What is the primary goal of security techniques in computing resources?
Protecting digital assets from evolving cyber threats
Security techniques range from traditional to advanced methods.
Name the key areas of application security.
- Input validation
- Secure cookies
- Static and dynamic code analysis
- Code signing
- Sandboxing
These areas aim to prevent, detect, and remediate security vulnerabilities.
What does NAC stand for in network security?
Network Access Control
NAC protects networks by assessing the security status of devices before granting access.
True or false: WPA3 is the latest and most secure wireless security protocol.
TRUE
WPA3 introduces new features for enhanced security, including simultaneous authentication of equals.
Fill in the blank: WPA2 uses the _______ protocol for stronger encryption.
AES
AES stands for Advanced Encryption Standard, which is used in WPA2 for secure wireless communication.
What are the types of web filtering techniques mentioned?
- Agent-Based Web Filtering
- Centralized Proxy
- URL Scanning
- Content Categorization
- Block Rules
- Reputation-Based Filtering
These techniques help control or restrict internet content access.
What is the purpose of input validation in application security?
Ensures applications process well-defined, secure data
It guards against attacks exploiting data input vulnerabilities like SQL injection.
What does DMARC stand for in email security?
Domain-based Message Authentication, Reporting and Conformance
DMARC helps detect and prevent email spoofing by setting policies for email handling.
Name the protocols used for email security.
- DKIM
- SPF
- DMARC
These protocols protect email content and accounts from unauthorized access.
What is the function of RADIUS in network security?
Offers Authentication, Authorization, and Accounting services
RADIUS is widely used for secure access to network resources.
What is the significance of Wireless Access Point (WAP) placement?
Influences network range, coverage, and security
Proper placement prevents unauthorized access by limiting signal leakage.
What are the types of interference that can affect Wireless Access Points?
- Co-Channel Interference
- Adjacent Channel Interference
These interferences occur when multiple WAPs use the same channels or overlapping frequencies.
What does EAP stand for in authentication protocols?
Extensible Authentication Protocol
EAP supports multiple authentication methods and provides common functions.
What is the role of sandboxing in application security?
Isolates running programs to limit access to resources
Sandboxing prevents harmful actions on the host device or network.
Fill in the blank: WEP stands for _______.
Wired Equivalent Privacy
WEP was introduced in 1999 and is considered insecure due to its weak encryption.
What are the benefits of DKIM in email security?
- Email authentication
- Protection against email spoofing
- Improved email deliverability
- Enhanced reputation score
DKIM adds a digital signature to email headers for integrity verification.
What is the purpose of static code analysis (SAST)?
Identifies issues like buffer overflows and SQL injection before running the program
SAST is important for proper input validation in both front-end and back-end code.
What does AAA stand for in network security?
Authentication, Authorization, and Accounting
AAA protocols are important for centralized user authentication and access control.
What is the function of email gateways?
Facilitate secure and efficient email transmission
Email gateways handle routing, security, policy enforcement, and encryption.
What is a Cloud-Based Email Gateway?
Hosted by third-party cloud service providers, providing scalability but limited control over configurations
This type of gateway allows organizations to leverage cloud resources for email security.
What is a Hybrid Email Gateway?
Combines on-premises and cloud-based gateways for a balance between control and convenience
This approach allows organizations to utilize both local and cloud resources.
What is the purpose of Spam Filtering?
Detects and prevents unwanted and unsolicited emails from reaching users’ inboxes
Techniques include content analysis, Bayesian filtering, DNS-based sinkhole list, and email filtering rules.
Name the techniques used in Spam Filtering.
- Content analysis
- Bayesian filtering
- DNS-based sinkhole list
- Email filtering rules
These techniques help identify and manage spam emails.
What does Endpoint Detection and Response (EDR) focus on?
Monitoring endpoint and network events and recording the information in a central database
EDR continuously monitors for advanced threats.
-
Fundamentals of Security46
-
Threat Actors22
-
Physical Security19
-
Social Engineering17
-
Malware19
-
Data Protection18
-
Cryptographic Solutions53
-
Risk Management17
-
Third-party Vendor Risks17
-
Governance and Compliance19
-
Asset and Change Management27
-
Audits and Assessments26
-
Cyber Resilience and Redundancy38
-
Security Architecture34
-
Security Infrastructure39
-
Identity and Access Management (IAM) Solutions56
-
Vulnerabilities and Attacks47
-
Malicious Activity38
-
Hardening32
-
Security Techniques37
-
Vulnerability Management31
-
Alerting and Monitoring32
-
Incident Response28
-
Investigating an Incident16
-
Automation and Orchestration28
-
Security Awareness27
