D430 Fundamentals of Information Security - Set 1 - Part 2

Correct Answer: To monitor attacker activity

A honeypot is a system deliberately configured with vulnerabilities to attract attackers, allowing security teams to observe attacker behavior and gather intelligence on potential threats.

Correct Answer: It monitors traffic patterns and connection states.

A stateful packet inspection firewall monitors the state of active connections and decides which packets to allow or block based on the state of those connections, providing more security than stateless firewalls.

Correct Answer: Wireshark

Wireshark is a popular packet sniffer and protocol analyzer used to capture and analyze network traffic in real-time, helping to identify network issues and potential security incidents.

Correct Answer: Symmetric cryptography

Symmetric cryptography uses the same key for both encryption and decryption of data, making it faster but less secure compared to asymmetric cryptography.

Correct Answer: To validate the sender's identity and ensure message integrity

A digital signature is used to verify the identity of the sender and ensure that the message has not been altered during transmission, providing both authentication and integrity.

Correct Answer: Phishing

Phishing attacks deceive users into providing sensitive information such as usernames and passwords by pretending to be a legitimate website or service.

Correct Answer: Biometric scanners

Biometric scanners are physical security controls that verify an individual's identity through unique physical characteristics such as fingerprints or retinal patterns, ensuring that only authorized personnel can access secured areas.

Correct Answer: To isolate different parts of the network to improve performance and security

Network segmentation divides a network into smaller, isolated segments to enhance security and performance, limiting the spread of malware and reducing the attack surface.

Correct Answer: A situation where multiple threads access the same resource in an unpredictable manner

A race condition occurs when multiple threads or processes try to access the same resource simultaneously, potentially leading to incorrect results or security vulnerabilities.

Correct Answer: Tailgating

Tailgating is a physical security breach where an unauthorized individual follows an authorized person through a secured access point without providing their own credentials.

Correct Answer: Brewer and Nash Model

The Brewer and Nash Model, also known as the "Chinese Wall," is an access control model designed to prevent conflicts of interest by ensuring that individuals do not have access to sensitive information from competing organizations.

Correct Answer: Hashing

Hashing generates a fixed-length output, called a hash value or message digest, from an input message. It is primarily used to verify the integrity of data by ensuring that any modification to the data would produce a different hash value.

Correct Answer: VPN

A Virtual Private Network (VPN) protects data during transmission by creating a secure, encrypted tunnel between two endpoints, preventing unauthorized access to the data in transit.

Correct Answer: US Patriot Act

The US Patriot Act was enacted to enhance law enforcement capabilities in preventing, detecting, and prosecuting terrorist activities, providing additional tools to combat terrorism.

Correct Answer: Buffer Overflow

A buffer overflow attack involves sending excessive input to a system, causing it to overwrite memory beyond its buffer limit, potentially leading to the execution of malicious code.

Correct Answer: To regulate financial practices and governance in corporations

The Sarbanes-Oxley Act (SOX) mandates transparency and accountability in financial reporting for publicly traded companies, aimed at protecting investors and the public by preventing corporate fraud.

Correct Answer: Cross-site request forgery (CSRF)

Cross-site request forgery (CSRF) exploits a user's active session on a website by tricking them into performing unauthorized actions, such as submitting forms or changing account settings, without their knowledge.

Correct Answer: Removing unnecessary services and applications

Hardening an operating system involves reducing its attack surface by removing or disabling unnecessary services, applications, and features that could be exploited by attackers.

Correct Answer: To secure data stored on devices or media from unauthorized access

Encryption of data at rest protects data stored on physical devices or media, such as hard drives or cloud storage, by converting it into an unreadable format, ensuring that only authorized users can access it.

Correct Answer: Nmap

Nmap is a widely-used network discovery and port scanning tool that helps identify open ports, services, and hosts on a network, providing valuable insights for security assessments.