Networking and Cybersecurity Fundamentals
Réviser ces flashcardsGratuit · répétition espacée · iPhone, Android, Mac et web
Toutes les cartes
1
What is the difference between TCP and UDP?
TCP provides reliable, ordered delivery; UDP is connectionless and doesn't guarantee delivery.
2
An attacker intercepts a JWT signed with HS256 and changes the role claim from user to admin. Will the attack work? Explain why or why not.
Normally No, Modifying the payload invaldiates the HMAC signature which the server recomputes using its shared secret
3
Q: How do you stop an attacker who stole a valid JWT?
Revoke affected tokens and sessions, invalidate refresh tokens, and require reauthentication
4
Q: Does issuing a new JWT invalidate an old stolen JWT?
5
What is the TCP three-way handshake?
SYN → SYN-ACK → ACK establishes a TCP connection.
6
What is the difference between a TCP SYN scan and a connect scan?
A SYN scan uses a partial handshake; a connect scan completes the TCP handshake.
7
What do open, closed, and filtered ports mean?
Open = accepting connections; closed = reachable but not listening; filtered = blocked or obscured by filtering.
8
What is DNS?
DNS translates domain names into records such as IP addresses.
9
What is ARP?
ARP resolves IPv4 addresses to MAC addresses on a local network.
10
What is ARP spoofing?
Forging ARP messages to redirect local traffic, potentially enabling MITM attacks.
11
What is a man-in-the-middle attack?
An attacker intercepts or alters communication between two parties.
12
What is the difference between IDS and IPS?
IDS detects suspicious traffic; IPS can also block it.
13
What is network segmentation?
Separating networks to restrict communication and reduce lateral movement.
14
What is the difference between stateful and stateless firewalls?
Stateful firewalls track connections; stateless firewalls evaluate packets against rules independently.
15
What is the difference between vulnerability scanning and penetration testing?
Scanning identifies potential weaknesses; pentesting manually validates exploitability and impact.
16
What is service enumeration?
Gathering information about exposed services, versions, configurations, and accessible resources.
17
What is SMB signing and why is it important?
It authenticates SMB messages and helps prevent tampering and certain NTLM relay attacks.
18
What would you do after discovering port 445 open?
Identify SMB details, enumerate authorized shares, review permissions, and test relevant misconfigurations.
19
What is symmetric encryption?
Encryption that uses the same shared secret key for encryption and decryption.
20
What is asymmetric cryptography?
Cryptography using a public/private key pair for operations like signatures and key exchange.
21
What is the difference between encryption and hashing?
Encryption is reversible with a key; hashing produces a one-way digest.
22
What is salting in password hashing?
Adding a unique random value to each password before hashing to prevent identical hashes and precomputed attacks.
23
What is HMAC?
A keyed hash used to verify message integrity and authenticity.
24
How is HMAC used in challenge-response authentication?
One party computes an HMAC of a fresh challenge; the verifier checks it using the shared key.
25
What is a digital signature?
A private-key signature that verifies the signer's identity and detects message modification.
26
What is a digital certificate?
A digitally signed document that binds an identity to a public key.
27
What is a Certificate Authority (CA)?
A trusted entity that validates identities or domain control and signs certificates.
28
What is a certificate chain of trust?
Server certificate → intermediate CA → trusted root CA.
29
How does a browser validate a TLS certificate?
It checks the certificate chain, signatures, hostname, validity, and relevant constraints.
30
How does TLS 1.3 establish secure communication?
It uses key exchange to derive symmetric keys and certificates/signatures to authenticate the server.
31
Why does TLS use symmetric encryption after the handshake?
Symmetric encryption is efficient for protecting application data.
32
What happens if certificate validation is disabled?
The client may trust an impersonating server, enabling MITM attacks.
33
What is Perfect Forward Secrecy?
Past session traffic remains protected even if the server's long-term private key is later compromised.
Plus de flashcards : Informatique
Lesson 2.1 Online Spatial Data Sources Informatique · AnglaisDekanoMixed Signals Prelim Drei YuInformatique · AnglaisDiandreiMemory Management – Page Fault & Page ReplacementInformatique · Anglais—Griffith—SRA researchInformatique · AnglaisIanInheritance, Composition, & Data EfficInformatique · AnglaisNijelousComputer Architecture: Instruction EncodingInformatique · AnglaisSamSecurity+ SY0-701Informatique · AnglaisErickNetzwerktechnik: 11 Formeln mit BeispielenInformatique · AllemandsgSoftware Development 2: Sociotechnical SystemsInformatique · AnglaisEdsonComputers in society:2Informatique · AnglaisCal section 1 -componets of a computer Informatique · AnglaisDsoboWeek 12 & 13 Spreadsheet Study GuideInformatique · AnglaisSg
Révise ces decks dans l’app
Gratuit sur iPhone, Android, Mac et le web. Ajoute n’importe quel deck à ton compte en un tap.
