Hands on security concepts including networking, cryptography, and defense in depth tested on the GIAC Security Essentials exam.
39 cards · basic cards · AI-written, checked twice. Edit anything.
- What is the fundamental principle that uses multiple layers of security controls instead of relying on a single defense?
- Defense in depth
- What type of firewall maintains information about the state of network connections and makes decisions based on connection context?
- Stateful firewall
- What encryption method uses the same key for both encryption and decryption?
- Symmetric encryption
- What encryption method uses a public key to encrypt and a private key to decrypt?
- Asymmetric encryption
- What cryptographic function produces a fixed-length output from any input and is designed to be one-way?
- Hash function
- What network device monitors traffic and alerts or blocks suspicious activity based on known patterns and rules?
- Intrusion detection system (IDS)
- What is the name of the security model centered on three core principles: Confidentiality, Integrity, and Availability?
- CIA triad
- What security principle restricts users to the minimum access they require to perform their job?
- Least privilege
- What is a control that requires different people to authorize or perform critical tasks to prevent fraud?
- Separation of duties
- What cryptographic technique uses a random value added to passwords before hashing?
- Salt
- What is a precomputed table of hash values for commonly used passwords?
- Rainbow table
- What security measure divides a network into separate segments to limit lateral movement?
- Network segmentation
- What is a demilitarized zone (DMZ) in network security?
- A separate network segment that sits between internal networks and the internet to isolate public-facing services
- What technology creates an encrypted tunnel between two networks or devices over an insecure network?
- Virtual Private Network (VPN)
- What does a proxy server do in a network?
- Acts as an intermediary between clients and servers, forwarding requests and responses