Unit 4 Protocols and Security Frameworks Vocabulary

Vocabulary flashcards covering core protocols, security models, ISO/IEC 27001 components, and cybersecurity frameworks.

ARP

Maps a local IPv4 address to a MAC address.

ARP poisoning

Forged ARP information that redirects local traffic.

DAI

Dynamic ARP Inspection validates ARP messages against trusted binding information.

IP

Internet Protocol addresses and routes packets across networks.

ICMP

Carries network control and diagnostic messages.

NAT

Translates addresses between networks.

IPsec

A suite protecting traffic at the IP layer.

ESP

IPsec protocol 50, commonly providing encryption plus integrity/authentication.

AH

IPsec protocol 51, providing integrity/authentication without payload encryption.

TCP

Connection-oriented transport with ordered, reliable delivery.

UDP

Connectionless transport with low overhead and no delivery guarantee.

Port

A number identifying a service endpoint on a host.

DNSSEC

Authenticates DNS data using signatures; it does not encrypt DNS queries.

NIST CSF

NIST CSF 2.0 organizes cybersecurity outcomes into Govern, Identify, Protect, Detect, Respond, and Recover.

Cyber Killchain

A staged model of attack progression from reconnaissance through actions on objectives.

MITRE ATT&CK

A knowledge base of adversary tactics and techniques.

ISO/IEC 27001:2022

Requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).

ISMS scope

The boundaries and applicability of the management system, set with the organization's context, interested parties, and interfaces in mind.

Statement of Applicability (SoA)

A record of necessary controls, why they are included, whether they are implemented, and why any Annex A controls are excluded.

Annex A

The 2022 standard's reference set of 93 possible controls in organizational, people, physical, and technological groups.

Risk owner

The person or role assigned responsibility for a specific information security risk.

Residual risk

The risk that remains after the selected treatment and controls.

COBIT

ISACA's framework for governing and managing enterprise information and technology.

CIS Controls

A prioritized set of cybersecurity safeguards focused on practical defensive actions.

Regulatory obligation

A binding legal or regulatory requirement that applies because of jurisdiction, industry, data, or organizational status.

Protocol

A set of rules for how systems communicate.

DNS

Translates a domain name into information such as an IP address.

DHCP

Automatically supplies devices with IP configuration, such as an address, gateway, and DNS server.

HTTP vs. HTTPS

HTTPS carries HTTP over TLS, protecting the connection with encryption and integrity checks.

TLS

A protocol that protects data in transit and can authenticate the server.

SSH vs. Telnet

Both allow remote command access; SSH protects the connection, while Telnet sends it without that protection.

ARP vs. DNS

ARP finds a MAC address for a local IPv4 address; DNS resolves a name such as example.com.

NAT vs. encryption

NAT translates addresses. It does not make traffic confidential.

TCP/IP layer sequence

Network access, internet, transport, application.

Which layer handles IP routing?

Internet layer.

Which layer handles TCP and UDP?

Transport layer.

Which layer includes DNS and HTTP?

Application layer.

What are TCP 22, 23, 80, and 443?

SSH, Telnet, HTTP, and HTTPS, respectively.

What are port 53 and UDP 67/68?

DNS uses port 53; DHCP uses UDP 67 and 68.

What are ports 389, 636, and 3389?

LDAP, LDAPS, and RDP, respectively.

IP protocol number vs. port number

AH 51 and ESP 50 are IP protocol numbers. They are not TCP or UDP ports.

A host ignores ping, but its website loads. Is it offline?

No. ICMP echo may be blocked while the web service remains reachable.

Cyber Killchain stages

Reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives.

NIST CSF vs. Cyber Killchain vs. MITRE ATT&CK

NIST CSF organizes defensive outcomes; Killchain models attack progression; ATT&CK catalogs observed attacker behavior.

ISO 27001 vs. CIS Controls

ISO 27001 sets requirements for an ISMS; CIS Controls provide practical, prioritized safeguards.

COBIT vs. ISO 27001

COBIT addresses governance and management of enterprise information and technology; ISO 27001 specifies requirements for an information security management system.