ITST final exaam

Overview of the Final Exam

  • The final exam consists of 70 multiple choice questions designed to assess your understanding and retention of key concepts covered throughout the course.

  • Questions encompass a wide range of topics, ensuring a comprehensive review of all critical material discussed during lectures and emphasized in assigned readings.

  • A significant portion of the exam questions is derived directly from quizzes conducted in class, making it essential for students to thoroughly review these quizzes as part of their preparation.

  • It is advised to focus your study sessions on the topics listed below, keeping in mind that this is not an exhaustive list and further review may be necessary based on your individual understanding.

  • Previous quizzes are available for access on Blackboard, providing valuable insight into question formats and themes that may appear in the final exam.

  • No materials or tools, including notes or electronic devices, may be used during the final exam, necessitating full memorization and understanding of the material.

Cybersecurity Concepts

CIA Triad

  • Confidentiality: This principle emphasizes the protection of information against unauthorized access, ensuring that sensitive data remains secure.

    • Concerns:

      • Snooping/Sniffing: This involves capturing and analyzing network traffic, potentially leading to sensitive information exposure.

      • Eavesdropping: Unauthorized listening to conversations through microphones, cameras, or other means can lead to data breaches.

      • Wiretapping: This is the unauthorized monitoring of communications, affecting both wired and wireless connections.

      • Social Engineering: Techniques employed by attackers to manipulate individuals into revealing personal information, such as passwords or security questions.

      • Dumpster Diving: The act of searching through physical trash to gather sensitive information discarded improperly.

  • Integrity: This aspect ensures that data is accurate and has not been altered or tampered with in any way.

    • Concerns:

      • On-Path Attack: An attack that involves using rogue software or hardware to intercept and potentially alter data during transmission without the knowledge of the involved parties.

      • Replay Attack: This involves the capture of legitimate data transmissions, which are then sent again to gain unauthorized access.

      • Impersonation: Occurs when an individual pretends to be someone else to obtain sensitive information illicitly.

      • Unauthorized Information Alteration: Any modification made to data that can inflict damage or misrepresent critical information, like altering financial records.

  • Availability: This principle guarantees that information is accessible to authorized users whenever it is needed, preventing service disruptions.

    • Concerns:

      • Denial of Service (DoS): This attack floods a server with massive amounts of illegitimate requests, rendering it unable to respond to legitimate users.

      • Power Outages: Interruptions in power can lead to significant downtime, affecting service accessibility.

      • Hardware Concerns: Physical threats such as theft, damage, or component failures can compromise system availability.

Cryptography

  • Cryptography: This process involves creating methods of coding information to secure it from unauthorized access.

  • It involves transforming readable data into an unreadable format, thereby safeguarding information during its transmission over networks or the internet.

  • Types of Cryptography:

    • Symmetric Encryption: A method that uses the same key for both the encryption and decryption processes, commonly referred to as shared-key encryption. This method is efficient but requires secure key management practices.

    • Asymmetric Encryption (Public Key Encryption): Involves two keys—one public and one private. Data encrypted with the public key can only be decrypted by the corresponding private key, significantly enhancing security during data exchange.

Authentication Types

  • Single Factor Authentication: This method requires users to provide one piece of additional information, typically a password, to verify their identity.

  • Multi-Factor Authentication: Enhances security by requiring multiple forms of verification from different sources, such as a password, security tokens, or biometric data.

Cloud Computing Concepts

  • Types of Clouds:

    • Public Cloud: Services available over the internet, often provided by third-party vendors, accessible to any user.

    • Private Cloud: A cloud infrastructure solely dedicated to one organization, providing enhanced security and control over data.

    • Community Cloud: Shared infrastructure that serves a specific community with common interests, allowing for efficient resource sharing.

    • Hybrid Cloud: A mixed environment that integrates both public and private clouds, allowing for greater scalability and flexibility in resource allocation.

  • Levels of Cloud Services:

    • SaaS (Software as a Service): Offering software applications that are accessible via the internet, reducing the need for local installation.

    • PaaS (Platform as a Service): Provides a platform for developers to build, run, and manage applications without dealing with the underlying infrastructure.

    • IaaS (Infrastructure as a Service): Offers virtualized computing resources, like servers and storage, over the internet, providing high scalability and efficiency.

Denial of Service (DoS) Attacks

  • These attacks are executed by overwhelming a server with illegitimate requests, resulting in service interruptions for legitimate users and potential financial loss for organizations.

Software Licensing

Types of Software Licenses

  • EULA: The End-User License Agreement outlines the terms of usage for software, binding the user to specific agreements.

  • Freeware: Software available at no cost but often without access to its source code, limiting user modification rights.

  • Open Source: Software that allows users to view, modify, and distribute its source code, fostering collaboration and innovation within the community.

  • Shareware: A trial version of software that offers limited functionality but has the option to purchase a full version.

  • Single-use License: Allows a single user to utilize the software; commonly seen in personal use scenarios.

  • Concurrent License: Permits a set number of users to use the software simultaneously, beneficial for organizations.

