Network and Security devices
Mobile device security
Host security controls
Software security controls
Odds and Ends
100

VLANs are created on this device.

What is a Switch?

100

This method of privilege escalation escapes security restrictions on an iPhone and allows the user - or an attacker - to do whatever they want to it.

What is Jailbreaking?

100

This reactive software responds to discovered attacks on a device.

What is a Host-based Intrusion Detection System (HIDS)?

100

Limiting the environment in which a program can execute is often known as application _____.

What is sandboxing?

100

This software detects and prevents potential data breaches/data exfiltration transmissions.

What is Data Loss Prevention (DLP)?

200

This security zone contains public-facing network devices.

What is a Demilitarized Zone (DMZ)?

200

Also known as casting, this feature allows a user to send audio/video from their mobile devices to a bigger screen like a television.

What is Screen Mirroring?

200

This type of hardware cryptoprocessor typically resides on a motherboard.

What is a Trusted Platform Module (TPM)?

200

A vulnerability where an attacker can change a system between the checking of a condition (such as a security credential) and the use of the results of that check, TOC/TOU is also known as this.

What is a Race Condition?

200

Consuming less power than Bluetooth, this type of short-range mobile communication technology allows contactless data transfer by holding your phone near another device.

What is Near-Field Communication (NFC)?

300

This type of IDS/IPS is susceptible to a zero day attack.

What is a signature (pattern)-based IDS/IPS?

300

A technique used to allow mobile users to download apps, Application Wrapping is implemented by administrators setting these to ensure safe downloading.

What are policies?

300

SEAndroid relies on this security kernel to identify control gaps and implement access permissions.

What is SELinux?

300

Categories of this type of application attack include Reflected and Stored.

What is Cross-Site Scripting (XSS/CSS)?

300

When company-approved email clients, web browsers, and productivity applications have been decided and set, this step of host hardening has just been completed.

What is Application Whitelisting?

400

This type of firewall not only filters via IP addresses and ports, but also keeps track of active connections via a state table.

What is a Stateful Inspection Firewall?

400

Geofencing and Time-based restrictions are two methods used when performing this type of mobile management that cares about HOW the user is accessing the network.

What is Context-Aware Management?

400

While convenient for easy identification and tracking of assets or customers, careless implementation of this technology can lead to skimming attacks on PII or other data leaks.

What is Radio Frequency Identification (RFID)?

400

This combination of JavaScript and XML allows the use of many different Web development techniques.

What is Asynchronous JavaScript And XML (AJAX)?

400

When a program catches an abnormal - yet recoverable - condition, it is performing this type of handling.

What is Exception Handling?

500

This approach to network security verifies a newly-connected device's appropriateness for the network before the device is allowed to access it

What is Network Access Control (NAC)?

500

Intended to allow easier fulfillment of electronic certificate requests by users, concerns over being able to strongly authenticate these requests and increasing amounts of back-end work required made this protocol unsuitable for large-scale deployments.

What is Simple Certificate Enrollment Protocol (SCEP)?

500

This feature of UEFI helps a computer resist attacks and infection from malware by detecting tampering with boot loaders or key operating system files during the start-up process.

What is Secure Boot?

500

This is an HTTP-based architectural style that defines a set of constraints for creating web services.

What is Representational State Transfer (REST)?

500

This technique provides the ability to drop undesirable traffic before it enters a protected network by sending it to a Null0 interface.

What is Remote-Triggered Black Hole (RTBH) filtering?