryption services.
ESP (Encapsulating Security Payload)
An IPsec protocol that provides authentication, integrity, and encryption services.
Internet content filter
An Internet content filter, or simply a content filter, is usually applied as software at the Application Layer and can filter out various types of Internet activities such as websites accessed, e-mail, instant messaging, and more. It is used most often to disallow access to inappropriate web material.
mandatory access control (MAC)
An access control policy determined by a computer system, not by a user or owner, as it is in DAC. restricts the actions that a subject can perform on an object. A subject can be a user or a process. An object can be a file, a port, or an input/output device. An authorization rule enforces whether or not a subject can access the object
discretionary access control (DAC)
An access control policy generally determined by the owner.
role-based access control (RBAC)
An access model that works with sets of permissions, instead of individual permissions that are label-based. So roles are created for various job functions in an organization.
default account
An account installed by default on a device or within an operating system with a default set of user credentials that are usually insecure.
Distributed Denial of Service (DDoS)
An attack in which a group of compromised systems attack a single target, causing a DoS to occur at that host, usually using a botnet.
replay attack
An attack in which valid data transmission is maliciously or fraudulently repeated or delayed.
MAC flooding
An attack that sends numerous packets to a switch, each of which has a different source MAC address, in an attempt to use up the memory on the switch. If this is successful, the switch will change state to failopen mode.
Dictionary Attack
An attack that uses a brute-force technique of successively trying all the words in some large, exhaustive list
fork bomb
An attack that works by creating a large number of processes quickly to saturate the available processing space in the computer's operating system. It is a type of wabbit.
Probe
An attempt to gather information about an information system for apparent purpose of circumventing its security controls
RADIUS (Remote Authentication Dial-In User Service)
An authentication and accounting system used by many Internet Service Providers (ISPs). A UDP-based protocol used to communicate with a AAA server. does not encrypt an entire authentication packet, but only the password. However, offers more robust accounting features than TACACS+. This is a standards-based protocol, while TACACS+ is a Cisco-proprietary protocol.
Challenge-Handshake Authentication Protocol (CHAP)
An authentication scheme used by the Point-to-Point Protocol (PPP) that is the standard for dial-up connections.
802.1X
An authentication technology used to connect devices to a LAN or WLAN. It is an example of port-based NAC.
single point of failure
An element, object, or part of a system that, if it fails, will cause the whole system to fail.
Transport-layer Segment
An encapsulated application-layer message with the attached transport layer message.
Faraday cage
An enclosure formed by conducting material or by a mesh of such material; it blocks out external static electric fields and can stop emanations from cell phones and other devices within the cage from leaking out.
secure code review
An in-depth code inspection procedure.
identity proofing
An initial validation of an identity.
WAN Link
An interconnection between two devices in a WAN.
Network Interface Controller (NIC)
An internal piece of hardware that allows a device to connect to a network. This could be wired or wireless.
Data Encryption Standard (DES)
An older type of block cipher selected by the United States federal government back in the 1970s as its encryption standard; due to its weak key, it is now considered deprecated.
CARP (Common Address Redundancy Protocol)
An open-standard variant of HSRP, which provides first-hop router redundancy.
Sag
An unexpected decrease in the amount of voltage provided.
The Linux platform that runs on mobile phones is called:
Android
Fast Ethernet
Another ethernet protocol that has increased speed of transmission that supports 100 Mbps. - more expensive hubs/concentrators/NICs - can only use fiber optics or twisted pair cables
SATA (Serial AT Attachment)
Another high speed serial bus interface for connecting hard drives, solid state drives (SSDs) and CD/DVD drives to the computer.
visibility
Attribute that indicates the procedure's visibility to other modules. Choices are PRIVATE, PUBLIC (default), and EXPORT. If the visibility is EXPORT, the linker places the procedure's name in the export table for segmented executables. EXPORT also enables PUBLIC visibility. (used with the PROC directive)
langType
Attribute that specifies the calling convention (parameter passing convention) such as C, PASCAL, or STDCALL. Overrides the language specified in the .MODEL directive. (used with the PROC directive)
application-level gateway (ALG)
Applies security mechanisms to specific applications, such as FTP and/or BitTorrent. It supports address and port translation and checks whether the type of application traffic is allowed.
DiffServ (Differentiated Services)
As its name suggests, DiffServ differentiates between multiple traffic flows. Specifically, packets are marked, and routers and switches can then make decisions (for example, dropping or forwarding decisions) based on those markings.
asset management
As related to networks, this is a formalized system of tracking network components and managing the lifecycle of those components.
password cracker
Software tool used to recover passwords from hosts or to discover weak passwords.
Adware
Any software application that displays advertising banners while the program's running. Authors may include additional code, which can be viewed thru pop-up windows or a bar that appears on the computer screen. Usually includes code that tracks a user's personal info & passes it on to 3rd parties, w/o the user's authorization or knowledge
Security Posture Assessments (SPA)
Assessments that use baseline reporting and other analyses to discover vulnerabilities and weaknesses in systems and networks.
DNS Spoofing
Assuming the name of another system by either corrupting the name service cache of a victim system, or by compromising a domain name server for a valid domain
Packet Fields
At each layer there is the header field; used for transmission within that layer And a payload field; used within the above layers
Wireless router
Attaches to a wired network and provides access to that wired network for wirelessly attached clients, like a wireless AP(access point). However, a wireless router is configured such that the wired interface that connects to the rest of the network (or to the Internet) is on a different IP network than the wireless clients. Typically, a wireless router performs NATing (network address translation) between these two IP address spaces.
cable modem
Attaches to the same coaxial cable (typically in a residence) that provides television programming. A cable modem can use predetermined frequency ranges to transmit and receive data over that coaxial cable.
Which email attachments are generally SAFE to open?
Attachments contained in a digitally signed email from someone known
social engineering
Attackers sometimes use social techniques (which often leverage people's desire to be helpful) to obtain confidential information. For example, an attacker might pose as a member of an IT department and ask a company employ for their login credentials in order for the "IT staff to test the connection." This type of attack is called social engineering.
port scanner
Software used to decipher which ports are open on a host.
Ethernet cable
Copper wires used to connect devices (EG. Computer to computer, or computer to switch) within a LAN.
Firmware
Software written for embedded systems.
implicit deny
Denies all traffic to a resource unless the users generating that traffic are specifically granted access to the resource. For example, when a device denies all traffic unless a rule is made to open the port associated with the type of traffic desired to be let through.
network intrusion prevention system (NIPS)
Designed to inspect traffic, and based on its configuration or security policy, the system can remove, detain, or redirect malicious traffic.
TDR (time domain reflectometer)
Detects the location of a fault in a copper cable by sending an electric signal down the copper cable and measuring the time required for the signal to bounce back from the cable fault. A TDM can then mathematically calculate the location of the fault.
OTDR (optical time domain reflectometer)
Detects the location of a fault in a fiber cable by sending light down the fiber-optic cable and measuring the time required for the light to bounce back from the cable fault. The OTDM can then mathematically calculate the location of the fault.
Cooling Device
Device that removes heat from the computer to keep the computer components within permissible heat levels.
EIA
Electronic Industries Alliance
fiber-optic cable
Fiber optic cables have a thin strand of glass in the centre that carries the light pulses. Data is transmitted via pulsing light sent from a laser or light-emitting diode (LED) through the central fiber (or fibers). The central strand is encased in glass cladding. The glass cladding may then be surrounded by strengthening wires and a plastic outer sheath. Fiber optic cables are more expensive than electrical cables but have higher bandwidths and can transmit over longer distances.
Permissions
File system permissions control what resources a person can access on the network.
