 these systems.
Question 122. What Are Foot Printing And Finger Printing?
One of the preparatory part of the attack protocol is the collection of publicly available information about a potential target,a process known as footprinting. Footprinting is the organized research of the Internet addresses owned or controlled by the target organization.
The next phase of the attack protocol is a second intelligence or data-gathering process called fingerprinting. This is systematic survey of all of the target organization’s Internet addresses(which are collected during the footprinting phase); the survey is conducted to ascertain the network services offered by the hostsin that range. Fingerprinting reveals useful information about the internal structure and operational nature of the target system or network for the anticipated attack.
Question 123. What Are Vulnerability Scanners?
Vulnerability scanners are capable of scanning networks for very detailed information.
As a class, they identify exposed usernames and groups, show open network shares, expose configuration problems, and other vulnerabilities in servers.
Question 124. Define Packet Sniffers ?
A network tool that collects copies of packets from the network and analyzes them Can be used to eavesdrop on the network traffic
To use a packet sniffer legally, you must be:
on a network that the organization owns under direct authorization of the owners of the network have knowledge and consent of the content creators (users).
Question 125. What Is Cryptography?.
Cryptography, which comes from the Greek work kryptos,meaning “hidden”,and graphein,meaning “to write”,is aprocess of making and using codes to secure the transmission of information.
Question 126. What Is Cryptoanalysis?
Cryptoanalysis is the process of obtaining the original message(called plaintext) from an encrypted message(called the ciphertext) without knowing the algorithms and keys used to perform the encryption.
Question 127. Define Encryption ?
Encryption is the process of converting an original message into a form that is unreadable to unauthorized individuals-that is,to anyone without the tools to convert the encrypted message back to its original format.
Question 128. Define Decryption ?
Decryption is the process of converting the cipher text into a message that conveys readily understood meaning.
Question 129. What Is Public Key Infrastructure (pki)?
PKI or Public Key Infrastructure
Public Key Infrastructure is the entire set of hardware, software, and cryptosystems necessary to implement public key encryption
PKI systems are based on public-key cryptosystems and include digital certificates and certificate authorities (CAs) and can:
- Issue digital certificates
- Issue crypto keys
- Provide tools to use crypto to secure information
- Provide verification and return of certificates.
Question 130. What Are The Pki Benefits ?
PKI protects information assets in several ways:
Question 131. How E-mail Systems Are Secured?
Encryption cryptosystems have been adapted to inject some degree of security into e-mail:
S/MIME builds on the Multipurpose Internet Mail Extensions (MIME) encoding format by adding encryption and authentication
Privacy Enhanced Mail (PEM) was proposed by the Internet Engineering Task Force (IETF) as a standard to function with the public key cryptosystems
PEM uses 3DES symmetric key encryption and RSA for key exchanges and digital signatures
Pretty Good Privacy (PGP) was developed by Phil Zimmerman and uses the IDEA Cipher along with RSA for key exchange.
Question 132. What Are The Seven Major Sources Of Physical Loss?
- Temperature extremes
- Living organisms
- Energy anomalies.
Question 133. What Is A Secure Facility?
A secure facility is a physical location that has been engineered with controls designed to minimize the risk of attacks from physical threats.
A secure facility can use the natural terrain; traffic flow, urban development, and can complement these features with protection mechanisms such as fences, gates, walls, guards, and alarms.
Question 134. What Are The Controls Used I