AP®︎ Cybersecurity: Topic 3.2 Flashcards

A management-established policy, standard, or required procedure stating what must be protected and the minimum conditions systems must meet

The minimum security requirements that every covered device or service must satisfy, even when stronger protections are added

A policy setting the minimum router configuration, such as centralized login, disabled unnecessary services, and an approved firewall

An account stored and authenticated on a network device itself; router and switch policies may ban these in favor of a centralized authentication server

Turning off every network service that lacks an approved operational purpose to reduce a device’s attack surface

An insecure remote command-line service that inadequately protects sessions and credentials and should be disabled on routers

A policy setting the minimum switch configuration, commonly including centralized administrator authentication, port security, and MAC filtering

Restrictions on the devices or number of MAC addresses permitted through a switch port

Permitting or denying network access according to listed MAC addresses; it is supplementary because MAC addresses can be spoofed

A protected connection through an untrusted network that allows a remote user to access an organization’s internal network

A policy specifying who may use a VPN, required authentication methods such as keys or MFA, and whether split tunneling is prohibited

A policy setting minimum wireless authentication, encryption, and beacon-broadcasting requirements

A framework supporting network-access authentication methods, commonly linking wireless infrastructure to an approved authentication server

A symmetric encryption algorithm that a wireless policy may require for all wireless traffic, along with a minimum permitted key length

Authentication determines who may join the network; encryption makes intercepted wireless traffic unreadable without the required key

Stopping a wireless access point’s ordinary advertisements to reduce discovery of the network and its properties without providing authentication or encryption

Positioning or selecting an access point and antenna so wireless coverage is directed toward the intended physical area

The access point’s transmission power, set to the minimum level that reliably covers the intended area without unnecessary external exposure

An obsolete wireless encryption protocol with known vulnerabilities that should not be used

An obsolete wireless security protocol that improved on WEP but has known vulnerabilities and is now insecure

A simplified wireless joining mechanism with known vulnerabilities that should be disabled on a protected organizational network

The strongest current wireless security protocol covered by the course and the preferred choice for protected wireless networks

Sending some traffic through a VPN while other traffic goes directly to another network; policies may prohibit it to prevent simultaneous trusted and untrusted connections and force traffic through organizational controls