Networking & Cellular
E07 Network Security — Study Guide
This guide covers Network Security as part of Networking & Cellular. Start with the vocabulary, then try to answer each question before revealing the answer. Connect these facts to a real network or cellular connection and practice the subject in the arcade when you are ready.
Acronyms first
| Term | Meaning |
|---|---|
| ACL | Access Control List |
| IDS/IPS | Intrusion Detection / Prevention System |
Key facts
Which is NOT listed as a cause of hardware failure?
Encryption
Mislabeled cables and IP collisions from misconfiguration are examples of…
Human error
An IP collision is…
multiple devices configured with the same IP
Natural decline of hard disks and infrastructure over time falls under…
Incompatibility
Most hardware and network outages can be resolved with…
redundancy and a backup plan
Which teams typically evaluate, fix and remediate after an incident?
Incident Response Team and Incident Recovery Team
What are the three forms of access?
Physical, Technical/Logical, Administrative
Gates, guards, locks and video cameras secure which access type?
Physical
ACLs, IDS/IPS, and antivirus secure which access type?
Technical/Logical
Technical access focuses on…
Applications and Operating Systems
Information classification, training, auditing and testing secure which access type?
Administrative
Order classification levels from LEAST to MOST sensitive.
Unclassified → Confidential → Secret → Top Secret
Which classification can cause 'damage' to national security?
Confidential
Which classification can cause 'serious damage'?
Secret
Which classification can cause 'exceptionally grave damage'?
Top Secret
Unclassified is technically not a classification.
True
How many main forms of malware are listed?
7
Which malware attaches to executables and is dormant until opened?
Virus
A virus ideally wants to run in memory or in…
boot code
Which malware self-replicates machine to machine WITHOUT a host program?
Worm
Stuxnet is listed as a famous example of a…
Worm (also fileless and rootkit)
Which malware disguises itself as a harmless app and is NOT designed to replicate?
Trojan
Zeus is a famous example of a…
Trojan (also listed as a rootkit)
A keylogger is an example of…
Spyware
Pegasus is a famous example of…
Spyware
Which malware encrypts or blocks a resource and demands payment?
Ransomware
Typically when ransom is paid, access is restored.
False
Which malware lives in memory, isn't tied to files, and evades most antivirus?
Fileless malware
What removes fileless malware stored in volatile memory?
A reboot
Fileless malware is typically passed via malicious websites exploiting weaknesses in…
Java/Flash and your OS
Which malware provides persistent privileged access and hides its existence?
Rootkit
Rootkits are typically used to set up…
backdoors
Flame, Stuxnet and Zeus are named as examples of…
Rootkits
Which social engineering attack uses EMAIL to gain info or spread malware links?
Phishing
Phishing via PHONE CALLS is ____; via SMS is ____.
Vishing; Smishing
Creating a scenario to make others feel compelled to comply is…
Pretexting
Handing out free infected USB drives is…
Baiting
Following authorized personnel in WITHOUT their knowledge (foot in the door) is…
Tailgating
Convincing an authorized user to hold the door ('forgot my badge') is…
Piggybacking
Impersonating IT and trading 'a fix' for credentials is…
Quid Pro Quo
In the CIA Triad, 'ensuring data is accessed only by authorized individuals' is…
Confidentiality
In the CIA Triad, 'maintaining accuracy and trustworthiness of data' is…
Integrity
In the CIA Triad, 'reliable access when needed (uptime)' is…
Availability
A DoS attack aims to make a system…
inaccessible to its intended users
DoS/DDoS attacks are classified as…
Volumetric, Protocol-Based, Application Layer-Based
Which flood hits random ports with UDP datagrams, causing ICMP 'Destination Unreachable' replies?
UDP Flood
Which flood (a.k.a. Ping Flood) sends Echo-Requests forcing Echo-Replies?
ICMP Flood
Which Linux command replicates a ping flood?
ping -f
Which attack abuses the TCP 3-way handshake with 'half-open' connections?
SYN Flood
In a SYN flood, which message does the attacker never send?
ACK
Which attack sends a ping larger than 65,535 bytes, causing a buffer overflow on reassembly?
Ping of Death
Which attack sends Echo-Requests to a network's BROADCAST IP while spoofing the victim's IP?
Smurf Attack
Using another IP as the source to redirect replies or hide origin is…
IP spoofing
As of 2020, roughly what share of companies still relied on a Windows XP system?
About one-third
Fragmentation attacks became prevalent during the initial release of…
IPv6
Practice this module
Continue with a Networking & Cellular game. Choose this module in games that offer module selection.