E-mail Attachement
Files sent with e-mails that may contain malware.
security log files
Files that log activity of users. They show who did what and when, plus whether they succeeded or failed in their attempt.
CHKDSK /f
Fixes logical errors on the disk
Web Bugs
HTML elements, often in the form of image tags, that retrieve information from a remote web site. While the image may not be visible to the user, the act of making the request can provide information about the user. These are often embedded in web pages or HTML - enabled e-mail messages.
Redirected bombs
Hackers can use ICMP to change the path information take by sending it a different router.
According to DoD 8570.01-M, the IA (Information Assurance) technical category consists of how many levels?
I, II, & III
In accordance with AR 25-2, whose responsibility is it to ensure all users receive initial and annual IA awareness training?
IASO (Information Assurance Security/Support Officer)
INVOKE syntax
INVOKE procedureName [, argumentList]
baseline reporting
Identification of the security posture of an application, system, or network.
cable certifier
If you are working with existing cable and want to determine its category, or if you simply want to test the supported frequency range (and therefore data throughput) of the cable, you can use a cable certifier.
transmission
In networking, the application of data signals to a medium or the progress of data signals over a medium from one point to another.
Rainbow Tables
In password cracking, a set of precalculated encrypted passwords located in a lookup table.
Encapsulation
In programming: keeping details (like data and procedures) together in one part of a program so that programmers working on other parts of the program don't need to know about them. In networking: the process of wrapping one layer's PDU (protocol data unit) with protocol information so that it can be interpreted by a lower layer.
stateful firewall
Inspects traffic leaving the inside network as it goes out to the Internet. Then, when returning traffic from the same session (as identified by source and destination IP addresses and port numbers) attempts to enter the inside network, the stateful firewall permits that traffic. The process of inspecting traffic to identify unique sessions is called stateful inspection .
DSL (Digital Subscriber Line)
Internet connectivity, unlike cable modem-based service, provides the user with dedicated bandwidth. However, the maximum bandwidth available to it is usually lower than the maximum cable modem rate technologies. Also, the "dedicated bandwidth" is only dedicated between your home and the provider's central office -- the providers offer little or no guarantee of bandwidth all the way across the Internet. A DSL connection uses copper telephone lines but is able to relay data at much higher speeds than modems and does not interfere with telephone use.
Diffie-Hellman (DH) key exchange
Invented in the 1970s, it was the first practical method for establishing a shared secret key over an unprotected communications channel. Provides an electronic exchange method to share the secret key. Secure protocols, such as Secure Sockets Layer (SSL), Transport Layer Security (TLS), Secure Shell (SSH), and Internet Protocol Security (IPsec), use it
Having reviewed DoD Wireless STIG (Ver6, Release 1), Sarah learns she may only utilize SecNet 54 and ______________ for transmitting classified information up to Top Secret.
KOV-26 Talon
Email Bombs
Large quantity of bulk e-mail that overwhelms an e-mail server preventing user access
VPN (virtual private network)
Some VPNs can support secure communication between two sites over an untrusted network (for example, the Internet).
ChKDSK /r
Locates bad sectors and recovers readable information /r Implies /f so /f is redundant to do also
You receive an email at your official Government email address from an individual at the Office of Personnel Management (OPM). The email provides a link to a personnel portal where you must enter your personal information as part of an effort to standardize recordkeeping. What action should you take first?
Look for a digital signature on the email.
BIOS (basic input/output system)
Low level program to handle inputs and output operations from the keyboard and screen
ActiveX is a type of this?
Mobile code
DSSS (Direct Sequence Spread Spectrum)
Modulates data over an entire range of frequencies using a series symbols called chips . A chip is shorter in duration than a bit, meaning that chips are transmitted at a higher rate than the actual data. These chips not only represent encoded data to be transmitted, but also what appears to be random data. Because both parties involved in a DSSS communication know which chips represent actual data and which chips do not, if a third-party intercepted a DSSS transmission, it would be difficult for that party to eavesdrop on the data, because he would not easily know which chips represented valid bits. DSSS is more subject to environmental factors, as opposed to FHSS and OFDN, because it uses of an entire frequency spectrum.
F-type connector
Most common coaxial cable connector which features a screw on attaching mechanism. Used to terminate coaxial cable used for transmitting television and broadband cable signals.
Distributed Applications
Multiple end systems that exchange data with each other
local variable use (C calling convention)
MySub PROC push ebp mov ebp, esp sub esp, 8 ; create locals mov DWORD PTR [ebp - 4], 10 ; x mov DWORD PTR [ebp - 8], 20; y mov esp, ebp ; remove locals from stack pop ebp ret MySub ENDP
distance
NEAR or FAR. Attribute that indicates the type of RET instruction (RET or RETF) generated by the assembler. (used with the PROC directive)
ISAKMP (Internet Security Association and Key Management Protocol)
Negotiates parameters for an IPsec session.
Network Routers
Only work on the network-layer fields of a datagram to move it from the host to the destination across the network
Which server software would you use to create a company directory that you could search and authenticate against?
OpenLDAP (Lightweight Directory Access Protocol)
OC (optical carrier)
Optical networks often use OC levels to indicate bandwidth. As a base reference point, the speed of an OC-1 link is 51.84 Mbps. Other OC levels are multiples of an OC-1. For example, an OC-3 link has three times the bandwidth of an OC-1 link (that is, 3 * 51.84 Mbps = 155.52 Mbps).
Hotfix
Originally, a hotfix was defined as a single problem fixing patch to an individual OS or application that was installed live while the system was up and running, and without a reboot necessary. However, this term has changed over time and varies from vendor to vendor.
Networking disadvantages
Over reliance on technology, Expense of hardware, Risk of viruses and hacking, Specialist skills and expertise are required
What does a distribution provide to add and remove software from the system?
Package manager
output buffer
Packet switches have multiple links attached to them. For each attached link the packet switch has an ______ ______, which stores packets that the router is about to send into that link.
Dropped or Lost Packet
Packet that hits a full queue
service level agreement (SLA)
Part of a service contract where the level of service is formally defined.
66 block
Part of an organization's cross-connect facilities, a type of punch-down block used for many years to terminate telephone circuits. It does not meet Cat 5 or better standards, and so it is infrequently used on data networks.
100 block
Part of an organization's cross-connect facilities, a type of punch-down block designed to terminate Cat 5 or better twisted pair wires.
Tickets
Part of the authentication process used by Kerberos.
Link Layer
Passes frames (link-layer packets) between individual nodes in a network. EX: Ethernet, WiFi
security tokens
Physical devices given to authorized users to help with authentication. These devices might be attached to a keychain or are part of a card system.
Cookie
Pieces of information generated by Web server and stored in the user's computer, ready for future access; embedded in the HTML information flowing back and forth between the user's computer and the servers; were implemented to allow user-side customization of Web information.
Confidentiality
Preventing the disclosure of information to unauthorized persons.
Bootstrap Loader
Program in the BIOS to load the operating system
The implementation of an IA operational baseline will be an incremental process of doing what?
Protecting critical assets
satellite (WAN technology)
Provides WAN access to sites where terrestrial WAN solutions are unavailable. Satellite WAN connections can suffer from long round-trip delay (which can be unacceptable for latency-sensitive applications) and are susceptible to poor weather conditions.
SSL (Secure Sockets Layer)
Provides cryptography and reliability for upper layers (Layers 5-7) of the OSI model. introduced in 1995, it has largely been replaced by Transport Layer Security (TLS). However, recent versions of SSL (for example, SSL 3.3) have been enhanced to be more comparable with TLS. Both SSL and TLS are able to provide secure web browsing via HTTPS.
