Devices
Encryption
Network
Protocols
Ports
Double meaning
100

What is NGFW?

What is a Next-generation firewall

100

What does SAE stand for and what is it?

What is Simultaneous Authentication of Equals (SAE) is a password-based authentication and password-authenticated key agreement method.

100

What is PaaS and what is it?

What is Platform as a Service:

Operating systems and webserver software

You have the computer you just add OS and all services.

100

What is SSH?

What is Secure Shell and port 22

100

What is TCP port 23, and is it Secure?

What is Telnet and not secure

100

A DMZ is now called what?

What is a DMZ is called a Perimeter network/Screened subnet 

200

What is HIDS?

What is Host-based intrusion detection
system

200

What is a TPM?

What is Trusted Platform Module

200

What is an SDN and what does it do?

What is a Software Defined Network:

It allows greater agility and scalability to meet demand, with less physical overhead through centralized control of the network and a simplified design, ideal when rapid failover is needed.

200

What is SFTP?

What is SSH File Transfer Protocol and port 22

200

What is port 3389 and is it Secure?

What is RDP Remote Desktop Protocol and Secure

200

What is a Man-in-the-Middle/Man-in-the-Browser attack now called?

What is an On Path Attack

300

This gateway device lives on layer three of the OSI Model.  What is the name of this device and that layer?


What is a Router, and what Network layer

300

What is DNSSEC?

What is Domain Name System
Security Extensions

300

What is "TCP/IP" and what is it known for?




What is Transmission Control Protocol/Internet Protocol, Connection-oriented Network communications

300

What is SNMPv3 and is it secure?

What is  Simple Network Management
Protocol, version 3

300

What is port 636 and is it Secure?  If so what port does the unsecured version use?

What is LDAPS and secure.  What are LDAP and port 389

300

What is the CIA and give one word that defines each category?


Confidentiality = Encryption

Integrity = Hashes

Availability = Redundancy

400

What is MAC and how many bits does it consist of?


What is Media Access Control, MAC addresses are 48 bits long.  They have two halves: the first 24 bits form the Organizationally Unique Identifier (OUI) and the last 24 bits form a serial number (formally called an extension identifier).

400

What is SHA2 and list one of the Bit Digest Hash values?


What is Secure Hash Algorithm 2

SHA-2 includes significant changes from its predecessor, SHA-1. The SHA-2 family consists of six hash functions with digests (hash values) that are 224, 256, 384, or 512 bits

400

What is UDP and what is it known for?

What is User Datagram Protocol, connectionless network communications


400

What is SRTP?

What is Secure Real-time Transport
Protocol

400

What is port 143, and is it secure?  If not what port would you use for IMAPS


What is Internet Message Access Protocol, and not secure.  What is port 993 if they require to connect securely via IMAP over SSL (IMAPS)

400

What are the types of PKI, and how many keys do each one use?

What is Asymmetric and Another key always two keys

What is Symmetric and Same Key

500

What is UTM?

What is Unified threat management:

CompTIA is defining this as NGFW

500

What is HMAC?

What is Hash-based message authentication
code

500

Virtual machines also allow so-called sandboxing, what is this, and why do you use virtualization for this?
 


Virtual machines also allow so-called sandboxing, where the underlying machine layer supposedly is unharmed in the event of a malware outbreak or other security breach.


500

What is LDAP?

What is Lightweight Directory Access Protocol

500

What is TCP port 110, and is it Secure?

What is POP3 and not secure

500

What are the two MACs?

What is Media Access Control

What is Madatory Access Control

600

What is HIPS?

What is Host-based intrusion prevention
system

600

What is S/MIME?

What is  Secure/Multipurpose Internet
Mail Extensions

600

What is IaaS, and what is it?


What is Infrastructure as a Service:

This is raw computing power and storage, you build your own computer (Memory, speed, OS, software, etc.)

600

What is FTPS and is this SSL or SSH?

What is File Transfer Protocol, Secure

600

What is port 1720?

What is H.323 and this is VOIP Voice over IP signaling

600

What are the two RBACs?

What is Rule Based Access Control

What is Role Based Access Control

700

What device uses a MAC address and resides on layer 2 of the OSI model?

What is a switch

700

WPA3 uses which encryption for the key exchange?

What is SAE replacing the PSK four-way handshake with Simultaneous Authentication of Equals (SAE), a version of the Internet Engineering Task Force's dragonfly handshake in which either the client or AP can initiate contact. Each device then transmits its authentication credentials in a discrete, one-off message, instead of in a give-and-take, multipart conversation. Importantly, SAE also eliminates the reuse of encryption keys, requiring a new code with every interaction. Without open-ended communication between AP and client or encryption key reuse, cybercriminals can't as easily eavesdrop or insert themselves into an exchange.

700

What is a DMZ now called?

What is a Screened subnet

700

What is TFTP and is it secure?

What is Trivial File Transport Protocol, and not secure

700

What uses ports 20, and 21, and is it secure?

What is FTP File Transfer Protocol and unsecured

700

What is a Brownout now called?

What is an Under-voltage event