Security Techniques

Question 1

Involves multiple wireless access points working together to create a unified and extended coverage area for users in a large building or facility

Answer 1

Extended Service Set Configuration

Question 2

Occurs when the channels selected for adjacent wireless access points do not have enough space between the channels

Answer 2

Adjacent Channel Interference

Question 3

Process of planning and designing a wireless network to provide a solution

Answer 3

Site Survey

Question 4

Graphical representation of the wireless coverage, the signal strength, and frequency utilization data at different locations on a map

Answer 4

Heat Map

Question 5

Outdated 1999 wireless security standard meant to match wired LAN security for wireless networks

Answer 5

WEP

Question 6

Introduced in 2003 as a temporary improvement over WEP while the more robust IEEE 802.1 I standard was in development

Answer 6

WPA

Question 7

Improved data protection and network access control by addressing weaknesses in WPA version

Answer 7

WPA2

Question 8

Latest version using SAE encryption and introducing new features like SAE, Enhanced Open, updated cryptographic protocols, and management protection frames

Answer 8

WPA3

Question 9

Enhances security by offering a key establishment protocol to guard against offline dictionary attacks

Answer 9

SAE

Question 10

Major enhancement in wireless security, especially for networks using open authentication.

Answer 10

Enhanced Open/Opportunistic Wireless Encryption (OWE)

Question 11

Uses a newer variant of AES known as the AES GCMP

Answer 11

Cryptographic Protocol

Question 12

Support 128-bit AES for personal networks and 192-bit AES for enterprise networks with WPA3

Answer 12

Galois Counter Mode Protocol (GCMP)

Question 13

Required to protect network from key recovery attacks

Answer 13

Management Protection Frames

Question 14

Plays a vital role in network security by centralizing user authentication to permit only authorized users to access network resources

Answer 14

AAA Protocol

Question 15

Separates the functions of AAA to allow for a more granular control over processes

Answer 15

TACACST+

Question 16

Confirm user identity for network security and authorized access

Answer 16

Authentication Protocols

Question 17

Critical aspect of software development that focuses on building applications that are secure by design

Answer 17

Application Security

Question 18

Acts as a gatekeeper to ensure that applications only act on well-designed and uncontaminated data

Answer 18

Input Validation

Question 19

These rules delineate acceptable and unacceptable inputs

Answer 19

Validation Rules

Question 20

Small pieces of data stored on the user’s computer by the web browser while browsing a website

Answer 20

Cookies

Question 21

Transmitted over secure HTTPS connections to prevent potentials to prevent potential eavesdroppers from intercepting the cookie data

Answer 21

Secure Cookies

Question 22

A method of debugging an application by reviewing and examining its source code before the program is ever run

Answer 22

Static Code Analysis (SAST)

Question 23

Testing method that analyzes an application while it’s running

Answer 23

Dynamic Code Analysis

Question 24

Finds software flaws by bombarding it with random data to trigger crashes and security vulnerabilities

Answer 24

Fuzzing

Question 25

Type of software testing that evaluates the stability and reliability of a system under extreme conditions

Answer 25

Stress Testing

Question 26

Technique used to confirm the identity of the software author and guarantee that the code has not been altered or corrupted since it was signed

Answer 26

Code Signing

Question 27

Security mechanism that is used to isolate running programs by limiting the resources they can access and the changes they can make to a system

Answer 27

Sandboxing

Question 28

Scans devices for their security status before granting network access, safeguarding against both known and unknown devices

Answer 28

NAC

Question 29

A software installed on a device requesting network access

Answer 29

Persistent Agent

Question 30

Users connect to Wi-Fi, access a Web portal, and click a link for login in these solutions

Answer 30

Non-Persistent Agent

Question 31

Technique used to restrict or control the content a user can access on the internet

Answer 31

Web Filtering

Question 32

Installing a small piece of software known as an agent on each device that will require web filtering

Answer 32

Agent-based Web Filtering

Question 33

Server that acts as an intermediary between an organization's end users and the internet

Answer 33

Centralized Proxy

Question 34

Used to analyze a website URL to determine if it is safe or not to access

Answer 34

URL Scanning

Question 35

Websites are categorized based on content, like social media, adult content, or gambling, which are frequently restricted in workplaces

Answer 35

Content Categorization

Question 36

Specific guidelines set by an organization to prevent access to certain websites or categories of websites

Answer 36

Block Rules

Question 37

Blocking or allowing websites based on their reputation score

Answer 37

Reputation-based Filtering

Question 38

Technique used to block access to certain websites by preventing the translation of specific domain names to their corresponding IP address

Answer 38

DNS Filtering

Question 39

Allows the receivers to check if the email was actually sent by the domain if claims to be sent from and if the content was tampered with during transit

Answer 39

DomainKeys Identified Mail (DKIM)

Question 40

An email-validation system designed to detect and prevent email spoofing

Answer 40

DMARC

Question 41

Server or system that serves as the entry and exit point for emails

Answer 41

Email Gateway

Question 42

Physical server that is located within an organization's own data center or premises that provides an organization with full control over their email suystem

Answer 42

On-Premise Email Gateway

Question 43

Email gateway that is hosted by third-party cloud service providers to provide greater scalability and ease of maintenance

Answer 43

Cloud-Based Email Gateway

Question 44

Used to combine the benefits of both on-premise and cloud-based gateways into a single offering

Answer 44

Hybrid Email Gateway

Question 45

Process of deleting unwanted and unsolicited emails and preventing them from reaching a user's email inbox

Answer 45

Spam Filtering

Question 46

Category of security tools that monitor endpoint and network events and record the information in a central database

Answer 46

Endpoint Detection and Response (EDR)

Question 47

Used to validate the integrity of OS and application software files using a verification method between the current file state and a known, good baseline

Answer 47

File Integrity Monitoring

Question 48

Security strategy that integrates multiple protection technologies into a single platform to improve detection accuracy and simplify the incident response process

Answer 48

Extended Detection and Response (XDR)

Question 49

Deploys big data and machine learning to analyze user behaviors for detecting security threats

Answer 49

User Behavior Analytics (UBA)

Question 50

Built upon the foundation of UBA with monitoring of entities as an additional function

Answer 50

User and Entity Behavior Analytics (UEBA)

Question 51

Refers to the way data is moved from one place to another, usually using either TCP or UDP to transmit the data

Answer 51

Transport Mode

Question 52

Connection-oriented protocol that ensures data is delivered without any errors

Answer 52

TCP

Question 53

Connection-less protocol that desn't guantee data delivery

Answer 53

UDP

Question 54

Used by system processes or services and consist of ports ranging from port 0 to port 1023

Answer 54

Well-known Ports

Question 55

Used by software applications and utilze a port number between 1024 and 49151

Answer 55

Registered Ports

Question 56

Used for client-side connections that range from port number 49152 to 65535

Answer 56

Dynamic/Private Ports

Question 57

Application layer protocol that allows a user on one computer to log onto another computer that is part of the same network

Answer 57

Telnet

Question 58

Network protocol for securely connecting and communicating with remote devices and systems over an unsecured newtwork

Answer 58

Secure Shell (SSH)