Logical Security

Question 1

What are the 5 tasks of IAM?

Answer 1

Identity and Access Management (IAM):
- Create and deprovision accounts
- Manage accounts
- Audit accounts
- Evaluate identity-based threats
- Maintain compliance

Question 2

What are the 5 subjects that can have user accounts?

Answer 2

• Personell
• Endpoints
• Servers
• Softwares
• Roles

Question 3

What are the 5 types of factors for MFA?

Answer 3

• Knowledge: Username, Password etc.
• Possesion: Smart Card, Key etc
• Inherence: Fingerprints, Retina Scan
• Action: How you sign your name
• Location: Geotagging, Geofencing

Question 4

What are the 8 most important types of authentication?

Answer 4

1. Local Authentication
2. Ligthweight Directory Access Protocol (LDAP)
3. Kerberos
4. Single Sign-On (SSO)
5. Security Assertion Markup Language (SAML)
6. RADIUS
7. TACACS+ (Cisco only)
8. Time Based Authentication / OTP

Question 5

What are the 3 types of access control policies?

Answer 5

• Discretionairy Access Control (DAC): The owner of a ressource decides who has access
• Mandatory Access Controll (MAC): Different access levels are defined, you can access a ressource if you have the same or a higher level
• Role Based Access Control (RBAC): Different roles are created like Sales, HR, IT etc.

Question 6

What are the 3 states of data?

Answer 6

• Data at rest
• Data in transit/motion
• Data in processing

Question 7

What 4 security features does IPSec provide and how?

Answer 7

1. Confidentiality: By using data encryption
2. Integrity: By ensuring data wasnt modified through hashes
3. Authentication: Verify each party is who they claim to be
4. Anti-Replay: By checking sequence numbers on packets

Question 8

What are the 5 steps of the IPSec tunnel creation?

Answer 8

1. Key Exchange Request
2. Internet Key Exchange (IKE) Phase 1
3. Internet Key Exchange (IKE) Phase 2
4. Data Transfer
5. Tunnel Termination

Question 9

What is the Diffie-Hellman Key Exchange?

Answer 9

It allows two systems that dont know each other to excahnge keys and then trust each other. This happens by creating a shared secret key.

Question 10

Whats the difference between Transport and Tunneling Mode in IPSec?

Answer 10

Transport Mode: Uses packets original IP header, best for Client-to-Site VPNs

Tunneling Mode: Encapsulates the entire packet and puts another header on it. Thats best for Site-to-Site VPNs.

Question 11

What are the AH and ESP in IPSec?

Answer 11

The Authentication Header (AH) provides connectionless data integrity and protection against replay attacks.

The Encapsulating Security Payload (ESP) provides authentication, integrity, replay protection and data confidentiality.

Question 12

What is PKI?

Answer 12

Public Key Infrastructure (PKI) is the system used to create Public/Private Key Pairs used in assymetric encryption.

Question 13

What are self-signed certificates?

Answer 13

Certificates that are issued by the same person it validates, thus they dont give a lot of trust but are mostly used for encryption or personal use.