SEC401 Study Guide

SEC401 Study Guide

1. Virtual Sprawl: Condition in an operating environment where number of virtual machines exceed number that can be managed or secured effectively. 2. VM EscapeTactics: Use of compromised Guest OS to escape sandbox and take over other Guest OS or hypervisor 3. Hypervisor: Software that runs on a physical computer and manages one or more virtual machine operating systems. 4. Defense in Depth: A defense that uses multiple types of security devices to protect a network. Also called layered security. 5. Middleware: Several different types of software that sit between and provide connectivity for two or more software applications 6. Net Flow: Cisco product that collects and monitors network traffic. 7. Protected Enclaves: An approach to defence-in-depth that involves segmenting your network using multiple VPNs, VLAN segmentation, switches, or firewalls to separate out networks. Reducing the exposure of a system can greatly reduce risk. Restricting access to critical segments. 8. Least Privilege: Providing only the minimum amount of privileges necessary to perform a job or function. 9. Whitelisting: a process in which a company identifies acceptable software and permits it to run, and either prevents anything else from running or lets new software run in a quarantined environment until the company can verify its validity 10. CSMA/CD: Short for carrier sense multiple access with collision detection. It is the method for multiple hosts to communicate on a Ethernet. 11. Layer 1: Physical Layer 12. Layer 2: Data Link Layer 13. Layer 3: Network Layer 14. Layer 4: Transport Layer 15. Layer 5: Session Layer - Setup, maintain, and break down a dialog session between two applications, controls the dialog organization and synchronization 16. Layer 6: Presentation Layer - Format the data into standardized format and deals with the syntax of data, not the meaning 17. Layer 7: Application Layer: Enables user and applications to access network services (#) 18. CDP: Cisco Discovery Protocol 19. CDP Manipulation: Exploit of CDP traffic to compromise network devices 20. XSS: Cross-site scripting. It scripting allows an attacker to redirect users to malicious websites and steal cookies.E-mail can include an embedded HTML image object or a JavaScript image tag as part of a malicious cross-site scripting attack. Websites prevent cross-site scripting attacks with input validation to detect and block input that include HTML and JavaScript tags. Many sites prevent the use of < and > characters to block cross-site scripting.