Information Security and Network Defense

Comprehensive fill-in-the-blank practice flashcards covering network defense, cryptography, access controls, virtualization, firewalls, and security architecture.

In information classification, information used inside the organization that carries the lowest restriction is classified as __________.

Internal Use

Secret information available only to a very small number of people, such as trade secrets, formulas, and proprietary methods, is classified as __________.

Specialized

The three Ds of security are Defense, Detection, and __________.

Deterrence

The acronym AFAPAM, representing the six components of a security program, stands for Authority, Framework, Assessment, Planning, Action, and __________.

Maintenance

Achieving 100 percent protection is practically impossible because the attacker needs only __________ weakness, while the defender must protect against all weaknesses.

one

Security __________ is the overall proactive plan consisting of architecture, policies, and controls, while security __________ refers to day-to-day reactive practices.

strategy; tactics

The source and path through which a threat reaches its target is called a __________.

threat vector

A type of Trojan that provides remote access to a compromised computer to manipulate files, capture keystrokes, and take screenshots is called a __________.

Remote Access Trojan (RAT)

An attacker commands a group of infected zombie systems to simultaneously overload a target with traffic during a __________ attack.

Distributed Denial-of-Service (DDoS)

The harmful or damaging activity performed by malware on an infected system is called its __________.

payload

Unlike a computer virus which requires another host file or code to replicate, a computer worm can replicate using its own __________.

code

The four stages of the malicious mobile code lifecycle are Find, Exploit, Infect, and __________.

Repeat

In risk analysis, the risk formula is defined as $\text{Risk} = \text{Probability} \times \text{\_\_\_\_\_\_\_\_\_\_}$.

$$\text{Cost of Asset Damage}$$

The layered security approach that deploys multiple defensive controls around important resources is called the __________ Model.

Onion

The perimeter security model characterized by a 'hard outside and soft inside' is known as the __________ Model.

Lollipop

To prevent attackers from easily accessing virtual infrastructure, the hypervisor's __________ network should be kept completely separate from virtual machines.

management

The virtual network configuration that allows virtual machines to communicate with the host or each other without connecting directly to the physical network is __________ networking.

Host-only

The cloud computing service model that provides virtual servers, storage, and networking over the internet is called __________.

IaaS (Infrastructure as a Service)

The five consecutive phases of the Secure Development Lifecycle (SDL) are Planning and Requirements, Secure Design, Secure Coding, Security Testing, and __________.

Secure Release and Maintenance

To prevent SQL injection attacks, developers should validate user input on the server and use __________ queries instead of concatenating input directly into commands.

parameterized

In HTTP authentication, __________ authentication sends the username and password using Base64 encoding without encryption.

Basic

A physical access control mechanism that allows only one authorized person to enter at a time to prevent tailgating is called a __________.

mantrap

While a signature-detection IDS matches traffic against known attack patterns, an anomaly detection model flags suspicious activity using __________ as a baseline.

normal behavior

A __________ is installed on an individual device to detect unauthorized file changes, whereas a __________ monitors network traffic across multiple hosts.

HIDS; NIDS

A centralized platform that aggregates, correlates, and analyzes security logs and events across multiple systems is known as a __________.

SIEM (Security Information and Event Management)

In a VoIP system, a voice gateway connects to external telephone networks, while a __________ manages call routing, bandwidth, and address translation.

gatekeeper

The four fundamental properties of a Reference Monitor are: Always on, Not subject to pre-emption, Tamperproof, and __________.

Lightweight

In __________ Access Control, the resource owner grants or denies access, whereas in __________ Access Control, the security administrator controls policy and users cannot override it.

Discretionary (DAC); Mandatory (MAC)

Among operating system security models, Bell-LaPadula enforces confidentiality, while the __________ model enforces data integrity.

Biba

Microsoft's SD3+C trustworthy computing initiative consists of Secure by Design, Secure by Default, Secure in Deployment, and __________.

Communications

Traceroute maps a network route by decrementing the packet's __________ field, causing intermediate routers to return an ICMP Time Exceeded message.

TTL (Time to Live)

The three hierarchical layers defined in the Cisco Internetworking Model are the Access Layer, the Distribution Layer, and the __________ Layer.

Core

Distance-vector routing protocols commonly evaluate paths using hop count, while link-state routing protocols construct a complete map of the __________.

network topology

To prevent routing loops in distance-vector protocols, the __________ rule prevents an interface from advertising a route back out the same port from which it was learned.

split horizon

Unlike a hub which broadcasts traffic to all ports, a switch forwards packets to the appropriate port by reading connected devices' __________ addresses.

MAC

A second-generation firewall is referred to as a __________ firewall because it tracks active connections.

stateful

__________ NAT provides a fixed, one-to-one address mapping that does not change, while __________ NAT dynamically assigns available addresses from a shared public pool.

Static; Dynamic

In wireless intrusion detection, estimating the physical location of a rogue access point using triangulation typically requires __________ or more sensors.

three

In the Bluetooth protocol stack, the layer responsible for link setup, link management, authentication, and encryption is __________.

LMP (Link Manager Protocol)

While an intranet is restricted internally for employees, an __________ grants controlled access to authorized external business partners and suppliers.

extranet

During Kerberos authentication, the Key Distribution Center (KDC) authenticates the client and issues a __________ to enable subsequent service requests.

Ticket Granting Ticket (TGT)

In a stream cipher, plaintext and a keystream are combined using the __________ logical operation to produce ciphertext.

XOR

In Storage Area Networks (SANs), controlling access by physical switch port is called port zoning, whereas controlling access using the device's hardware identifier is called __________ zoning.

WWN (World Wide Name)

A one-time password generated using the current time and a shared secret key is known as a __________.

TOTP (Time-based One-Time Password)