Network Protocols & Attacks
This protocol operates on UDP port 123 to keep system clocks in lockstep.
What is Network Time Protocol (NTP)?
An attack that exploits a software vulnerability before the developer can release a patch.
What is a Zero-day?
A random number whose principal characteristic is that it is never reused within the same scope.
What is a Nonce?
Its core function is to aggregate traffic data and logs from switches, firewalls, and scanners.
What is Security Information and Event Management (SIEM)?
A program operated by a vendor where rewards are given for discovering and reporting vulnerabilities.
What is a Bug Bounty?
A Layer 2 loop-prevention protocol designed to stop devastating broadcast storms.
What is Spanning Tree Protocol (STP)?
A type of malicious software that encrypts data to extort money from the victim.
What is Ransomware?
A concept in which an expanding list of transactional records is secured using cryptography.
What is Blockchain?
This system captures traffic via a packet sniffer, referred to as a sensor, to detect intrusions.
What is a Network-based IDS (NIDS)?
A vulnerability scan that is provided with a user account with log-on rights to various hosts.
What is a Credentialed Scan?
This attack overwhelms a target by withholding the final ACK packet in the TCP handshake.
What is a SYN flood attack?
Entering a secure area without authorization by following close behind an authorized person.
What is Tailgating?
This utility is used to generate private keys, CSRs, and identity certificates.
What is OpenSSL?
This protocol is widely used to query and update X.500 format directories, but operates in plaintext.
What is Lightweight Directory Access Protocol (LDAP)?
This specific type of malware performs monitoring by silently recording user keystrokes.
What is a Keylogger?
This utility uses a packet crafter like Ettercap to intercept local Layer 2 traffic.
What is ARP poisoning?
A threat actor learning a password or PIN by directly watching the user type it.
What is Shoulder Surfing?
A certificate extension field structured to represent different types of identifiers, including domains.
What is Subject Alternative Name (SAN)?
A widely used framework for network device management and monitoring.
What is Simple Network Management Protocol (SNMP)?
A rogue access point that uses a similar name (SSID) to a legitimate one to trick users.
What is an Evil Twin?
The standard public IP translation service used to map LAN traffic to the WAN edge.
What is a NAT gateway?
Acquiring a spelling variation of a company's trading name or trademark to trick users.
What is Domain Hijacking?
This type of encryption is principally used to securely share privacy-sensitive data sets.
This type of encryption is principally used to securely share privacy-sensitive data sets.
This common VPN protocol suite operates at the network layer (Layer 3) of the OSI model.
What is Internet Protocol Security (IPSec)?
An attack where the adversary has stolen a database of password hashes like the SAM or NTDS.DIT file.
What is an Offline Attack?