  • Corporate, Enterprise, or Site License: Covers an entire organization, representing a cost-effective approach for larger entities using the same software.

  • Subscription License: Provides software access for a specified duration, usually involving periodic payments and updates for users.

Software Types and Examples

Business/Productivity Software

  • Word Processing: Applications like Microsoft Word and Google Docs facilitate document creation and editing.

  • Spreadsheet Software: Examples include Microsoft Excel and Google Sheets, which enable data organization and analysis.

  • Presentation Software: Microsoft PowerPoint and Google Slides are frequently used for creating visual presentations.

  • Visual Diagramming Tools: Tools like Microsoft Visio and Draw.io assist users in creating diagrams and flowcharts.

  • Database Software: Applications like Microsoft Access and Google Cloud SQL allow for structured data management and retrieval.

  • Audio/Video Editing Software: Solutions such as Adobe Photoshop and Premier Pro provide capabilities for editing media files to produce polished content.

  • Project Management Software: Tools like Microsoft Project and Trello help in organizing tasks and facilitating team collaborations.

Communication Software

  • Conferencing Software: Platforms like Zoom, Teams, and Adobe Connect enable virtual meetings and collaborations.

  • Collaboration Software: Examples include Slack and Google Drive, which foster real-time communication and document sharing.

Utility Software

  • Define Utility Software: Programs that help maintain and optimize the functionality of computer systems, including Anti-Malware and VPN services, as well as file compression tools.

Software Installation Methods

Pre-Installation Tasks

  • Review Installation Instructions: Carefully check the software's installation guide to ensure compliance with system requirements and licensing validity.

  • Verify Hardware Compatibility: Confirm that the hardware meets the necessary specifications to support the software installation.

  • Prepare for Installation: Consider disabling any anti-malware software or configuring system settings to prevent installation conflicts.

Installation Procedures

  • Desktop Software Installation:

    • Download or locate the required installation media from a reliable source.

    • Execute the setup file and follow the on-screen prompts to complete installation.

    • Register and activate the application if required to unlock full functionality.

  • Microsoft Store Applications:

    • Utilize the Microsoft Store for purchasing, downloading, and managing software applications suitable for Windows environments.

Virtualization

  • Definition: The creation of virtual versions of resources, including servers and storage devices, enabling multiple Virtual Machines (VMs) to operate independently on a single physical system, thereby maximizing resource utilization.

  • Hypervisor: A software layer responsible for managing virtual machines, allowing them to share hardware resources efficiently.

Networking Concepts

MAC vs. IP Addresses

  • MAC Address:

    • A hardware identifier that is not routable beyond its local network; cannot be used for routing data across the internet.

    • Length: 48 bits, formatted as a 12-digit hexadecimal number, for example, 00:00:0A:BB:28:FC.

  • IP Address:

    • A routable identifier that can be used across multiple networks for identifying devices on the internet.

    • IPv4: Composed of four 8-bit segments (ranging from 0-255), for example, 192.168.2.2.

    • IPv6: Comprises eight 4-digit hexadecimal segments, designed to accommodate a vastly larger number of devices, for example, 1203:8fe0:fe80:b897:8990:8a7c:99bf:323d.

Router, Switches, Hubs, and Access Points

  • Switches: Devices that manage data traffic effectively based on MAC addresses; can be either managed (configurable) or unmanaged (basic connectivity).

  • Routers: Operate to forward data packets across different networks, utilizing IP addresses to decide the best path for data to travel; pivotal in connecting LAN networks to the wider internet.

  • Hubs: Basic networking devices that operate as multiport repeaters, distributing incoming data packets to all connected devices in a star topology without intelligent routing.

  • Wireless Access Points: Devices that allow for the establishment of WiFi connections within limited spatial ranges, typically around 100 feet indoors, facilitating wireless internet access.

WiFi and Bluetooth Technologies

  • WiFi Standards:

    • Defined by IEEE 802.11 standards, these protocols specify the maximum data transfer rates and frequency bands, significantly impacting internet speed and connectivity; for example, the 802.11ac standard offers speeds exceeding 1.7 Gbps.

  • Bluetooth: A short-range wireless technology enabling personal area networks (PAN); various versions differ in their data rates and operational distance, impacting device connectivity options.

Network Interface Card (NIC)

  • A critical hardware component that connects computers and other devices to networks, typically using unique MAC addresses to facilitate communication.

Hardware Concepts

Clock Cycles and Memory Data Rates

  • It’s essential to understand the roles of primary components in computing, such as the CPU, RAM, and motherboards, and their respective performance variations.

Random Access Memory (RAM)

  • Definition: This volatile storage medium temporarily holds data and program instructions for quick access, significantly faster than traditional Hard Disk Drives (HDD).

  • Commonly referred to as DIMM for desktops and SODIMM for laptops, with distinctions in size and performance.

Central Processing Unit (CPU)

  • Function: Acts as the brain of the computer, processing instructions, managing system operations, and executing a variety of applications.

  • Major manufacturers of CPUs include Intel, AMD, and Apple, each producing a range of processors suitable for different computing needs.

