Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
security techniques
| Question | Answer |
|---|---|
| Extending service set (ESS) configuration | Involves multiple wireless access points working together to create a unified and extended coverage area for users in a large building or facility |
| Adjacent channel interference | Occurs when the channels selected for adjacent wireless access points do not have enough space between the channels |
| Site survey | Process of planning and designing a wireless network to provide a solution |
| Heat map | Graphical representation of the wireless coverage, the signal strength, and frequency utilization data at different locations on a map |
| Wired equivalent privacy (WEP) | Outdated 1999 wireless security standard meant to match wired LAN security for wireless network |
| 64 bit WEP | Consist of 40 bits of actual key data plus an extra 24 bits of initialization vector |
| 128 bit WEP | Includes 104 bits of key data and an additional 24 bits of initialization vector |
| WEP | Insecure because of a weak 24 bit initialization vector |
| wi-Fi protected access (WPA) | Introduced a 2003 as a temporary improvement over WEP while the more robust IEDE802.11i standard was in development |
| WPA | Insecure because of the lack of sufficient data integrity checks in the TKIP implementation |
| wi-Fi protected access 2 (WPA2) | Improved data protection and network access control by addressing weaknesses in WPA version |
| wi-Fi protected access 3 (WPA3) | Latest version using AES encryption and introducing new features like SAE, enhanced open, updated cryptographic protocols, and management protection frames |
| simultaneous authentication of equals (SAE) | Enhances security by offering a key establishment protocol to guard against off-line Dictionary attacks |
| enhanced open/opportunistic wireless encryption (OWE) | Major advancement in wireless security, especially for networks using open authentication |
| cryptographic protocol | Uses a newer variant of AES known as the AES GCMP |
| Galois Counter Mode Protocol (GCMP) | Supports 128-bit AES for personal networks and 192-bit AES for enterprise networks with WPA3 |
| management protection frames | Required to protect network from key recovery attacks |
| authentication, authorization and accounting (AAA) protocol | Plays a vital role in network security by centralizing User authentication to permit only authorized users to access network resources |
| remote authentication dial-in User service (RADIUS) | Client/server protocol offering AAA services for network users |
| terminal access controller access-control system plus (TACACS+) | Separates the functions of AAA to allow for more granular control over processes |
| authentication protocols | Confirm user identity for network security and authorized access |
| extensible authentication protocol (EAP) | Authentication framework that supports multiple authentication methods |
| Protected extensible authentication protocol (PEAP) | Authentication protocol that secures EAP within an encrypted and authenticated TLS tunnel. Certificate (server/client) |
| extensible authentication protocol-tunneled transport layer security (EAP-TTLS) | Authentication protocol that extends TLS support across multiple platforms. Certificate (server) |
| extensible authentication protocol-flexible authentication via secure tunneling (EAP-FAST) | Developed by Cisco, it enables secure re-authentication while roaming within a network without full authentication each time |
| WPA3 | Offers strong protection even with less complex passwords |
| RADIUS | Network Protocol for AAA management of users accessing network services |
| Application security | Critical aspect of software development that focuses on building applications that are secure by design |
| input validation | Gatekeeper to ensure that applications only act on well defined and uncontaminated data |
| validation rules | These rules delineate acceptable and unacceptable inputs |
| cookies | Small pieces of data stored on the users computer by the web browser while browsing website |
| secure cookies | Transmitted over secure, HTTPS connections to prevent potential eavesdropping from intercepting the cookie data |
| static code analysis (SAST) | A method of debugging and application by reviewing and examining a source code before the program is even |
| manual code review | Performing the code review using a human instead of a static software analysis tool |
| Dynamic code analysis | Testing method that analyzes an application while it's running |
| fuzzing | Finds software flaws by bombarding it with random data to trigger crashes and security vulnerabilities |
| stress testing | Type of software testing that evaluate stability and reliability of a system under extreme conditions |
| Code signing | Technique used to confirm the identity of a software author and guaranteed that the code has not been altered or corrupted since it was signed |
| sandboxing | Security mechanism that is used to isolate running programs by limiting the resources they can access and the changes they can make to a system |
| network access control (NAC) | Scans devices for their security status before granting network access, safeguarding against both known and unknown devices |
| persistent agent | A software installed a device requesting network access |
| Non-persistent agent | Users connect to Wi-Fi, access a web portal, and click a link for login in these solutions |
| network access control (NAC) | scans devices for their security status before granting network access, safeguarding against both known and unknown devices |
| web filtering | Technique used to restrict or control the content a user can access on the Internet. |
| agent based web filtering | Installing a small piece of software known as an agent on each device that will require web filtering |
| centralized proxy | Server that acts as an intermediary between an organizations end users and the Internet |
| URL scanning | Used to analyze a website's URL to determine if it is safe or not to Access |
| Block rules | Specific guidelines set by an organization to prevent access to certain websites or categories of websites |
| reputation based filtering | Blocking or allowing websites based on their reputation score |
| DNS filtering | Technique used to block access to certain websites by preventing the translation of specific domain names to their corresponding IP addresses |
| DomainKeys identified Mail (DKIM) | Allows the receiver to check if the email was actually sent by the domain it claims to be sent from, and if the content was tampered with during transit |
| sender policy framework (SPF) | Email authentication method designed to prevent forging sender addresses during email delivery |
| domain based message authentication, reporting, and conformance (DMARC) | An email validation system designed to detect and prevent email spoofing |
| email Gateway | Server or system that serves as the entry and exit point for emails |
| on premise email Gateway | Physical server that is located within an organization's own data center or premises that provides an organization with full control over their email system |
| cloud-based email Gateway | Email Gateway that is hosted by third-party cloud service providers to provide greater scalability and ease of maintenance |
| hybrid email Gateway | Used to combine the benefits of both on-premise and cloud-based gateways into a single offering |
| spam filtering | Process of detecting unwanted and unsolicited emails and preventing them from reaching a user's email inbox |
| Endpoint detection and response (EDR) | Category of security tools that monitor endpoint and network events and record the information in a central database |
| file integrity monitoring (FIM) | Used to validate the integrity of operating system and application software files using a verification method between the current file state and a known, good baseline |
| extended detection and response (XDR) | Security strategy that integrates multiple protection technologies into a single platform to improve detection accuracy and simplify the incident response process |
| user behavior analytics (UBA) | Deploys big data and machine learning to analyze User behaviors for detecting security threats |
| user and entity behavior analytics (UEBA) | Built upon the foundation of UBA with monitoring of entities as an additional function |
| protocol | Set of rules and procedures for transmitting data between electronic devices |
| telnet | Application layer protocol that allows a user on one computer to log onto another computer that is part of the same network |
| Secure shell (SSH) | Network protocol for securely connecting and communicating with remote devices and systems over an unsecured network |
| Port | Logical construct that identifies specific processes or services in a given system |
| well known ports | Used by system, processes or service services and consist of ports ranging from port 0 to port 1023 |
| registered ports | Used by software applications and utilize a port number between 1024 and 49151 |
| dynamic/private ports | Used for client-side connections that range from port number 49152 to port number 65535 |
| transport method | Refers to the way data is moved from one place to another, usually using either TCP or UDP to transmit the data |
| transmission control protocol (TCP) | Connection oriented protocol that ensures data is delivered without any errors |
| User datagram protocol (UDP) | Connectionless protocol that doesn't guarantee data delivery |
Created by:
user-2044395