Underclocking
Reducing the specified performance performance of a processor
TEMPEST
Refers to the investigations of conducted emissions from electrical and mechanical devices, which could be compromising to an organization.
SFC (system file checker)
Scan integrity of all protected system files
AES (Advanced Encryption Standard)
Released in 2001, this typically considered the preferred symmetric encryption algorithm. It is available in 128-bit key, 192-bit key, and 256-bit key versions. - Encryption method utilized in WPA2 - Requires compatible hardware to encrypt
Bots
Remote control agents installed on your system; often controlled remotely vie Internet Relay Chat (IRC)
Thumb drives, memory sticks, and flash drives are examples of
Removable media
DEL
Remove a file from a directory or Disk, also called "erase"
RFC
Request for Comments
TFA (two-factor authentication)
Requires two types of authentication from a user seeking admission to a network. For example, a user might need to know something (for example, a password) and have something (for example, a specific fingerprint that can be checked with a biometric authentication device).
LSR (label switch router)
Resides inside a service provider's MPLS cloud and makes frame forwarding decisions based on labels applied to frames.
Management Controls
Security methods that focus on the management of the computer security system and the management of risk for a system
remote access VPN
See client-to-site VPN . Also known as a remote access VPN, a client-to-site VPN interconnects a remote user with a site, as an alternative to dial-up or ISDN connectivity, at a reduced cost.
fox and hound
See toner probe. a toner probe allows you to place a tone generator at one end of the connection (for example, in someone's office), and use a probe on the punch-down block to audibly detect to which pair of wires the tone generator is connected.
protocol analyzer
Software tool used to capture and analyze packets.
multifactor authentication
Similar to two-factor authentication, it requires two or more types of successful authentication before granting access to a network.
Packets
Small chunks of information that have been carefully formed from larger chunks of information.
Packet
Small, equal sized units of data used to transfer files over the internet, transmitting the identities of the sending and receiving stations, error-control information, and message.
You receive a call on your work phone and you're asked to participate in a phone survey. As part of the survey the caller asks for birth date and address. What type of attack might this be?
Social Engineering
Malware
Software designed to infiltrate a computer system and possibly damage it without the user's knowledge or consent.
Mobile Code
Software modules obtained from remote systems, transferred across a network, and then downloaded and executed on a local system without explicit installation or execution by the recipient, Malicious types of this are designed, employed, distributed, or activated with the intention of compromising the performance or security of information systems and computers, increasing access to those systems disclosing unauthorized information, corrupting information, denying service, or stealing resources.
Smurfing
Software that mounts a denial of service attack by exploiting IP broadcast addressing and ICMP ping packets to cause flooding
toner probe
Sometimes called a fox and hound , a toner probe allows you to place a tone generator at one end of the connection (for example, in someone's office), and use a probe on the punch-down block to audibly detect to which pair of wires the tone generator is connected.
A medium secure password has at least 15 characters and one:
Special character
RAID 5
Striping with Parity. Data is striped across multiple disks; fault tolerant parity data is also written to each disk.
NTLM hash
Successor to the LM hash. A more advanced hash used to store Windows passwords, based off the RC4 algorithm.
NTLM2 hash
Successor to the NTLM hash. Based off the MD5 hashing algorithm.
Total Delay
Sum of nodal, queueing, transmission, and propagation delays
copy /y
Suppresses prompting to confirm you want to overwrite an existing destination file
data loss prevention (DLP)
Systems that are designed to protect data by way of content inspection. They are meant to stop the leakage of confidential data, often concentrating on communications.
standby generator
Systems that turn on automatically within seconds of a power outage.
Wiretapping
Tapping into a network cable in an attempt to eavesdrop on a conversation or steal data.
VLAN hopping
The act of gaining access to traffic on other VLANs that would not normally be accessible by jumping from one VLAN to another.
information security
The act of protecting information from unauthorized access. It usually includes an in-depth plan on how to secure data, computers, and networks.
vulnerability scanning
The act of scanning for weaknesses and susceptibilities in the network and on individual systems.
Wardialing
The act of scanning telephone numbers by dialing them one at a time and adding them to a list, in an attempt to gain access to computer networks.
hot and cold aisles
The aisles in a server room or data center that circulate cold air into the systems and hot air out of them. Usually, the systems and cabinets are supported by a raised floor.
Bandwidth
The amount of data that can be transmitted over a network in a given amount of time.
risk acceptance
The amount of risk an organization is willing to accept. Also known as risk retention.
Performance measure - Latency
The amount of time taken to send and receive a file.
plenum space
The area above the ceiling tile or below the subfloor in a building.
Hoax
The attempt at deceiving people into believing something that is false.
risk assessment
The attempt to determine the amount of threats or hazards that could possibly occur in a given amount of time to your computers and networks.
secure coding concepts
The best practices used during the life cycle of software development.
network perimeter
The border of a computer network, commonly secured by devices such as firewalls and NIDS/NIPS solutions.
Virtualization
The creation of a virtual entity, as opposed to a true or actual entity. A single host can be split up into multiple guests
traffic
The data transmission and processing activity taking place on a computer network at any given time.
Link-layer frame
The datagram from the network layer after the link-layer has attached another link header
account expiration
The date when users' accounts they use to log on to the network expires.
optical loss
The degradation of a light signal on a fiber-optic network.
resources
The devices, data, and data storage space provided by a computer, whether stand-alone or shared.
wavelength
The distance between corresponding points on a wave's cycle. It is inversely proportional to frequency.
Transport layer
The fourth layer of the OSI model. In this layer protocols ensure that data are transferred from point A to point B reliably and without errors. this layer services include flow control, acknowledgment, error correction, segmentation, reassembly, and sequencing. Uses TCP or UDP, to pass segments between layers. Writes destination addresses on segments when passing to the network layer
cladding
The glass or plastic shield around the core of a fiber-optic cable. It reflects light back to the core in patterns that vary depending on the transmission mode. This reflection allows fiber to bend around corners without impairing the light-based signal.
Nonrepudiation
The idea of ensuring that a person or group cannot refute the validity of your proof against them.
risk management
The identification, assessment, and prioritization of risks, and the mitigating and monitoring of those risks.
Zombie
The individual compromised computers in a botnet.
MTU (maximum transmission unit)
The largest data unit a network (for example, Ethernet or token ring) will accept for transmission.
RTT (round trip time)
The length of time it takes for a packet to go from sender to receiver, then back from receiver to sender. It is usually measured in milliseconds.
data bus
The lines on the system bus that the CPU uses to send and receive data.
MAC (Media Access Control) sublayer
The lower sublayer of the Data Link layer (layer 2). The MAC appends the physical address of the destination computer onto the frame.
Physical layer
The lowest, or first, layer of the OSI model. Protocols in this layer generate and detect signals so as to transmit and receive data over a network medium. These protocols also set the data transmission rate and monitor data error rates, but do not provide error correction. Moves the individual bits within the frame from one node to the next. EX: Fiber Optic Cable, Copper Wire
IP (Internet Protocol)
The main delivery system for information over the Internet. A core protocol in the TCP/IP suite that operates in the Network layer of the OSI model and provides information about how and where data should be delivered. IP is the subprotocol that enables TCP/IP to internetwork
transmission media
The means through which data are transmitted and received.
reliability
The measure of how error-free a network transmits packets.
volt
The measurement used to describe the degree of pressure an electrical current exerts on a conductor.
Application-layer Message
The message passed to the transport layer, where a header is added meant for the receiving side of the destination transport layer
due care
The mitigation action that an organization takes to defend against the risks that have been uncovered during due diligence.
DNS poisoning
The modification of name resolution information that should be in a DNS server's cache.
