Permission Puzzles
The process of determining what rights and privileges a particular entity has.
What is Authorization?
A firewall designed specifically to protect software running on web servers and their back-end databases from code injection and DoS attacks.
What is a web application firewall (WAF)?
A cryptographic technique that provides secure key exchange.
What is Diffie-Hellman (D-H)?
A person or entity responsible for an event that has been identified as a security incident or as a risk.
Who is a threat actor?
A secure tunnel created between two endpoints connected via an unsecure transport network (typically the Internet).
What is a virtual private network (VPN)?
A method of validating a particular entity’s or individual’s unique credentials.
What is Authentication?
A stateful inspection firewall that can monitor TCP sessions and UDP traffic.
What is a layer 4 firewall?
A function that converts an arbitrary-length string input to a fixed-length string output.
What is hashing?
A type of threat actor that is motivated by a social issue or political cause.
Who are Hacktivists?
A logical network segment comprising a broadcast domain established using a feature of managed switches to assign each port a VLAN ID.
What is a virtual LAN (VLAN)?
Authentication technology that enables a user to authenticate once and receive authorizations for multiple services.
What is single sign-on (SSO)?
A stateful inspection firewall that can filter traffic based on specific application protocol headers and data, such as web or email data.
What is a layer 7 firewall?
A cryptographic hashing algorithm created to address possible weaknesses in MDA.
What is Secure Hash Algorithm (SHA)?
A type of threat actor that uses hacking and computer fraud for commercial gain.
What is Organized crime?
A hardware device inserted into a cable run to copy frames for analysis.
What is a Test access point (TAP)?
A security concept where a centralized platform verifies subject identification, ensures the subject is assigned relevant permissions, and then logs these actions to create an audit trail.
What is “authentication, authorization, and accounting (AAA)”?
A standalone hardware device that performs only the function of a firewall, which is embedded into the appliance’s firmware.
What is an appliance firewall?
A method used to verify both the integrity and authenticity of a message by combining a cryptographic hash of the message with a secret key.
What is Hash-based Message Authentication Code (HMAC)?
A type of threat actor who is assigned privileges on the system that cause an intentional or unintentional incident.
What is an internal threat?
A network protocol suite used to secure data through authentication and encryption as the data travels across the network or the Internet.
What is Internet Protocol Security (IPsec)?
A security process that provides identification, authentication, and authorization mechanisms for users, computers, and other entities to work with organizational assets like networks, operating systems, and applications.
What is identity and access management (IAM)?
A hardware device that has the primary function of a router, but also has firewall functionality embedded into the router firmware.
What is a router firewall?
A method of generating random values by sampling physical phenomena that has a high rate of entropy.
What is a true random number generator (TRNG)?
A type of threat actor that is supported by the resources of its host country’s military and security services.
Who are Nation-state actors?
A framework for creating a security association (SA) used with IPSec.
What is Internet Key Exchange (IKE)?