Scribd
Upload
11 views8 pages

Key Concepts in Cybersecurity and PKI

The document provides a comprehensive overview of various concepts in cybersecurity and distributed systems, including denial-of-service attacks, public key infrastructure, fault tolerance, and encryption methods. It discusses the roles of Certificate Authorities, multi-factor authentication, and intrusion detection systems, as well as challenges such as phishing and the domino effect in checkpointing. Additionally, it highlights the CAP theorem and the importance of cryptographic protocols in ensuring data security.

Uploaded by

ahabib6432
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
11 views8 pages

Key Concepts in Cybersecurity and PKI

The document provides a comprehensive overview of various concepts in cybersecurity and distributed systems, including denial-of-service attacks, public key infrastructure, fault tolerance, and encryption methods. It discusses the roles of Certificate Authorities, multi-factor authentication, and intrusion detection systems, as well as challenges such as phishing and the domino effect in checkpointing. Additionally, it highlights the CAP theorem and the importance of cryptographic protocols in ensuring data security.

Uploaded by

ahabib6432
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Certainly!

Here are the questions with slightly elaborated short answers:

1. What is a denial-of-service (DoS) attack?


A DoS attack is an attempt to make a machine or network resource
unavailable to users by overwhelming it with traffic or requests.
2. What role does the Certificate Authority (CA) play in PKI?
The CA issues and verifies digital certificates to ensure the authenticity of
public keys in a Public Key Infrastructure (PKI).
3. What is the main goal of fault tolerance in distributed systems?
Fault tolerance aims to allow a system to continue operating properly even
when some components fail.
4. Which consistency model guarantees that all replicas are always in
sync?
Strict consistency ensures that all replicas reflect the same data at all times.
5. What protocol is used to verify identity through a trusted third party in
distributed systems?
Kerberos is a protocol that uses a trusted third party (KDC) to authenticate
users.
6. What type of checkpointing can lead to the "domino effect"?
Uncoordinated checkpointing can lead to the domino effect, where one
rollback causes others, resulting in a system-wide rollback.
7. How can multi-factor authentication prevent unauthorized access?
By requiring multiple independent credentials (e.g., password + fingerprint), it
reduces the risk of unauthorized access.
8. Which encryption method is faster but requires secure key distribution?
Symmetric encryption is faster but needs a secure method for key sharing
between parties.
9. What is phishing in the context of cybersecurity?
Phishing is a technique where attackers trick users into revealing personal or
sensitive information using fake emails or websites.
10. What is the primary goal of CORBA in distributed systems?
CORBA aims to enable communication between software components written
in different languages and running on different systems.
11. What is the difference between symmetric and asymmetric encryption?
Symmetric encryption uses the same key for encryption and decryption, while
asymmetric uses a public-private key pair.
12. What is the function of a Certificate Authority (CA) in Public Key
Infrastructure (PKI)?
It authenticates entities by issuing digital certificates that validate public keys.
13. What is the main risk associated with password-based authentication?
Passwords can be weak, reused, or stolen, making them vulnerable to
attacks.
14. What is a key performance challenge of asymmetric encryption
algorithms?
They are computationally intensive and slower than symmetric encryption.
15. How does Kerberos authenticate users in a distributed system?
Kerberos uses tickets issued by a Key Distribution Center (KDC) to
authenticate users and services.
16. What are common methods to mitigate phishing attacks?
Use of email filters, user education, multi-factor authentication, and link
verification.
17. What is the difference between coordinated and uncoordinated
checkpointing?
Coordinated ensures consistent global state, avoiding domino effect;
