Tag: security

A denial-of-service attack on servers on a network

Hacking into a router

A virus outbreak saturating network capacity

A man-in-the-middle attack

On the network perimeter, to alert the network administrator of all attack attempts

On network segments with business-critical systems

At the network operations center (NOC)

At an external service provider

Fiber optics provides higher bandwidth.

Fiber optics are more difficult to wiretap.

Fiber optics are immune to wiretap.

None — the two are equivalent; network security is independent from the physical layer.

Using an obscure SSID to confuse and distract an attacker

Not using any SSID at all to prevent an attacker from connecting to the network

Not broadcasting an SSID to make it harder to detect the WLAN

None of the above

Users using peer-to-peer file-sharing networks for breaches of intellectual property

PCs connected permanently to the Internet are prone to receive more spam mails, thereby increasing the risk for the user to become infected with viruses and Trojans.

PCs will become infected with dialers on DSL lines (run over telephony lines), thereby exposing the user to almost limitless financial risk

Home computers that are not securely configured or maintained and are permanently connected to the Internet become easy prey for attackers

Lack of authentication of servers, and thereby authenticity of records

Its latency, which enables insertion of records between the time when a record has expired and when it is refreshed

The fact that it is a simple, distributed, hierarchical database instead of a singular, relational one, thereby giving rise to the possibility of inconsistencies going undetected for a certain amount of time

The fact that addresses in e-mail can be spoofed without checking their validity in DNS, caused by the fact that DNS addresses are not digitally signed

All configuration information should be documented

The end users are not normally a part of the process.

Configuration decisions have security implications.

Documentation should be placed under secure version control

Social engineering

Weak authentication controls

Ticket-granting server authorization

Voice recognition software

Data entry

Database administration

Change management

Network management

Single point of failure

Asymmetric key compromise

Use of dynamic passwords

Limited lifetimes for authentication credentials