AP®︎ Cybersecurity: Topic 3.1 Flashcards

A weakness in network access, forwarding, addressing, wireless protection, or traffic control that an adversary may exploit

A local-network protocol that associates IP addresses with MAC addresses in an ARP table

Sending falsified ARP packets that link a target’s IP address to the adversary’s MAC address, redirecting the target’s traffic to the adversary

Faking the MAC address presented by a device, often to impersonate another device or a trusted identity

Secretly intercepting communication between two parties and copying or altering it before forwarding it, while both parties believe they communicate directly

Overwhelming a switch’s MAC address table with frames from many apparent MAC addresses, forcing frames to be broadcast and exposed for capture

Capturing, recording, or copying data in transit without authorization, without necessarily altering it

Planting a false DNS record that maps a legitimate domain to an adversary-controlled IP address and redirects users to the wrong host

Using a fake login site that imitates a real one to capture users’ genuine credentials

An attack that makes a system, service, or resource unavailable to authorized users

A DoS attack that sends ICMP requests with the victim’s spoofed source address to a broadcast address, causing many devices to flood the victim with replies

A DoS attack in which multiple devices attack the same target simultaneously

Gathering information about a network’s internal addresses, devices, services, and connections to identify targets for later attacks

Using access to one compromised device or system to reach and compromise other systems on the network

An unauthorized wireless access point connected to an internal network port, creating a wireless path into the LAN that may bypass boundary firewalls

A tool that checks networks, devices, and applications for known vulnerabilities and reports findings, severity, evidence, and recommended mitigations

Something capable of exploiting a vulnerability and causing harm

The chance that a vulnerability will be successfully exploited

The magnitude of harm that would result if a vulnerability were exploited

The combination of the likelihood of exploitation and its potential impact on organizational assets

A network risk that lets an adversary cause significant harm with relative ease, combining high likelihood with high impact

An intermediate network risk, often involving a weakness that reveals useful system information without by itself enabling severe harm

A network risk that is difficult to exploit and is likely to have only minimal negative impact

A frame broadcast by a wireless access point that announces network information such as its SSID and wireless security or encryption protocols