uncoordinated checkpoints independently, risking inconsistency.
18. What is the main advantage of biometric authentication?
It uses unique physical traits, making it difficult to forge or steal.
19. What is a major limitation of CORBA mentioned in the report?
CORBA is complex and lacks compatibility with modern web technologies.
20. What is the purpose of checkpointing in distributed systems?
It saves the system's state periodically to enable recovery after a failure.
21. Which of the following is a challenge introduced by data replication in
distributed systems?
Maintaining consistency across all replicas.
22. What is multi-factor authentication?
An authentication method requiring two or more verification factors, like
password and fingerprint.
23. What is the purpose of a digital certificate?
To verify the identity of an entity and bind it to a public key.
24. What is the role of the Kerberos ticket granting ticket (TGT)?
TGT allows a user to obtain additional service tickets without re-
authenticating.
25. Which failure model describes a component that completely stops
responding?
Crash failure model.
26. How does the Diffie-Hellman protocol establish a shared secret?
By exchanging public values and computing a shared key using private
values.
27. What is the Object Request Broker (ORB) responsible for in CORBA?
ORB enables communication between objects in a distributed environment.
28. What does ORB stand for in CORBA architecture?
Object Request Broker.
29. Which consistency model is a balance between strong and eventual
consistency?
Causal consistency.
30. How does AWS ensure high availability in case of failure?
Through redundancy, load balancing, and automated recovery mechanisms.
31. What kind of attack involves intercepting and altering communication?
Man-in-the-middle (MITM) attack.
32. How do firewalls help secure distributed systems?
By filtering and blocking unauthorized or suspicious network traffic.
33. What are examples of biometric authentication methods?
Fingerprint, facial recognition, retina scan, and voice recognition.
34. What is a key advantage of biometric authentication?
It’s difficult to fake or duplicate biometric traits.
35. What is the main objective of intrusion detection systems (IDS) in
distributed security?
To detect and alert on malicious or suspicious activities.
36. What are the strengths of digital signatures?
They ensure message authenticity, integrity, and non-repudiation.
37. How does multi-factor authentication improve security over single-factor
authentication?
It adds extra layers, reducing the likelihood of unauthorized access even if
one factor is compromised.
38. What does MFA stand for?
Multi-Factor Authentication.
39. Which language is used in CORBA to define interfaces?
Interface Definition Language (IDL).
40. What is the role of cryptographic protocols in distributed systems
security?
They protect data confidentiality, integrity, and authenticity during
communication.
41. What is the main purpose of data replication in distributed systems?
To improve availability and fault tolerance.
42. How do digital signatures contribute to security?
They verify the sender’s identity and ensure the message was not altered.
43. What are the limitations of PKI?
PKI is complex and depends on the trustworthiness of the Certificate
Authority.
44. What is the difference between strong consistency and eventual
consistency?
Strong consistency requires immediate agreement on data across all nodes;
eventual consistency allows temporary differences.
45. What is the main advantage of the Globe architecture over CORBA?
Better scalability and flexibility for large-scale systems.
46. What are the roles of encryption in data confidentiality and integrity?
Encryption ensures only authorized users can access data and that data is
not tampered with.
47. What is the role of intrusion detection systems?
To detect, log, and alert on unauthorized or suspicious activities.
48. What cryptographic technique uses the same key for encryption and
decryption?
Symmetric encryption.
49. What is a major privacy concern associated with biometric
authentication?
Biometric data is sensitive and cannot be changed if stolen.
50. What is checkpointing used for in distributed systems?
To save system state periodically for recovery in case of failure.

