Lesson 16: Configuring SOHO Network Security

It is called when the attacker uses a rogue wireless access point to try to harvest credentials

Is the practice of controlling access to data that is in any format, including both computer data and paper records

DDoS means that the attacks are launched from multiple compromised systems, referred to as a botnet

Make spoofed electronic communications seem authentic to the victim

If a private key is used to encrypt something in the Asymmetric encryption, only the private key can then decypt it.

Social Engineering technique similar to tailgating where the attacker enters a secure area with an employee's permission

Tailgating is entering a secure area with authorization by following closely behind the person authorized

Malicious code that can use a vulnerability to compromise a host is called

Secure information has three properties Confidentiality, Integrity and Availability (CIA)

Refers specifically to controls that protect against attacks on computer storage and processing systems.

This attack is used to redirect users to websites where attackers can steal data from them

Weakness that could be accidentally triggered or intentionally exploited to cause a security breach

A vulnerability that is exploited before the developer knows about it or can release a patch is called "Zero-Day"

Social Engineering techinque that obtains document/information that the company has thrown away

Is the potential for someone or something to exploit a vulnerability and breach security

Is an attack directed specifically against supper levels of management in the organization (CEO)

It's an example of an on-path attack

The attacks are used to steal information from databases

Is the likelihood and impact (or consecuence) of a threat actor exercising a vulnerability

Social Engineering technique where the threat actor learns a password or PIN by watching the user type it

Techniques that persuades/intimidate people into revealing confidential information that should not have been authorized

Symmetric encryption only operates efficiently on data that is smaller that the key size.

An attack that causes a service at a given host to fail or to become unavailable to legitimate users