A cloud computing technology that allows an organization to rent access to hardware.
It provides customers with access to hardware in a self-managed platform.
Customers are responsible for keeping an IaaS system up to date.
Card 102
Question
ICMP
Answer
Internet Control Message Protocol.
Used for diagnostics such as ping.
Many DoS attacks use ICMP.
It is common to block ICMP at firewalls and routers.
If ping fails, but other connectivity to a
server succeeds, it indicates that ICMP is blocked.
Card 103
Question
ID
Answer
Identification.
For example, a protocol ID identifies a protocol based on a number.
AH is identified with protocol ID number 51 and ESP is identified with protocol ID number 50.
Card 104
Question
IDS
Answer
Intrusion detection system.
A detective control used to detect attacks after they occur.
Monitors a network (NIDS) or host (HIDS) for intrusions and provides ongoing protection against various threats.
IDSs include sniffing capabilities.
Many IDSs use numbering systems to identify vulnerabilities.
Card 105
Question
IEEE
Answer
Institute of Electrical and Electronics Engineers.
IEEE is an international organization with a
focus on electrical, electronics, and information technology topics.
IEEE standards are well respected and followed by vendors around the world.
Card 106
Question
IGMP
Answer
Internet Group Management Protocol.
Used for multicasting.
Computers belonging to a multicasting group have a multicasting IP address in addition to a standard unicast IP address.
Card 107
Question
IIS
Answer
Internet Information Services.
A Microsoft Windows web server.
IIS comes free with Microsoft Windows Server products.
Linux systems use Apache as a web server.
Card 108
Question
IKE
Answer
Internet Key Exchange.
Used with IPsec to create a secure channel over UDP port 500 in a VPN tunnel.
Card 109
Question
IM
Answer
Instant messaging.
Real-time direct text-based communication between two or more people, often referred to as chat.
Spim is a form of spam using IM.
Card 110
Question
IMAP4
Answer
Internet Message Access Protocol v4.
Used to store email on servers and allow clients to manage their email on the server.
IMAP4 uses TCP port 143.
Card 111
Question
IP
Answer
Internet Protocol.
Used for addressing.
See IPv4 and IPv6.
Card 112
Question
IPS
Answer
Intrusion prevention system.
A preventive control that will stop an attack in progress.
It is similar to an active IDS except that it’s placed in-line with traffic.
An IPS can actively monitor data streams, detect malicious content, and stop attacks in progress.
It can be used internally to protect private networks, such as those holding SCADA equipment.
Card 113
Question
IPsec
Answer
Internet Protocol security.
Used to encrypt data in transit and can operate in both Tunnel mode and Transport mode.
It uses Tunnel mode for VPN traffic.
IPsec is built in to IPv6, but can also work
with IPv4. Both versions support AH and ESP.
AH provides authentication and integrity using HMAC.
ESP provides confidentiality, integrity, and authentication using HMAC and AES or 3DES.
IPsec creates secure tunnels for VPNs using UDP port 500 for IKE.
Card 114
Question
IPv4
Answer
Internet Protocol version 4.
Identifies hosts using a 32-bit IP address.
IPv4 is expressed in dotted decimal format with decimal numbers separated by dots or periods like this: 192.168.1.1.
Card 115
Question
IPv6
Answer
Internet Protocol version 6.
Identifies hosts using a 128-bit address.
IPv6 has a significantly larger address space than IPv4. IPsec is built in to IPv6 and can encrypt any type of IPv6 traffic.
Card 116
Question
IR
Answer
Incident response.
Process of responding to a security incident.
Organizations often create an incident response policy that outlines procedures and responsibilities of personnel on incident
response teams.
Card 117
Question
IRC
Answer
Internet Relay Chat.
A form of real-time Internet text messaging often used with chat sessions.
Some botnets have used IRC channels to control zombie computers through a command-and-control server
Card 118
Question
IRT
Answer
Incident Response Team.
A group of experts who respond to security incidents. Also known as CERT, CIRT, or SIRT.
Card 119
Question
IRP
Answer
Incident Response Procedure.
Procedures documented in an incident response policy.
Card 120
Question
ISA
Answer
Interconnection Security Agreement.
Specifies technical and security requirements for connections between two or more entities.
An ISA includes details on planning, establishing, maintaining, and disconnecting a secure connection between two or more entities.
How to use this set
Read the preview and check whether the content and answers suit your learning goal. You can add the public set to your sets to study it. Your account shows the available actions.