Module 5 Lesson 1.2

Module 5 Lesson 1.2

By Miranda Cauldwell

Multiple Choice

Which property of secure information is compromised by snooping?

• Confidentiality

• Integrity

• Availibality

Man in the Middle

where a host sits between two communicating nodes and transparently monitors capture and relay all communications between them.

​

A MitM may be able to change the messages exchanged between a sender and receiver without them realizing. To protect against this, senders and receivers must authenticate themselves and use encryption to validate messages.

​​Integrity Concern

Replay

where a host captures another host's response to some server and replays that response in an effort to gain unauthorized access.

Replay attacks often involve exploiting an access token generated by an application. The application needs to use encryption and time-stamping to ensure that the tokens cannot be misused.

​Integrity Concern

Impersonation

a common attack is where a person will attempt to figure out a password or other credentials to gain access to a host.

​

The attacker can then hijack the authorizations allocated to the account and generally masquerade as that user. There are numerous ways to perform impersonation attacks, but an obvious one is to capture password packets in transit and work out which bit the password is

​Integrity Concern

Multiple Choice

Which property of secure information is compromised by man in the middle?

• Confidentiality

• Integrity

• Availibality

Multiple Choice

An attacker has used a rogue access point to intercept traffic passing between wireless clients and the wired network segment. What type of attack is this?

• man in the middle

• dumpster diving

• replay

• impersonation

Availability

Availability means keeping a service running so that authorized users can access and process data whenever necessary. Availability is often threatened by accidents and oversights as well as active attacks.

​

Availability Concern

Availability Concerns- DOS

​•Denial of Service (DoS)—this is any situation where an attacker targets the availability of a service. A DoS attack might tamper with a system or try to overload it in some way.

On the web, a Distributed Denial of Service(DDoS) uses hosts compromised with bot malware to launch a coordinated attack against a web service. The size of the botnet determines how easily the attacker can overwhelm the service.

​

Availability Concern

Multiple Choice

What does AAA stand for?

• Authentication, Authorization, Accounting

• Availability, Action, Accounting

• Action, Authority, Availability

Multiple Choice

A user has noticed that his email password has been compromised. This user is concerned that their social media and banking accounts are vulnerable now. Why would this be?

• password reuse

• snooping

• phishing

• social engineering

Multiple Choice

A regulation for a company is to have their finger prints scanned upon entering. Which concept is this?

• authentication

• accounting

• integrity

• confidentiality

Multiple Choice

DDos uses what to overwhelm a system?

• botnets

• MiM

• snooping

• wiretapping

Multiple Choice

Single point failures can be protected by what?

• fault tolerance

• authentication

• accounting

• authorization

Multiple Select

How can we protect again power failures?

• back ups

• redundant power options

• generators

• redundant circuits

Multiple Choice

A company finds their trash has been ripped upon overnight. What type of concern would this be?

• dumpster diving

• shoulder surfing

• wiretapping

• snooping

Multiple Choice

A Florida business is preparing for a hurricane and needs to backup data incase of power outages and loss. What type of plan is this?

• disaster recovery

• business continuity

• redundancy

• contigency