Binary Code
The most basic language a computer understands, it is composed of a series of 0s and 1s (or bits). The computer interprets the code to form numbers, letters, punctuation marks, and symbols. (1 is on, 0 is off)
service set identifier (SSID)
The name of a wireless access point (or network) to which network clients will connect; it is broadcast through the air.
overhead
The nondata information that must accompany data in order for a signal to be properly routed and interpreted by the network.
Packet Loss
The number of packets that are lost or damaged during transmission, sometimes a result of finite queue space
frequency
The number of times that a signal's amplitude changes over a fixed period of time, expressed in cycles per second, or hertz (Hz).
twist ratio
The number of twists per meter or foot in a twisted pair cable.
LANMAN hash
The original hash used to store Windows passwords, known as LM hash, based off the DES algorithm.
sheath
The outer cover, or jacket, of a cable.
SYN-ACK (synchronization-acknowledgment)
The packet a node sends to acknowledge to another node that it has received a SYN request for connection. This packet is the second of three in the three-step process of establishing a connection.
SYN (synchronization)
The packet one node sends to request a connection with another node on the network. This packet is the first of three in the three-step process of establishing a connection.
store-and-forward transmission
The packet switch must receive the entire packet before it can begin to transmit the first bit of the packet onto the outbound link
backbone
The part of a network to which segments and significant shared devices (such as routers, switches, and servers) connect.
ALU (Arithmetic Logic Unit)
The part of the central processing unit that performs arithmetic computations and logical operations.
Physical Topology
The physical arrangement of connections between computers.
topology
The physical layout of computers on a network.
network topology
The physical topology of a network refers to the configuration of cables, computers, and other peripherals.
connectors
The pieces of hardware that connect the wire to the network device, be it a file server, workstation, switch, or printer.
conduit
The pipeline used to contain and protect cabling. It is usually made from metal.
patch management
The planning, testing, implementing, and auditing of patches.
demarcation point (demarc)
The point of division between a telecommunications service carrier's network and a building's internal network. The point in a telephone network where the maintenance responsibility passes from a telephone company to a subscriber (unless the subscriber purchased an inside wiring plan). This demarc is typically a box mounted to the outside of a customer's building (for example, a residence).
Hypervisor
The portion of virtual machine software that allows multiple virtual operating systems (guests) to run at the same time on a single computer.
Risk
The possibility of a malicious attack or other threat causing damage or downtime to a computer system.
Cryptography
The practice and study of hiding information. A way to store and transmit data so only the intended recipient can read or process it
vulnerability management
The practice of finding and mitigating software vulnerabilities in computers and networks.
information assurance
The practice of managing risks that are related to computer hardware and software systems.
due process
The principle that an organization must respect and safeguard personnel's rights.
sequencing
The process of assigning a placeholder to each piece of a data block to allow the receiving node's Transport layer to reassemble the data in the correct order.
network address translation (NAT)
The process of changing an IP address while it is in transit across a router. This is usually so one larger address space (private) can be remapped to another address space, or single IP address (public). - An internet standard which connects the internet to a private network while maintaining privacy. - This is used to translate one IP addressing system with another that is not necessarily compatible.
Systems Development Life Cycle (SDLC)
The process of creating systems and applications, and the methodologies used to do so.
security posture
The risk level to which a system, or other technology element, is exposed.
residual risk
The risk that is left over after a security and disaster recovery plan have been implemented.
Steganography
The science (and art) of writing hidden messages; it is a form of security through obscurity. Conceals data (the message) in another file such as a graphic, audio, or other text file
Data Link layer
The second layer in the OSI model. This layer bridges the networking media with the Network layer. Its primary function is to divide the data it receives from the Network layer into frames that can then be transmitted by the Physical layer.
device ID
The second set of six characters that make up a network device's MAC address - contains the device's model and manufacture date.
Network-layer datagram
The segment from the transport layer after the network layer has added an additional header such as the source and destination network addresses
Bluejacking
The sending of unsolicited messages to Bluetooth-enabled devices such as mobile phones and PDAs.
Service model
The services that a layer offers to the layer above
Application layer
The seventh layer of the OSI model. This layer's protocols enable software programs to negotiate formatting, procedural, security, synchronization, and other requirements with the network. Uses messages passed between end systems.
Transport Layer Security (TLS)
The successor to SSL. Provides secure Internet communications. This is shown in a browser as HTTPS.
Presentation layer
The sixth layer of the OSI model. Protocols in this layer translate between the application and the network. Here, data are formatted in a schema that the network can understand, with the format varying according to the type of network used. This layer also manages data encryption and decryption.
Network Management System (NMS)
The software run on one or more servers that controls the monitoring of network attached devices and computers.
Transmission Rate
The speed of a link measured in bits/second. (R)
RJ-11 (registered jack 11)
The standard connector used with unshielded twisted pair cabling (usually Cat 3 or Level 1) to connect analog telephones.
Data Integrity
The state that exists when automated data is the same as that in source documents, or has been correctly computed from source data, and has not been exposed to alteration or destruction. Also refers to the accuracy, consistency, and reliability of data stored in a database
network mapping
The study of physical and logical connectivity of networks.
Network layer
The third layer in the OSI model. Protocols in this layer translate network addresses into their physical counterparts and decide how to route data from the sender to the receiver.
nodal processing delay
The time it takes to process a packet in a network node (router, switch, hub, etc.), which is dependent on the speed of the device and congestion in the network.
Accounting
The tracking of data, computer usage, and network resources, keeping account of what users do, including what they access, the amount of time they access resources, and any changes made. Often it means logging, auditing, and monitoring of the data and resources.
Bluesnarfing
The unauthorized access of information from a wireless device through a Bluetooth connection.
jitter
The uneven arrival of packets.
DDoS (distributed denial of service)
These attacks can increase the amount of traffic flooded to a target system. Specifically, an attacker compromises multiple systems, and those compromised systems, called zombies , can be instructed by the attacker to simultaneously launch a DDoS attack against a target system.
Which of the following is true of Internet hoaxes?
They can be part of a distributed denial-of-service (DDoS) attack.
Importance of Objects
They help code be more understandable They allow more code to be around them They make programming easier They can be used over and over
FTP bounce
This bounce attack uses the FTP
control bus
This bus carries command and control signals to and from every other component of a computer.
E1
This circuit contains 32 channels, in contrast to the 24 channels on a T1 circuit. Only 30 of those 32 channels, however, can transmit data (or voice or video).Specifically, the first of those 32 channels is reserved for framing and synchronization, and the 17th channel is reserved for signaling (that is, to set up, maintain, and tear down a session).
T1
This circuit were originally used in telephony networks, with the intent of one voice conversation being carried in a single channel (that is, a single DS0). This circuit is comprised of 24 DS0s, and the bandwidth of this circuit type is 1.544 Mbps.
CPE (customer premise equipment)
This device resides at a customer site. A router, as an example, can be a CPE that connects a customer with an MPLS service provider.
Separation of Duties (SoD)
This is when more than one person is required to complete a particular task or operation.
warm site
This will have computers, phones, and servers, but they might require some configuration before users can start working on them.
Fetch- Decode- Execute
Three steps to processing instructions that are being currently used
Switch
Use the SWITCH statement when many blocks of code are being executed.
Loops
Use when running the same code over and over again, each time with a different value.
ICMP (Internet Control Message Protocol)
Used by a router to exchange information with other routers
Spam
To indiscriminately send unsolicited, unwanted, irrelevant, or inappropriate messages, especially commercial advertising in mass quantities
link efficiency
To make the most of the limited bandwidth available on slower speed links, you might choose to implement compression or link fragmentation and interleaving (LFI). These QoS mechanisms are examples of link efficiency mechanisms.
