Comptia Security+ 601 Part 1

Infecting an external DNS server with IP address' that point to a malicious site

M.A.M

C.B.C

P.K.I

Malware that takes advantage of native services & processes that are part of the OS to avoid detection

E.C.B

Group/Class of software tools with a single management interface for mobile deivces & computer devices

Red Team

Smishing

O.C.S.P Stapling - A OCSP reponse

manipulates an entire block of plaintext at one time

Forces the system to abandon the higher security mode of operation & instead fallback to implementing less secure mode

D.N.S Poisoning

Vishing

Algorithm that creates a unique digital fingerprint called a digest

Involves directly probing for vulnerabilities & useful information

Form of "cyber-squatting" which relies on bit-flip erros that occur during the process of making a DNS request

Removable external cryptographic device, based on hardware

Blowfish

Obfuscation = makes something obscure or unclear

3D.E.S

I.C.S. = collects monitors & process real-time data so that machines can directly control devices

O.S specifically designed for an SOC in a embedded or specialized system

D.E.S - Data Encryption Standard

Microsoft Document Security Implementations

M.D = Message Digest

F.P.G.A

System that controls multiple ICS'

Reconnassiance that uses tools that don't raise any alarms

X.509

R.F.C

Provides cryptographic solutions uniquely tailored to low power devices

B.Y.O.D = Buy Your Own Device

Macros = series of instructions that can be grouped together as a single command

Combines all the required electronics cirsuits of the various computer componenets on a single chip

C.I.A Triad = Confidentiality, Integrity, Availibility

E.C.C

Rootkit = Malware that hides it's presence & the presence of other malware on the computer

Team that enforces the rules of penetration testing

S.I.E.M

A.E.S

C.V.S.S

ARP Poisioning, MAC Poisioning, & MAC Cloning types of.........

Dynamic Analysis

Virus appends itself to the end of the infected, utilizes a "Jump" instruction

Wildcard Scanning = skips byte or ranges of bytes instead of looking for an exact match

Collison Attack = two files having the same digest

M.D.M

Self Signed Digital Certificate

Malicious computer code that is attached to a file

Pharming

Chip on a motherboard that provides cryptographic services

C.R.L

Shared, immutable ledger that facilitates the process of recording transactions & tracking assets in a business network

B.A.N

Team that offers real-time feedback between the Red & Blue teams

S.M.S = Short Management Service

Encryption is applied to entire disk

A.B.S.N

Malware that gives access to a computer,program, or service that circumvents any noraml security protections.

O.S.I.N.T

M.C.M

O.C.S.P-Online Certificate Staus Protocol

P.C.D

Purchasing the domain names of sites that are spelled simarily to actual sites

C.V.E

TCPdump = command line packet analyzer

Blue Team

Searching for cyber threats that thus far have gone undectected in a network

Scan that includes valid authentication credentials

Script Kiddies = High end hackers

Sha1, Sha2, Sha256, Sha384, Sha512 are types of...............

Pretexting

Enclosure that prevents the entry or escape of an electromagnetice field

D.S.A-Digital Signature Algorithm =

G.C.M

Uses same key to encrypt & decrypt the data

M.B.S.N.

Data that is used to describe the content or structure of actual data

Evil Twin, Rogue Access Point, Jamming, Disassociation attacks are......

S.E.D-Self Encrypting Drives = automatically encrypts any data stored on it

Pen Testing - Limited knowledge of the network & some elevated privelages

C.O.P.E = Corporate Owned Personally Enabled

Zero-Day Attack = attack that is released on a given date

Credential Harvesting

U.R.L Redirection = users are redirected to a different site then intended

Pen testing - no knowledge of the network & no special privileges/ attemps to penetrate the network

Types of Domain Digital Certificates

Pen Testing - Full knowledge of network & source code of applications

Changes a single character of plaintext into multiple characters of ciphertext

Command line tool for editing packets & replaying the packets back onto the network to observe their behavior

manipulates one character of plaintext at a time

Overflowing the switch w/ ethernet packets that are spoofed so that every packet contains a different source MAC address

R.A.T = Remote Automated Trojan

Three states of Data

P.R.N.G

R.C

Footprinting

A.P.T

O.T.P