Chapter 5 Application and Networking-Based Attacks
Which protection (in the CIA Triad) is provided by hashing?
integrity
A separate network that rests outside the secure network perimeter; untrusted outside users can access the DMZ but cannot enter the secure network
demilitarized zone
What type of log is used to record which user performed an action and what that action was?
audit log
A set of standards that can be used to establish communication between devices in close proximity is known as _____.
near field communication (NFC)
According to the concept of ____, a user should only be given the minimum set of permissions required to perform necessary tasks.
least functionality
What is data called that is to be encrypted by inputting it into a cryptographic algorithm?
plaintext
A monitoring technique used by an IDS that uses an algorithm to determine if a threat exists.
heuristic monitoring
What protocol suite below is the most commonly used protocol for local area network (LAN) communication?
TCP/IP
Which type of Bluetooth attack accesses unauthorized information from a wireless device through a Bluetooth connection?
Bluesnarfing
Removing a resource that is no longer used is known as ____.
deprovisioning
What is the latest version of the Secure Hash Algorithm?
SHA-3
A monitoring technique used by an IDS that uses the normal processes and actions as the standards and compares actions against it.
behavior based monitoring
At what level of the OSI model does the IP protocol function?
network layer
AES performs three steps on every block of plaintext. A block is _____ in size.
128 bits
The ____ methodology includes security automation, continuous integration, immutable systems, infrastructure as code, and baselining.
Secure DevOps
Which of the following key exchanges uses the same keys each time?
Diffie-Hellman (DH)
A device designed to be active security; it can detect an attack as it occurs
intrusion detection system
Which layer of the OSI model contains the TCP protocol, which is used for establishing connections and reliable data transport between devices?
Transport Layer
Authentication for WPA Personal is accomplished by using a _____.
Preshared Key (PSK)
Heuristic monitoring, or _____, uses techniques to identify characteristics of a virus instead of matching a virus signature.
dynamic analysis
Proving that a user sent an email message is known as ______________.
non-repudiation
Any combination of hardware and software that enables remote users to access a local internal network
remote access
How can a network of physical devices be grouped into logical units, regardless of what network switches they may be connected to?
VLAN
In WEP, the shared secret key is combined with a(n) _____, which is a 24-bit value that changes each time a packet is encrypted.
initialization vector (IV)
Phases of this include planning, creating, developing, testing, and deploying an application.
application development lifecycle model