Electrostatic discharge (ESD) wrist strap
To prevent static electricity in your body from damaging electrical components on a circuit board, you can wear an ESD wrist strap. The strap is equipped with a clip that you can attach to something with a ground potential (for example, a large metal desk). While wearing the wrist strap, if you have any static buildup in your body, the static flows to the object with a ground potential to which your strap is clipped, thus avoiding damage to any electrical components that you might touch.
Authentication
To verify the identity of a user, user device, or other entity, or the integrity of data stored, transmitted, or otherwise exposed to unauthorized modification in an information system, or to establish the validity of a transmission
ARPANET
U.S. Department of Defense Project
Which of the following is a best practice for securing your home computer?
Use antivirus software and keep it up to date.
Phishing
Use e-mail or malicious web sites to solicit personal, often financial, information. Attackers may send e-mail seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts.
copy /v
Verifies that new files are written correctly.
gpresult
Verify policy settings for a computer or user
false positive
When a system authenticates a user who should not be allowed access to the system. For example, when an IDS/IPS blocks legitimate traffic from passing on to the network.
App
a self contained program usually designed for a single purpose
ESS (Extended Service Set)
WLANs containing more than one AP are called ESS WLANs. Like BSS WLANs, ESS WLANs operate in infrastructure mode. When you have more than one AP, take care to prevent one AP from interfering with another. Specifically, nonoverlapping channels (that is, channels 1, 6, and 11 for the 2.4-GHz band) should be selected for adjacent wireless coverage areas.
BSS (Basic Service Set)
WLANs that have just one AP are called BSS WLANs. BSS WLANs are said to run in infrastructure mode, because wireless clients connect to an AP, which is typically connected to a wired network infrastructure. A BSS network is often used in residential and SOHO locations, where the signal strength provided by a single AP is sufficient to service all of the WLAN's wireless clients.
shutdown /s /t nn
Wait nn seconds, then shutdown
ad filtering
Ways of blocking and filtering out unwanted advertisement; popup blockers and content filters are considered to be ad filtering methods.
Algorithms
Well-defined instructions that describe computations from their initial state to their final state.
Which of the following attacks target high ranking officials and executives?
Whaling
Lost
What happens to data when power is lost to RAM
The most important consideration when choosing an operating system is:
What the computer will do
false negative
When a system denies a user who actually should be allowed access to the system. For example, when an IDS/IPS fails to block an attack, thinking it is legitimate traffic.
false rejection
When a biometric system fails to recognize an authorized person and doesn't allow that person access.
congestion management
When a device, such as a switch or router, receives traffic faster than it can be transmitted, the device attempts to buffer (or store) the extra traffic until bandwidth becomes available. This buffering process is called queuing or congestion management.
TCP/IP hijacking
When a hacker takes over a TCP session between two computers without the need of a cookie or any other type of host access.
Baiting
When a malicious individual leaves malware-infected removable media, such as a USB drive or optical disc, lying around in plain view.
nonpromiscuous mode
When a network adapter captures only the packets that are addressed to it.
Identification
When a person is in a state of being identified. It can also be described as something that identifies a person such as an ID card.
dumpster diving
When a person literally scavenges for private information (PINs, access codes, CC #s, etc) in garbage and recycling containers.
Eavesdropping
When a person uses direct observation to "listen" in to a conversation.
shoulder surfing
When a person uses direct observation to find out a target's password, PIN, or other such authentication information.
buffer overflow
When a process stores data outside the memory that the developer intended. This could cause erratic behavior in the application, especially if the memory already had other data in it.
risk mitigation
When a risk is reduced or eliminated altogether.
Crosstalk
When a signal transmitted on one copper wire creates an undesired effect on another wire; the signal "bleeds" over, so to speak.
static NAT
When a single private IP address translates to a single public IP address. This is also called one-to-one mapping.
failopen mode
When a switch broadcasts data on all ports the way a hub does.
diversion theft
When a thief attempts to take responsibility for a shipment by diverting the delivery to a nearby location.
OFDM (Orthogonal Frequency Division Multiplexing)
While DSSS used a high modulation rate for the symbols it sends, OFDM uses a relatively slow modulation rate for symbols. This slower modulation rate, combined with the simultaneous transmission of data over 52 data streams, helps OFDM support high data rates while resisting crosstalk between the various data streams.
taskkill
Will end a process by using the process id (PID) number or image name.
What is "WIMP"?
Windows, Icons, Menus, Pointer--the fundamental components of GUIs in the days of computers and mice. WIMP replaced command-line, text-input interfaces.
circuit-level gateway
Works at the Session Layer of the OSI model and applies security mechanisms when a TCP or UDP connection is established; they act as a go-between for the Transport and Application Layers in TCP/IP.
Which answer best identifies stand-alone software that does not require a user to assist in its propogation:
Worm
symbol variables
X_local EQU DWORD PTR [ebp - 4] Y_local EQU DWORD PTR [ebp - 8] mySub PROC push ebp mov ebp, esp sub esp, 8 ; reserve space for locals mov X_local, 10 ; x mov Y_local, 20 ; y mov esp, ebp ; remove locals from stack pop ebp ret mySub ENDP
A "copyleft provision" in a software license means:
You must distribute the source to any changes you make
Your company makes a hardware firewall that runs a custom Linux kernel. What are your obligations under GPLv2
You must make the source to your kernel available
constant OFFSETS
[ebp + 8] or [ebp + 12] NOTE: do not use with the PROC USES operator
ICANN (Internet Corporation for Assigned Names and Numbers)
a central organization that coordinates the Internet domain naming system
Chipset
a collection of integrated circuits that manages the data flow between the processor, memory and peripherals.
Zero day attack
a computer attack that tries to exploit software vulnerabilities that are unknown or undisclosed by the software vendor
Volatile Memory
a computer memory that can not retain the stored information when not powered.
Non-Volatile Memory
a computer memory that can retain the stored information even when not powered.
HIPS (Host-Based IPS)
a computer running intrusion prevention software for the purpose of protecting the computer from attacks.
Digital Video Interface (DVI)
a connection interface used between monitors and computers, which supports both digital and analog data or only digital data.
Hard Disk Drive (HDD)
a data storage device comprised of a set of stacked "disks," each of which has data recorded electromagnetically in tracks and sectors on it.
Solid State Drive (SSD)
a data storage device that does not use any movable parts, uses relatively little power, and consist of flash memory chips that store your data.
User defined integrity
a database integrity that state that a set of rules defined by a user which does not belong to one of the other categories
Referential integrity
a database integrity that state that a user cannot delete a record which is related to another user
Domain integrity
a database integrity that state that all data stored in a column must follow the same format and definition
High Definition Multimedia Interface (HDMI)
a digital interface for transmitting audio and video data in a single cable.
Universal Serial Bus (USB)
a fast serial bus providing a plug-and-play interface that allows a computer to communicate with peripheral and other devices.
Internet Key Exchange
a fundamental component of IPsec Virtual Private Networks (VPNs)
Proxy Server
a server that all computers on the local network have to go through before accessing information on the Internet.
MD5 algorithm
a hash function developed by Ron Rivest that produces a 128-bit hash value
varlist
a list of variable definitions, separated by commas, optionally spanning multiple lines
IXP (Internet Exchange Point)
a meeting point where multiple ISPs can peer together
NIPS (Network-Based IPS)
a network appliance dedicated to the purpose of acting as an IPS sensor.
NIDS (Network-Based IDS)
a network appliance dedicated to the purpose of acting as an IDS sensor.
An internet
a network of computer networks
PAN (Personal-area network)
a network whose scale is smaller than a LAN. (ie: a connection between a PC and a digital camera via a USB cable.
