Comptia Security+ 601 Part 1

Red Team

Types of Domain Digital Certificates

Evil Twin, Rogue Access Point, Jamming, Disassociation attacks are......

O.S specifically designed for an SOC in a embedded or specialized system

B.Y.O.D = Buy Your Own Device

Virus appends itself to the end of the infected, utilizes a "Jump" instruction

Pen Testing - Full knowledge of network & source code of applications

Enclosure that prevents the entry or escape of an electromagnetice field

Chip on a motherboard that provides cryptographic services

P.C.D

Data that is used to describe the content or structure of actual data

Footprinting

X.509

M.B.S.N.

Shared, immutable ledger that facilitates the process of recording transactions & tracking assets in a business network

Group/Class of software tools with a single management interface for mobile deivces & computer devices

Combines all the required electronics cirsuits of the various computer componenets on a single chip

M.D.M

O.S.I.N.T

Rootkit = Malware that hides it's presence & the presence of other malware on the computer

E.C.B

S.I.E.M

S.M.S = Short Management Service

C.I.A Triad = Confidentiality, Integrity, Availibility

Malware that takes advantage of native services & processes that are part of the OS to avoid detection

D.N.S Poisoning

D.E.S - Data Encryption Standard

Malicious computer code that is attached to a file

C.R.L

ARP Poisioning, MAC Poisioning, & MAC Cloning types of.........

Pretexting

Infecting an external DNS server with IP address' that point to a malicious site

Searching for cyber threats that thus far have gone undectected in a network

Purchasing the domain names of sites that are spelled simarily to actual sites

Provides cryptographic solutions uniquely tailored to low power devices

A.E.S

Macros = series of instructions that can be grouped together as a single command

G.C.M

Uses same key to encrypt & decrypt the data

Removable external cryptographic device, based on hardware

Three states of Data

R.A.T = Remote Automated Trojan

C.V.S.S

Changes a single character of plaintext into multiple characters of ciphertext

Pen testing - no knowledge of the network & no special privileges/ attemps to penetrate the network

A.P.T

Sha1, Sha2, Sha256, Sha384, Sha512 are types of...............

I.C.S. = collects monitors & process real-time data so that machines can directly control devices

Algorithm that creates a unique digital fingerprint called a digest

R.C

S.E.D-Self Encrypting Drives = automatically encrypts any data stored on it

Obfuscation = makes something obscure or unclear

C.V.E

Pharming

Microsoft Document Security Implementations

Collison Attack = two files having the same digest

F.P.G.A

Team that enforces the rules of penetration testing

Overflowing the switch w/ ethernet packets that are spoofed so that every packet contains a different source MAC address

Blowfish

O.C.S.P-Online Certificate Staus Protocol

Credential Harvesting

TCPdump = command line packet analyzer

manipulates an entire block of plaintext at one time

Self Signed Digital Certificate

Dynamic Analysis

C.B.C

M.A.M

Forces the system to abandon the higher security mode of operation & instead fallback to implementing less secure mode

O.C.S.P Stapling - A OCSP reponse

Vishing

B.A.N

R.F.C

System that controls multiple ICS'

Blue Team

Pen Testing - Limited knowledge of the network & some elevated privelages

Command line tool for editing packets & replaying the packets back onto the network to observe their behavior

Form of "cyber-squatting" which relies on bit-flip erros that occur during the process of making a DNS request

Malware that gives access to a computer,program, or service that circumvents any noraml security protections.

Smishing

P.R.N.G

Reconnassiance that uses tools that don't raise any alarms

manipulates one character of plaintext at a time

Script Kiddies = High end hackers

3D.E.S

Zero-Day Attack = attack that is released on a given date

Encryption is applied to entire disk

Involves directly probing for vulnerabilities & useful information

D.S.A-Digital Signature Algorithm =

C.O.P.E = Corporate Owned Personally Enabled

Team that offers real-time feedback between the Red & Blue teams

U.R.L Redirection = users are redirected to a different site then intended

A.B.S.N

O.T.P

M.C.M

P.K.I

M.D = Message Digest

Wildcard Scanning = skips byte or ranges of bytes instead of looking for an exact match

Scan that includes valid authentication credentials

E.C.C