Chipsets and Motherboards

  • Chipset: A crucial component that facilitates communication between various hardware parts; it is not upgradeable and determines compatibility with processors and memory.

  • Motherboard: The primary circuit board that houses the CPU, RAM, and other components; defines the overall system architecture and upgrade capabilities.

Storage Media Types

  • HDD: Mechanical hard drives connected via Serial ATA (SATA) protocols; their performance is characterized by RPM (revolutions per minute) and access speeds.

  • SSD: Solid State Drives offer superior speed and durability over HDDs, characterized by quick access times and performance measured in Input/Output Operations Per Second (IOPS).

  • Optical Disks: Traditional storage media formats such as CDs, DVDs, and Blu-rays, where performance relies heavily on read/write speeds.

  • Flash Memory: USB drives provide portable solutions for data storage, popular due to their compact size and ease of use without requiring external power.

Power Supplies

  • The power supply unit (PSU) provides the necessary DC voltages to the computer; standard form factors include ATX.

  • Differentiation between desktop and laptop power supply designs is highlighted, with emphasis on electrical safety precautions and risks involved in handling power supplies.

Malware Types

  • Viruses: Malicious programs that attach themselves to legitimate files and can disrupt system functionality.

  • Worms: Self-replicating attacks that spread through networks by exploiting vulnerabilities.

  • Trojan Horses: Malicious software that masquerades as legitimate applications to deceive users.

  • Adware: Programs that display unsolicited advertisements, often leading to compromised user experience.

  • Spyware: Software that silently gathers information from users without their knowledge.

  • Ransomware: A formidable threat that encrypts the user's data, demanding a payment to unlock it.

  • Backdoors: Malware designed to bypass regular authentication procedures, providing unauthorized system access.

  • Keyloggers: Programs that record keystrokes, commonly used to steal personal information like passwords.

Social Engineering Techniques

  • Phishing: Malicious attempts to acquire sensitive information through deceptive emails or messages.

  • Spear Phishing: Highly targeted phishing attempts aimed at specific individuals or organizations, often appearing very legitimate.

  • Whaling: Phishing attacks that specifically target high-ranking executives, often using sophisticated techniques.

  • Shoulder Surfing: The act of observing someone else's computer screen or keyboard input to gather confidential information.

  • Pharming: The redirection of users from legitimate websites to fraudulent ones without their knowledge.

  • Vishing: Voice phishing attacks that use telephone calls to extract personal information from victims.

  • Smishing: SMS-based phishing attempts to trick individuals into revealing sensitive data via text messaging.

Data Privacy Laws

  • Privacy Act of 1974: A significant piece of legislation aimed at protecting the personal information of U.S. citizens.

  • California Consumer Privacy Act (CCPA): A groundbreaking state law regarding data protection, giving consumers rights over their personal information.

  • General Data Protection Regulation (GDPR): A robust regulation enforcement in the EU, providing individuals with extensive rights regarding their data.

  • Additional federal acts include Sarbanes-Oxley Act (SOX), Federal Information Security Management Act (FISMA), Gramm-Leach-Bliley Act (GLBA), and Health Insurance Portability and Accountability Act (HIPAA), each addressing various aspects of data protection and privacy.

Number Systems in Computing

  • Decimal: A more commonly used numbering system based on ten symbols (0-9), forming the foundation of most counting systems.

  • Binary: A fundamental numbering system exclusively using two symbols (0 and 1), which is critical for computer operations and processing.

  • Hexadecimal: Utilizes sixteen symbols (0-9 and A-F); it's a compact representation of binary code, making it easier for humans to read and write compared to binary alone.

Operating Systems

Major Types

  • Linux: An open-source operating system favored for its flexibility and stability, particularly in server environments.

  • Mac OS: A proprietary operating system designed for Apple hardware, renowned for its user experience and stability.

  • Windows: The most widely used desktop operating system globally, supporting diverse computing environments from personal to enterprise-level deployments.

  • Android and iOS: Proprietary mobile operating systems that dominate the smartphone market, each offering unique features tailored to their platforms.

GUI vs. CLI

Graphical User Interface (GUI)

  • Consists of elements that can be interacted with using pointing devices (like mice), although it tends to be resource-intensive and may not provide access to all available functions.

Command Line Interface (CLI)

  • Essential for all operating systems, providing an efficient method for troubleshooting and scripting automation tasks.

  • Windows supports case awareness but not case sensitivity, differing from UNIX-based systems which are case sensitive in command inputs.

Command Line Commands

  • Essential commands like dir, cd, md, systeminfo, and ipconfig provide vital system and network information with capabilities for redirection using > for output to files.

Common File Extensions

  • .docx: Standard format for Microsoft Word documents.

  • .xlsx: Format used by Microsoft Excel for spreadsheets.

  • .pptx: Extension for Microsoft PowerPoint presentations.

  • .mp4: A versatile format for video files.

  • .pdf: Widely used for Portable Document Format files.

  • .jpg/.png: Common image file formats.

  • .mp3: Standard format for audio files.

  • .exe: Format for executable files.

  • .zip: Compressed file format for archiving.