SAN (storage area network)
a network-based storage system
Creative Commons
a nonprofit organization that provides free legal tools to change the creator copyright terms from All Right Reserved to Some Rights Reserved
Object-Oriented Programming
a programming language model organized around objects rather than "actions" and data rather than logic
BIOS chip
a read-only memory in which a set of routines is stored, enabling a computer to start the operating system and to communicate with the various devices in the system, such as disk drives, keyboard, monitor, printer, and communications ports.
Repeater(network hardware)
a repeater captures the signal and rebuilds it. It then transmits the rebuilt signal. A repeater can therefore extend the the length of a network since signals from a wire worsen as the distance increases.
Computer Software
a set of instructions that directs the computer in how to complete a task
bit (binary digit)
a single pulse in the digital encoding system. It may have only one of two values: 0 or 1.
Die
a small block of semiconducting material, on which a given functional circuit is fabricated.
Keyboard Logging
a software program that records or logs the keystrokes of the user of the system
Host Intrusion Detection System
a software that runs on a host computer that monitors suspicious activity
Constructor
a special function that gets called automatically when the object of a class is created
NOS (network operating system)
a specialized operating system for a network device such as a router, switch or firewall
NAS (Network Attached Storage)
a storage device connected to a network that allows storage and retrieval of data from a centralized location by authorized network users
recursive subroutine
a subroutine that calls itself, either directly or indirectly
3DES (Triple Data Encryption Algorithm)
a symmetric block cipher with 64-bit block size that uses a 56-bit key, encrypts data three times and uses a different key for at least one of the three passes, giving it a cumulative key size of 112-168 bits
Data Masking
a technology that secures data by replacing sensitive information with a non-sensitive version
von Nuemann architecture
a theoretical design for a stored program computer that serves as the basis for almost all modern computers; consists of a central processor with an arithmetic/logic unit and a control unit, a memory, mass storage, and input and output
Printed Circuit Board (PCB)
a thin board made of fiberglass or other laminate material on which conductive pathways are "printed", connecting different components on the PCB, such as transistors, resistors, and integrated circuits.
Wafer
a thin slice of semiconductor material that serves as the substrate for microelectronic devices.
Plug-In
a third party program that allows your browser to display multimedia-rich, interactive, dynamic content
CISSP
a vendor-neutral certification for those cybersecurity specialists with a great deal of technical and managerial experience
Media
a way to interconnect devices on a network. For example, copper cabling, fiber-optic cable or wireless connections.
Rogue access point
a wireless access point installed on a secure network without explicit authorization
Site License
enables organizations to install software apps on a specific number of computers
Proprietary Software License
allows the publisher to retain ownership of the software, but grants you the right to install the software on your computer
Fair Use
allows, without the permission of the rights holder, the use of brief selections of copyright materials for purposes such as commentary and critism, news reporting, teaching, and research
Video Editors
enables you to modify your digital videos
Shareware
enables you to try out the software application prior to purchase
Open Source Software License
grants ownership of the copy to the end user, and you can redistribute the software and modify it
Physical Access Control
actual barriers deployed to prevent direct contact with systems. The goal is to prevent unauthorized users from gaining physical access to facilities, equipment, and other organizational assets
C calling convention
add a value to ESP equal to the combined sizes of the parameters. Then, ESP will point to the stack location that contains the subroutine's return address. Example1 PROC push 6 push 5 call AddTwo add esp, 8 ;remove arguments from the stack ret Example1 ENDP
reference arguments
addresses of variables
Asymmetric Algorithms
algorithms that use one key to encrypt data and a different key to decrypt data
peer-to-peer network
allow users to share resources and files located on their computers and access shared resources found on other computers. However, they do NOT have a file server or a centralized management source.All computers are considered EQUAL. pros - less initial expense - setup cons - decentralized - security
Remote Code Executions
allows a criminal to execute any command on a target machine
Short Message Service
allows business to send brief electronic text messages to mobile devices
Switch
an Ethernet switch interconnects network components.It is available with a variety of port densities. A switch learns which devices reside off of which ports. As a result, the switch learns where the traffic is destined and forwards the traffic out only the appropriate port, not out all of the other ports.
Double Data Rate (DDR)
an advanced version of SDRAM, which can transfer data twice as fast as regular SDRAM chips. This is because it can send and receive signals twice per clock cycle.
Field Programmable Gate Array (FPGA)
an integrated circuit that can be configured by the user for a specific application after being manufactured.
CAN (Campus -area network)
an interconnection of networks located in nearby buildings. (ie: buildings on a college campus)
Adware protection
antimalware program that blocks the IP addresses of known phishing websites and warns the user about suspicious sites
Antivirus protection
antimalware program that continuously monitors for viruses
Spyware protection
antimalware program that scans for keyloggers and other spyware
Propagation Delay
any delay in communications from signal transmission time through a physical medium
Spyware
any software using someone's Internet connection in the background without their knowledge or explicit permission. These applications are typically bundled as a hidden component of freeware or shareware programs that can be downloaded from the Internet; however, it should be noted that majority of shareware and freeware do not come with this. Once installed, this monitors user activity on the Internet and transmits that information in the background to someone else. IT can also gather information about e-mail addresses and even passwords and credit card numbers.
label
any valid identifier (used with the LOCAL directive)
Using the Command Prompt, what does a "tree" do?
graphically displays the directory structure of a drive or a path.
Peripheral
anything that will connect to the outside of the computer, they can be input and output, depending on the device.
Application resilience
application's ability to react to problems in one of its components while still functioning
paramName
arbitrary name you assign to the parameter . It's scope is current and local. (used with the PROC directive, parameterList)
Vector Graphics
are maths-based graphics
Black Hat Attackers
are unethical criminals who violate computer and network security for personal gain, or for malicious reasons, such as attacking networks
modules
assembled units of divided up programming. Each is assembled independently, so a change to one's source code only requires reassembly the single file.
Per seat license
assigns a product key to individual users
TDoS (telephony denial of service)
attack that uses phone calls against a target telephone network tying up the system and preventing legitimate calls from getting through
Biometrics
automated methods of recognizing an individual based on a physiological or behavioral characteristic
Public Domain
works that are not restricted by copyright; they are owned by the public and can be freely used
Stripping
writes data across multiple drives
Central Processing Unit (CPU)
considered the brain of a computer, which carries out the processing of tasks and instructions in the computer.
Vulnerability Brokers
grey hat hackers who attempt to discover exploits and report them to vendors, sometimes for prizes or rewards
Hacktivists
grey hat hackers who rally and protest against different political and social ideas
Examples of Storage Devices
hard drive, optical drive, flash drive...
symmetric encryption
both the sender and receiver of a packet use the same key (a shared key ) for encryption and decryption.
White Hat Attackers
break into networks or computer systems to discover weaknesses in order to improve the security of these systems
SMTP (Simple Mail Transfer Protocol) Session Hijacking
by gaining access to a list of e-mail addresses a person can send spam to thousands of users
File access control
consists of permissions that limit folder or file access for an individual or for a group of users
Volume licensing
you are able to purchase multiple installations of the application using the same product key
unidirectional antenna
can focus their power in a specific direction, thus avoiding potential interference with other wireless devices and perhaps reaching greater distances than those possible with omnidirectional antennas. One application for unidirectional antennas is interconnecting two nearby buildings.
