Busy. Please wait.

show password
Forgot Password?

Don't have an account?  Sign up 

Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account.
We do not share your email address with others. It is only used to allow you to reset your password. For details read our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.

Remove ads
Don't know
remaining cards
To flip the current card, click it or press the Spacebar key.  To move the current card to one of the three colored boxes, click on the box.  You may also press the UP ARROW key to move the card to the "Know" box, the DOWN ARROW key to move the card to the "Don't know" box, or the RIGHT ARROW key to move the card to the Remaining box.  You may also click on the card displayed in any of the three boxes to bring that card back to the center.

Pass complete!

"Know" box contains:
Time elapsed:
restart all cards

Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

RiskMGMT_final part

Final questions from participations

How to realize digital signature with hash algorithm and public key algorithm To generate the digital signature, sender should first generate a hash value. Then sender should sign the hash value with his private key. To verify the digital signature, receiver should first decrypt the digital signature with the sender public key.
Please explain how to encrypt a message with DH algorithm Generate a key based on Alice's private key and Bob's public key then encrypt the message to Bob then Bob decrypts message using the same key but uses bob's private key and Alice's public key.
Please explain how to do a direct and indirect DOS attack. Explain what is reflected DOS attack with example Attacker direct send SYN to the victim Attacker sends the flood to bot, then the bot sends that to the victim Attacker sends SYN with fake IP to the victim, the victim sends the SYN ACK to the real victim
How to reduce the DOS attack Black holing Validate the SYN rate limiting
What are the four authentication credentials and explain that with examples? i. What you know (e.g., a password) ii. What you have (e.g., an access card) iii. What you are, or (e.g., your fingerprint) iv. What you do (e.g., speaking a passphrase)
Please list the three access control(authorization) model DAC, MAC, RBAC
Please list the three main types of firewall types; explain what that is, and their advantage and limitation. -static packet filtering:filters header info;not stop many attack -SPI:check state of packet for allow or deny of traffic;low $, fast/not guarantee against app level attack -app. proxy:proxy or server that allow or deny traffic;check app/slow/costs $
Please explain what IDS is and what IPS is -Intrusion Detection System: Looks for suspicious traffic, sends an alarm message if attack appears serious; does not drop data - Intrusion Prevention System: use ids filtering mechanisms to prevent certain traffic similar to firewall
Please list the four main kinds of firewall architecture: -single router -main border -DMZ -internal
Please list the four main methods of vulernabilities fixing in the host operating system -patches -service pack -version upgrade -work around - manual fix
Please list the main attacks for webserver -website defacement -DDoS attack -buffer overflow -directory transversal attack
What are the three ways for data backup -full packup -incremental backup -differential backup
what is business continuity planning -specifies how a company plans to restore or maintain core business when disasters occur -principle: people, clear, communication
Created by: ITSec_guy