Domain 2: Threat Actors & Motivations - Security and Networking Concepts

Vocabulary practice flashcards covering DNS attack mechanisms, DNS record types, authentication factors, network segmentation, access control lists, and system configuration concepts from Domain 2 lecture notes.

Record A

A DNS record that stands for addresses and holds the name of the computer and the IP address.

MX Record

A DNS record that stands for mail exchanger record.

CANONICAL Record (Alias record)

A DNS record that associates another name to another device to hide its true identity, hiding the identity of the real web server.

SRV Record

A Service location record that points to services on your network, such as KERBROSE.

DNS Poisoning

An attack that causes a DNS server to return an incorrect or fake IP address, redirecting users to a malicious website or server.

Watering Hole

A website created by a bad guy that looks legitimate, used to target redirected users.

DNS Cache Poisoning

An attack where corrupt or fraudulent address records are injected into a Domain Name System (DNS) resolver’s temporary cache memory.

Ipconfig /flushdns

The command executed to flush DNS.

Credential Replay Attack

An attack where an attacker uses stolen credentials over a remote access session to log in as the victim.

Authentication Factors

Categories of items used to authenticate: something you know (passwords), something you have (OTP, smartcard), something you are (biometrics), somewhere you are (location-based), and something you do.

Multi-Factor Identification

An authentication approach that requires multiple factors to authenticate, with a minimum requirement of two factors.

Segmentation

Isolating areas of a network using routers to keep segments separate; by default, segments cannot communicate unless a firewall rule is created.

Access Control List / Entry (ACL/ACE)

A collection of access control entries where permissions (Read, Write, Execute, Delete) are assigned to specify what an entity can or cannot do.

Application Allow List (White list)

A list of approved applications permitted for use on your network.

Deny List (black list)

The opposite of an allow list; specifies unapproved or prohibited applications.

Patching

The process of updating software or systems to fix vulnerabilities as part of system hardening, typically released by software developers to address issues.

Configuration Enforcement

The process of ensuring systems, applications, and devices are configured in accordance with SOP, including documenting and getting changes approved using GAP analysis and change management.

Configuration Creep

Changes that are not known or documented, such as making temporary modifications and not undoing them after fixing an issue another way.

Security Baseline

A set of configurations that must be on every machine; it is uniform across all machines and represents the minimum configuration based on security standards.