IPS (Intrusion Prevention System)
can recognize the signature of a well-known attack and respond to stop the attack. This device resides in-line with the traffic flow, unlike an IDS sensor. Analyzes the contents and the payload of the packets for more sophisticated embedded attacks that might include malicious data
System resiliency
capability to maintain availability of data and operational processing despite attacks or disrupting event
Cat 6e (Enhanced Category 6)
capable of a 550-MHz signaling rate and can reliably transmit data at multi-gigabit per second rates.
read operation
capable of being displayed (read); operating systems also allow you to protect objects with a read-only attribute that prevents other users from modifying the object
write operation
capable of being modified (written to)
Reduced Instruction Set Computer (RISC)
computers designed with a reduced set of computer instructions that includes only the most frequently used instructions so that the computer would get more work done in a shorter amount of time for most applications.
terminating condition
condition that terminates a recursive routine when it becomes true
DB-25
connector A type of connector with 25 pins that's commonly used in serial communication that conforms to the RS-232 standard.
Multimedia
content that integrates text and media
Software License
contract that gives you the right to install and use a software application on one or more computers
Database Management System
controls how collections of data are stored, organized, retrieved, and secured
copy
copy's dir/folder into new location
NIST (National Institute of Standards and Technology)
created a framework for companies and organizations in need of cybersecurity professionals
output parameter
created when a calling program passes the address of a variable to a procedure. The procedure uses the address to locate and assign data to the variable.
merge PROC LOCAL pArray: PTR WORD
declare a procedure named merge that contains a local variable, pArray, of type PTR WORD using the LOCAL directive
merge PROC LOCAL tempArray[10]: DWORD
declare a procedure named merge that contains a local variable, tempArray, of type DWORD using the LOCAL directive
mySub PROC LOCAL var1: BYTE
declare a procedure named mySUb that contains a local variable named var1 of type BYTE using the LOCAL directive
mySub PROC enter 8, 0
declare a procedure that reserves 8 bytes of stack space for local variables using the ENTER instruction and returns to the caller similar to: mySub PROC push ebp mov ebp, esp sub esp, 8 mov esp, ebp pop ebp ret mySub ENDP
input parameter
data passed by a calling program to a procedure. The called procedure is not expected to modify the corresponding parameter variable, and even if it does, the modification is confined to the procedure itself.
CRM (Customer relationship management)
database system that tracks interactions with with a customer and is valuable to gain information about marketing, sales, and customer service
bubbleSort PROC LOCAL temp: DWORD, swapFlag: BYTE
declare a procedure named bubbleSort that contains two local variables, temp and swapFlag, of types, DWORD and BYTE, using the LOCAL directive
Example3 PROC LOCAL temp:DWORD mov eax, temp ret Example3 ENDP
declare a procedure named example3 using the LOCAL directive and dword variable named temp similar to: Example3 PROC push ebp mov ebp, esp add esp, OFFFFFFFCh ; add -4 to ESP mov eax, [ebp - 5] leave ret Example3 ENDP
read_File PROC USES eax ebx, pBuffer:PTR BYTE LOCAL fileHandle:DWORD mov esi, pBuffer mov fileHandle, eax ret read_File ENDP
declare a procedure the simplifies the following code (there may be more than one way to perform this task, only one can be exampled here): read_File PROC push ebp mov ebp, esp add esp, 0FFFFFFCh ; create fileHandle push eax ; save EAX push ebx ; save EBX mov esi, dword ptr [ebp+8] ; pBuffer mov dword ptr [ebp-4], eax ; fileHandle pop ebx pop eax leave ret 4 read_File ENDP
ArraySum PROTO, ptrArray:PTR DWORD, szArray:DWORD
declare the PROTO statement for the following PROC statement: ArraySum PROC USES esi ecx, ptrArray: PTR DWORD, szArray: DWORD
dedicated leased line
dedicated leased line A logical connection interconnecting two sites. This logical connection might physically connect through a service provider's facility or a telephone company's central office. The expense of this line is typically higher than other WAN technologies offering similar data rates, because with this line, a customer does not have to share bandwidth with other customers.
INVOKE swap, ADDR array, ADDR [array + 4]
define an INVOKE instruction to replace the following lines of code: push OFFSET array+4 push OFFSET array call swap
INVOKE DumpArray, OFFSET array, LENGTHOF array, TYPE array
define an INVOKE instruction to replace the following lines of code: push TYPE array push LENGTHOF array push OFFSET array call DumpArray
Client
defines the device an end-user uses to access a network or request data stored on a server. (ie: a workstation, laptop, smartphone, with wireless capabilities, a tablet, or a variety of other end-user terminal devices.)
State Sponsored Hackers
depending on a person's perspective, these are either white hat or black hat hackers who steal government secrets, gather intelligence, and sabotage networks
Shuffling
derives a substitution set from the same column of data that a user wants to mask. This technique works well for financial information in a test database, for example
LOCAL
directive to substitute for the ENTER instruction. Declares one or more local variables by name, assigning them size attributes. If used, must appear on the line immediately following the PROC directive.
STACK
directive used to reserve space for the runtime stack (Irvine32.inc library file)
Full-mesh Topology
directly connects every site to every other site in the network.
nestinglevel
determines the number of stack fram pointers copied into the current stack frame from the stack frame of the calling procedure.
WPA (Wi-Fi Protected Access)
developed its own security standard to address the weaknesses of Wired Equivalent Privacy (WEP). This new security standard was called Wi-Fi Protected Access (WPA) version 1. Secure communication that provides message integrity checks (MIC). - Provides encryption via TKIP. - Can use both pre-shared key or 802.1x for authenticating connection.
PROTO
directive that creates a prototype for an existing procedure. Declares a procedure's name and parameter list. It allows you to call a procedure before defining it and to verify that the number and types of arguments match the procedure definition. Must be used to utilize the INVOKE directive. - use the PROC statement to create - Change the word PROC - Remove the USES operator if any, along with its register list.
INVOKE
directive that pushes arguments on the stack (in the order specified by the MODEL directive's language specifier) and calls a procedure. Replaces the call instructions and allows you to pass multiple arguments using a single line of code. - passing arguments smaller than 32 bits to frequently causes the assembler to overwrite EAX and EDX when it widens the arguments before pushing them on the stack. - avoid proceeding behavior by saving and restoring EAX and EDX before and after the procedure call.
Sound Files
enables delivery of software applications over the Internet rather than storing them on your local computer
3D Spreadsheets
enable you to link multiple worksheets together
Fault tolerance
enables a system to continue to operate if one or more components fail
N+1 Redundancy
ensures system availability in the event of a component failure
Domain Name
follows the protocol and represents the company, product, or person represented by the webpage
gpupdate
force a group policy update
Help and Command (Dir or Chkdsk)
gives information about command
Top Level Domain
gives you an idea of what type of site you are accessing
Discretionary Access Control
grants or restricts object access determined by the object's owner
Logical Access Control
hardware and software solutions used to manage access to resources and systems. These technology-based solutions include tools and protocols that computer systems use for identification, authentication, authorization, and accountability
plugs
has an insulated case and is used to connect the cable from an appliance to a socket.
Methods used to ensure data integrity
hashing, data validation checks, data consistency checks, and access controls
Advanced threat intelligence
helps organizations detect attacks during one of the stages of the cyber attacks and sometimes before with the right information
Ransomware
holds a computer system or the data it contains captive until the target makes a payment
Utilities disruptions
human caused disaster that include power failures, communication outages, fuel shortages, and radioactive fallout
numbytes
immediate value, always rounded up to a multiple of 4 to keep EXP on a doubleword boundary
argument types used with INVOKE
immediate value, integer expression, variable, address expression, register, ADDR name, OFFSET name
Containment Eradication and Recovery
include the intermediate actions performed such as disconnecting a system from the network to stop the information leak
Securely Provision
includes conceptualizing, designing, and building secure IT systems
Collect and Operate
includes specialized denial and deception operations and the collection of cybersecurity information
Protect and Defend
includes the identification, analysis, and mitigation of threats to internal systems and networks
Format
initialize or erase everything on a partition, put brand new file system on a partition.
