Security + Cram Guide

What port does HTTPS use?

443

What port does SSH use?

22

What port does FTP use for data transfer?

20

What port does FTP use for control?

21

Which protocol uses port 53?

DNS

What port is used for SMTP?

25

What port does IMAP use?

143

What port does POP3 use?

110

What port does RDP use?

3389

What port is used for Telnet?

23

What encryption algorithm is most common for symmetric encryption?

AES

What is the primary purpose of RSA?

Asymmetric encryption

Which hashing algorithm is considered weak?

MD5

What does HMAC provide?

Integrity and authenticity

What type of encryption uses the same key for encryption and decryption?

Symmetric encryption

What does AAA stand for?

Authentication, Authorization, Accounting

What is the purpose of SAML?

Single Sign-On (SSO)

Which factor of authentication is a fingerprint?

Something you are

What is the principle of Least Privilege?

Users only get access to what they need

What is MFA?

Multi-Factor Authentication

What type of attack injects malicious SQL statements?

SQL Injection

What is the difference between DoS and DDoS?

DDoS uses multiple systems to attack

What is a Man-in-the-Middle attack?

An attacker intercepts communication between two parties

What attack sends malicious scripts via websites?

Cross-Site Scripting (XSS)

What is phishing?

Fraudulent attempt to obtain sensitive info via email or messages

What does CIA Triad stand for?

Confidentiality, Integrity, Availability

What is the role of an IDS?

Detect malicious activity

What is the role of an IPS?

Prevent malicious activity

What does DMZ stand for in networking?

Demilitarized Zone

What is a honeypot?

A decoy system to lure attackers

Which wireless encryption is most secure?

WPA3

What is a brute force attack?

Trying all possible passwords until one works

What is rainbow table attack?

Using precomputed hashes to crack passwords

What is the function of a VPN?

Encrypt network traffic between devices

What does SIEM stand for?

Security Information and Event Management