Kevin logged into a banking application with his registered credentials and tried to transfer some amount from his account to Flora's account. Before transferring the amount to Flora's account, the application sent an OTP to Kevin's mobile for confirmation.
Which of the following authentication mechanisms is employed by the banking application in the above scenario?
Two-factor authentication (2FA) is a type of authentication that requires users to provide two or more forms of verification to access an online account. 2FA is a multi-layered security measure designed to prevent hackers from accessing user accounts using stolen or shared credentials. 2FA typically combines something the user knows (such as a password or PIN), something the user has (such as a phone or a token), and/or something the user is (such as a fingerprint or a face scan). In the above scenario, the banking application employs 2FA by asking Kevin to enter his registered credentials (something he knows) and an OTP sent to his mobile (something he has) before transferring the amount to Flora's account. Reference:
Improve Your Cybersecurity with Password MFA - Defense.com
What Is Two-Factor Authentication (2FA)? | Microsoft Security
Selecting Secure Multi-factor Authentication Solutions
Sarah was accessing confidential office files from a remote location via her personal computer connected to the public Internet. Accidentally, a malicious file was downloaded onto Sarah's computer without her knowledge. This download might be due to the free Internet access and the absence of network defense solutions.
Identify the Internet access policy demonstrated in the above scenario.
Which of the following environmental controls options saves the hardware from humidity and heat,
increases hardware performance, and maintains consistent room temperature?
Hot and cold aisles are a type of environmental control that saves the hardware from humidity and heat, increases hardware performance, and maintains consistent room temperature. Hot and cold aisles are a layout design for data centers, where the server racks are arranged in alternating rows of cold air intake and hot air exhaust. The cold aisle faces the air conditioner output ducts and provides cool air to the front of the servers. The hot aisle faces the air conditioner return ducts and collects the hot air from the back of the servers. This way, the hot and cold air streams are separated and do not mix, resulting in better cooling efficiency, lower energy consumption, and longer hardware lifespan. Reference:
Hot and cold aisles - Week 4: Network Security Controls: Physical Controls
Hot and Cold Aisles: The Basics of Data Center Cooling
Hot Aisle vs. Cold Aisle Containment: Which One is Best for Your Data Center?
Kevin, a security team member, was instructed to share a policy document with the employees. As it was supposed to be shared within the network, he used a simple algorithm to encrypt the document that just rearranges the same characters to produce the ciphertext.
Identify the type of cipher employed by Kevin in the above scenario.
A transposition cipher is a type of cipher that encrypts a document by rearranging the same characters to produce the ciphertext. A transposition cipher does not change the identity or frequency of the characters, but only their position. A transposition cipher can use various methods to permute the characters, such as writing them in a grid and reading them in a different order, or shifting them along a rail fence pattern. A transposition cipher is a simple and fast algorithm, but it can be easily broken by frequency analysis or anagramming. A transposition cipher is the type of cipher employed by Kevin in the above scenario, as he used a simple algorithm to encrypt the document that just rearranges the same characters to produce the ciphertext. Reference:
Transposition cipher - Wikipedia
Network Security: Transposition Cipher Techniques - Coding Streets
Network Defense Essentials (NDE) | Coursera - Module 4: Cryptography Techniques
Columnar Transposition Cipher - GeeksforGeeks
George, a professional hacker, targeted a bank employee and tried to crack his password while he was attempting to log on to the remote server to perform his regular banking operations. In this process, George used sniffing tools to capture the password pairwise master key (PMK) associated with the handshake authentication process. Then, using the PMK, he gained unauthorized access to the server to perform malicious activities.
Identify the encryption technology on which George performed password cracking.
WPA2 (Wi-Fi Protected Access 2) is an encryption technology that secures wireless networks using the IEEE 802.11i standard. WPA2 uses a four-way handshake to authenticate the client and the access point, and to generate a pairwise transient key (PTK) for encrypting the data. The PTK is derived from the password pairwise master key (PMK), which is a shared secret between the client and the access point. The PMK can be obtained either by using a pre-shared key (PSK) or by using an 802.1X authentication server. In the above scenario, George performed password cracking on WPA2, as he used sniffing tools to capture the PMK associated with the handshake authentication process. Then, using the PMK, he was able to derive the PTK and decrypt the data exchanged between the client and the access point. Reference:
How WPA2-PSK encryption works? - Cryptography Stack Exchange
WPA2 Encryption and Configuration Guide - Cisco Meraki Documentation
Audry
3 days agoLorrine
6 days agoAudria
13 days agoJeanice
19 days agoJuan
1 months agoJill
1 months agoMicheline
1 months agoAnnamaria
2 months agoTiara
2 months agoRefugia
2 months agoJolanda
2 months agoEugene
2 months agoErnest
3 months agoLouisa
3 months agoDelsie
3 months agoJuliann
4 months agoGennie
5 months agoDonte
6 months agoDorcas
6 months agoXenia
6 months agoJody
6 months agoShizue
7 months agoWeldon
8 months ago