VOLUME 1 · CHAPTER 6
Security
1Overview of Information Security35 concepts
Availability definition4 questionsSocial engineering and impersonation5 questionsCross Site Scripting2 questionsEncryption against information leakage2 questionsRecipient public-key encryption4 questionsOriginal public-key procedure3 questionsSession key cryptography1 questionOriginal session key procedure1 questionForgotten password handling1 questionIris biometric authentication1 questionMessage authentication against falsification3 questionsOriginal message digest procedure1 questionDigital signature authentication2 questionsOriginal digital signature procedure2 questionsPolicy and unified decision criteria1 questionRisk assessment in the Plan stage1 questionRisk frequency and impact analysis1 questionJPCERT/CC coordination role2 questionsTimestamp authentication1 questionTimestamp verification procedure1 questionTrojan horse disguise1 questionRisk avoidance1 questionDNS cache poisoning3 questionsBrute-force decryption-key search2 questionsPhishing1 questionOriginal malware types including bots1 questionRisk remaining after treatment1 questionKeyboard capture by a keylogger1 questionCertification authority and public keys1 questionDigital certificate contents1 questionInformation integrity and website defacement1 questionSymmetric encryption with AES1 questionPDCA security risk management1 questionSpoofing1 questionBiometric false acceptance and rejection1 question
2Information Security Measures13 concepts
Antivirus pattern matching1 questionOutbound Port 25 Blocking1 questionSSL authentication and encryption2 questionsReverse proxy server role1 questionWPA wireless LAN encryption1 questionWeb application firewall and application attacks3 questionsSPF sender domain authentication1 questionIntrusion detection and monitoring1 questionFinding exposed services by port scanning1 questionPacket filtering by addresses and ports1 questionSMTP-AUTH user authentication during sending1 questionVPN and network security techniques2 questionsCISO information-security responsibility1 question