Mike Meyer s Network+ N10-008 #Under Construction Exam Study Guide with Complete Solutions Latest Updated Encryption - Correct Answer Process of converting readable data into unreadable characters to prevent unauthorized access.Integrity - Correct Answer The process that guarantees that the data received is the same as originally sent. Useful for situations when someone intercepts your data on-the-fly and makes changes.Nonrepudiation - Correct Answer Means that a person can't deny he/she/they took a specific action Authentication - Correct Answer verifying the identity of the person or device attempting to access the system Authorization - Correct Answer The process of giving someone permission to do or have something in regards to the data access Cleartext - Correct Answer The unencrypted form of data. Also known as plaintext Cipher - Correct Answer the generic term for a technique (or algorithm) that performs encryption Ciphertext - Correct Answer A string of text that has been converted to a secure form using encryption.Symmetric Key Encryption - Correct Answer Encryption system in which a single key is used for both encryption and decryption.asymmetric key encryption - Correct Answer Encryption system in which two keys are used: a public key used only to encrypt data, and a private key used only to decrypt it.Block Cipher - Correct Answer An encryption algorithm in which data is encrypted in "chunks" of a certain length at a time. Popular in wired networks. 1 / 4
Advanced Encryption Standard (AES) - Correct Answer A block cipher created in the late 1990s that uses a 128-bit block size and a 128-, 192-, or 256-bit key size. Practically uncrackable.Stream Cipher - Correct Answer An encryption method that encrypts a single bit at a time. Popular when data comes in long streams (such as with older wireless networks or cell phones).public key cryptography - Correct Answer uses two keys: A public key the sender uses to create encrypted messages, and a mathematically-related private key that the receiver can use to decrypt messages encrypted by that public key.RSA Encryption - Correct Answer RSA (Rivest-Shamir-Adleman) is the most common internet encryption and authentication system. The system used an algorithm that involves multiplying two large prime numbers to generate a public key, used to encrypt data and decrypt an authentication, and a private key, used to decrypt the data and encrypt an authentication.DSA (Digital Signature Algorithm) - Correct Answer public key encryption standard used for digital signatures that provides authentication and integrity verification for messages.ECDSA (Elliptic Curve Digital Signature Algorithm) - Correct Answer An asymmetric system which relies on a private key in the authenticator and a public key that the host uses to verify the authenticator.hash function - Correct Answer a function that you run on a string of binary digits of any length that results in a value of some fixed length.File hashing - Correct Answer Method for ensuring information validity. Involves a file being read by a special algorithm that uses the value of the bits in the file to compute a single large number called a hash value.digital signature - Correct Answer an encrypted code that a person, website, or organization attaches to an electronic message to verify the identity of the message sender Certificate - Correct Answer a standardized type of file that includes a public key, info about the certificate, and the digital signature of a trusted third party 2 / 4
Trusted third party - Correct Answer a person or a company that vouches for the identity of whoever requested the certificate Certificate Authority (CA) - Correct Answer An entity trusted by one or more users as an authority in a network that issues, revokes, and manages digital certificates.Root authority - Correct Answer A certification authority that has no higher authority to vouch for it. The authority is at the top of a certification hierarchy.Public Key Infrastructure (PKI) - Correct Answer System for creating public and private keys using a certificate authority (CA) and digital certificates for authentication.Local Authentication - Correct Answer A login screen prompting a user to enter a user name and password to log into a Windows, macOS, or Linux computer.Biometrics - Correct Answer the identification of a user based on a physical characteristic, such as a fingerprint, iris, face, voice, or handwriting multifactor authentication (MFA) - Correct Answer To use more than one method to authenticate access to a computer, network, or other resource.Network Access Control (NAC) - Correct Answer A technique that examines the current state of a system or network device before it is allowed to connect to the network.Access Control List (ACL) - Correct Answer A clearly defined list of permissions that specifies what actions an authenticated user may perform on a shared resource.Mandatory Access Control (MAC) - Correct Answer every resource is assigned a label that defines its security level. If the user lacks that security level, they don't get access Discretionary Access Control (DAC) - Correct Answer The least restrictive access control model in which the owner of the object has total control over it. 3 / 4
Role-Based Access Control (RBAC) - Correct Answer A control system in which access decisions are based on the roles of individual users as part of an organization Point-to-Point Protocol (PPP) - Correct Answer Enables two devices to connect, authenticate with a username and password, and negotiate the network protocol the two devices will use User Authentication - Correct Answer the process of authenticating a username and password Password Authentication Protocol (PAP) - Correct Answer A form of authentication in which clear text usernames and passwords are passed Challenge Handshake Authentication Protocol (CHAP) - Correct Answer Performs one-way authentication. However, authentication is performed through a three-way handshake (challenge, response, and acceptance messages) between a server and a client. The three-way handshake allows a client to be authenticated without sending credential information across a network.Man-in-the-middle - Correct Answer A security attack in which network communication is intercepted in an attempt to obtain key data Accounting - Correct Answer Logging events such as logins, session action, user bandwidth usage etc.Remote Authentication Dial-In User Service (RADIUS) - Correct Answer One of the AAA standards that's used to support ISPs with hundreds of modems in hundreds of computers to connect to a single central database. Uses UDP port 1812 or 1645 and uses UDP ports 1813 and 1646 for accounting.TACACS (Terminal Access Controller Access Control System) - Correct Answer Used by Cisco devices to support AAA in a network with many routers and switches. Uses TCP port 49 and separates authorization, authentication, and accounting into different parts.Kerberos - Correct Answer An authentication protocol for TCP/IP networks with many clients all connected to a single authenticating server without the need for PPP. Uses UDP or TCP port 88
- / 4