LEA (Load Effective Address)
instruction that returns the effective address of an indirect operand.
LEAVE
instruction that terminates the stack frame for a procedure. It reverses the action of a previous ENTER instruction by restoring ESP and EBP to the values they were assigned when the procedure was called
LAN (Local-area network)
interconnects network components within a local region. (ie: within a building.) Generally a home of office network
Web Browsers
interpret the HTML that is stored on webpage and display the contents
Mitigation
involves reducing the severity of the loss or the likelihood of the loss from occurring
Synchronous Online Communication
involves two or more people who are communicating simultaneously in real time
ARP (Address Resolution Protocol) poisoning
is a form of attack in which an attacker changes the Media Access Control (MAC) address and attacks an Ethernet LAN by changing the target computer's ARP cache with a forged ARP request and reply packets
CSMA/CA (Carrier Sense Multiple Access / Collision Avoidance)
is needed for WLAN connections, because of their half-duplex operation. A WLAN device listens for a transmission on a wireless channel to determine if it is safe to transmit. Additionally, the collision-avoidance part of the CSMA/CA algorithm causes wireless devices to wait for a random back-off time before transmitting.
Add-On
is specific to a type of browser and adds functionality to the browser
Simplicity
mitigation strategy that includes a secure solution which should be simple on the inside, but complex outside
Diversity
mitigation strategy that includes an organization using different encryption algorithms or authentication systems to protect data in different states
Obscurity
mitigation strategy that includes concealing certain type of information by making it more difficult for cyber criminals to attack a system
Layering
mitigation strategy that includes creating a barrier of multiple defenses that coordinates together to prevent attacks
Limiting
mitigation strategy that includes limiting access to data and information by reducing the possibility of a threat
Examples of Output Devices
monitor, printer, speakers, headphones
.. - shortcut to CD and path
moves back one directory from where you currently are.
RD
remove directory example: C:\Users\administrator>rd temp
Substitution
replaces data with authentic-looking values to apply anonymity to the data records
IOS resilience
resilient design that allows for faster recovery if someone maliciously or unintentionally reformats flash memory or erases the startup configuration file
Recovery Control
restore resources, functions, and capabilities after a violation of a security policy. These controls can repair damage, in addition to stopping any further damage. These controls have more advanced capabilities over corrective access controls.
Corrective Control
restore the system back to a state of confidentiality, integrity, and availability. They can also restore systems to normal after unauthorized activity occurs
Qualitative risk analysis
risk analysis approach that uses opinions and scenarios
Gateway Load Balancing Protocol (GLBP)
router redundancy option that protects data traffic from a failed router or circuit while also allowing load balancing/sharing between a group of redundant routers
HSRP
router redundancy option that provides high network availability by providing first hop routing redundancy
VRRP (Virtual Router Redundancy Protocol)
router redundancy option when the elected router is the virtual router master, and the other routers acts as backups, in case the virtual router master fails
Web Apps
run in business, so they are platform-neutral, and will run on any device with a supported browser and Internet access
SCP (secure copy protocol)
securely transfers computer files between two remote systems
Packet Switches
takes a packet arriving on one of its incoming communication links and forwards that packet on one of its outgoing communication links. EX Routers, Link-layer switches
Script Kiddies
teenagers or hobbyists mostly limited to pranks and vandalism, have little or no skill, often using existing tools or instructions found on the Internet to launch attacks.
New Laws
the ISACA (Information Systems Audit and Control Association) group track law enacted related to cyber security
Vulnerability Database
the National Common Vulnerabilities and Exposures (CVE) database is an example of
Integrity
the accuracy, consistency, and trustworthiness of data during its entire life cycle
Throughput
the actual speed of data transfer that is achieved
Transmission Delay
the amount of time required to push all of the packet's bits into the link (L/R)
prologue
the beginning of a function consisting of statements that save the EBP register and point EBP to the top of the stack, OR push certain registers on the stack whose values will be restored when the function returns.
Integrated Circuits (IC)
the integration of large numbers of tiny electronic circuits into a small chip.
Motherboard
the main circuit board of your computer which hosts the CPU, the chipset, BIOS chip, RAM expansion slots, PCI slots, and USB ports etc.
Access Network
the network that physically connects an end system to the first router (also known as the "edge router") on a path from the end system to any other distant end system.
Clock Speed
the operating speed of a computer or its microprocessor. It is measured in a unit called Hertz (Hz), which is the number of clock cycles per second.
Read Only Memory (ROM)
the portion of a computer's primary storage that does not lose its contents when one switches off the power; a type of non-volatile memory on which data can only be read but not written to.
Cybersecurity Threat
the possibility that a harmful event, such as an attack, will occur
recursion
the practice of calling recursive subroutines. - linked lists - connected graphs - careful not to create endless loop
Availability
the principle used to describe the need to maintain availability of information systems and services at all times, so that data is obtainable regardless of how information is stored, accessed, or protected
telecommunications closet Also known as a "telco room,"
the space that contains connectivity for groups of workstations in a defined area, plus cross-connections to IDFs or, in smaller organizations, an MDF. Large organizations may have several of it per floor, but the TIA/EIA standard specifies at least one per floor.
NetFlow
the standard for collecting operational data from networks
Cryptology
the study of codes, or the art of writing and solving them
Clock Cycle
the time between two adjacent pulses of the oscillator, during which a CPU can perform a basic operation such as fetching an instruction, accessing memory, or writing data.
Data Obfuscation
the use and practice of data masking and steganography techniques in the cybersecurity and cyber intelligence profession. the art of making the message confusing, ambiguous, or harder to understand
Symmetric Algorithms
these algorithms use the same pre-shared key, sometimes called a secret key pair, to encrypt and decrypt data
Elliptic Curve Cryptography (ECC)
uses elliptic curves as part of the algorithm. In the U.S., the National Security Agency uses it for digital signature generation and key exchange
Boolean Search
uses logical operators such as AND, OR, and NOT to link the words you are searching for
MIMO (Multiple Input Multiple Output)
uses multiple antennas for transmission and reception. These antennas do not interfere with one another, thanks to MIMO's use of spatial multiplexing, which encodes data based on the antenna from which the data will be transmitted. Both reliability and throughput can be increased with MIMO's simultaneous use of multiple antennas.
RAID (Redundant Array of Independent Disks)
uses multiple hard drives in an array which is a method of combining multiple disks so that the operating system sees them as a single disk
Sneaker net
uses removable media to physically move data from one computer to another
ElGamal
uses the U.S. government standard for digital signatures. This encryption algorithm is free to use because no one holds the patent
Wireless networks
uses the airwaves to transmit data
Database validation
validation rule checks that data falls within the parameters defined by the database designer
Consistency
validation rule that checks for the consistency of codes in related data items
Range
validation rule that checks that data lies within a minimum and maximum value
Size
validation rule that checks the number of characters in a data item
Check digit
validation rule that provides for an extra calculation to generate a check digit for error detection
value arguments
values of variables and constants
local variables
variables created, used, and destroyed within a single subroutine - only statements within a local variable's enclosing subroutine can view or modify the variable, preventing program bugs caused by modifying variables - storage space used by local variables is released when the subroutine ends - local variables from different subroutines can have the same name without a name clash - essential when writing recursive subroutines, as well as subroutines executed by multiple execution threads.
Five nines
when the system and services are available 99,999% of the time
Pretexting
when an attacker calls an individual and lies to them in an attempt to gain access to privileged data
Something for something
when an attacker requests personal information from a party in exchange for something like a gift
Domain Name System
works like a directory, looking up the IP address when you type a domain name