51. What are the primary goals of cryptographic protocols?


To ensure data confidentiality, integrity, authentication, and non-repudiation
during communication.
52. What does the CAP theorem state?
It states that a distributed system can only guarantee two of the three:
Consistency, Availability, and Partition Tolerance—never all three
simultaneously.
53. What are the typical steps in the Diffie-Hellman key exchange process?
Both parties agree on public parameters, exchange public values, and then
compute a shared secret using their private keys.
54. What is a key limitation of Diffie-Hellman key exchange if used alone?
It lacks authentication, making it vulnerable to man-in-the-middle attacks.
55. What is the main challenge with password-based authentication?
Passwords can be guessed, stolen, reused, or weak, making them vulnerable
to breaches.
56. What are the future improvements suggested for cryptographic
protocols?
Enhancements include better efficiency, quantum resistance, and stronger
authentication mechanisms.
57. What is the main function of public key infrastructure in secure
communication?
It manages digital certificates and key pairs to enable secure communication
and identity verification.
58. What is a key advantage of asynchronous communication in distributed
systems?
It allows systems to communicate without waiting for immediate responses,
improving scalability and fault tolerance.
59. Which security threat tricks users into revealing sensitive information
through fake emails or websites?
Phishing.
60. What is the main difference between symmetric and asymmetric
encryption?
Symmetric uses one shared key; asymmetric uses a public-private key pair.
61. What is the difference between coordinated checkpointing and
uncoordinated checkpointing?
Coordinated ensures a consistent global state and avoids rollback issues;
uncoordinated can lead to the domino effect.
62. How can key management be simplified?
By using centralized key management systems, PKI, and automation tools.
63. What is the main advantage of Diffie-Hellman key exchange?
It enables secure key exchange over an insecure channel without sharing
private keys.
64. What is the role of cryptographic protocols in protecting data integrity?
They ensure that data hasn’t been tampered with during transmission using
methods like hashing and digital signatures.
65. What is a major challenge with biometric authentication?
If biometric data is stolen, it cannot be changed like a password, posing long-
term risks.
66. What is the primary goal of CORBA in distributed systems?
To allow software components to communicate regardless of language or
platform.
67. How does Kerberos rely on the Key Distribution Center (KDC)?
The KDC issues authentication and service tickets to users for secure
communication.
68. How can firewalls prevent unauthorized access?
By monitoring and controlling incoming and outgoing network traffic based on
security rules.
69. What is the difference between strong consistency and eventual
consistency?
Strong consistency provides immediate data synchronization; eventual
consistency allows temporary inconsistencies that resolve over time.
70. What is a key benefit of symmetric encryption?
It is much faster and more efficient than asymmetric encryption.
71. What role does the Certificate Authority (CA) play in PKI?
The CA verifies and certifies the ownership of public keys through digital
certificates.
72. What is the main risk associated with password-based authentication?
Passwords can be easily cracked, reused, or exposed through phishing or
data breaches.
73. How does multi-factor authentication add security?
By requiring multiple proofs of identity, it reduces the risk of unauthorized
access even if one factor is compromised.
74. What is the role of the Key Distribution Center in Kerberos?
It authenticates users and issues tickets that grant access to services.
75. What is the main objective of intrusion detection systems?
To detect, monitor, and alert on potential security threats in the system.
76. Which encryption method requires secure key distribution but is faster?
Symmetric encryption.
77. What is the main purpose of checkpointing in distributed systems?
To save the current state so that the system can recover from failures without
starting from scratch.
78. How does AWS ensure high availability?
By using redundancy, auto-scaling, failover systems, and geographically
distributed resources.
79. Which failure model describes a component that completely stops
responding?
Crash failure model.
80. What is the difference between symmetric and asymmetric encryption?
Symmetric uses a single shared key; asymmetric uses a public-private key
pair.
81. What is the main threat posed by malware in distributed systems?
Malware can disrupt services, steal data, or compromise system integrity.
82. How can phishing attacks be mitigated?
Through user education, spam filters, link verification, and multi-factor
authentication.
83. What is the primary purpose of authentication mechanisms?
To verify that a user or system is who it claims to be.
84. What is the role of digital signatures in message security?
They verify the sender's identity and ensure that the message hasn’t been
altered.
85. What is a major limitation of PKI?
The entire system relies on the trustworthiness of the Certificate Authority.
86. What is the “domino effect” in checkpointing?
It occurs when one rollback causes multiple other processes to rollback,
leading to a chain reaction.
87. How does coordinated checkpointing prevent the domino effect?
By synchronizing checkpoints across processes, it ensures a consistent state
and avoids cascading rollbacks.
88. What is the role of ORB in CORBA?
ORB facilitates communication between objects by handling method calls and
message routing.
89. What is a common feature of LINDA in distributed communication?
The use of a shared tuple space for asynchronous, decoupled communication
between processes.
90. According to the CAP theorem, which three properties cannot be
guaranteed all at once?
Consistency, Availability, and Partition Tolerance — only two can be achieved
simultaneously.

Common questions

Powered by AI

The "domino effect" in uncoordinated checkpointing occurs when a system rollback triggers a cascade of rollbacks across other processes, potentially leading to a full system rollback . Coordinated checkpointing avoids this issue by synchronizing checkpoints across processes, ensuring a consistent global state is always maintained, thereby preventing cascading rollbacks and ensuring reliable system recovery .

Maintaining consistency across replicas in a distributed system is challenging because it requires systems to manage updates in an environment that may experience network delays or failures. Achieving strict consistency, where all nodes reflect the same data at the same time, is often infeasible due to the trade-offs identified in the CAP theorem, which states a system cannot simultaneously achieve consistency, availability, and partition tolerance . Thus, systems often rely on weaker forms of consistency like eventual consistency, accepting temporary differences between replicas .

The primary role of a CA in PKI is to issue and verify digital certificates that validate the authenticity of public keys, ensuring secure and trustworthy communications . However, a major limitation of PKI is its reliance on the trustworthiness of the CA. If a CA is compromised, the entire trust model of PKI is undermined, potentially leading to widespread credential and data breaches .

The Diffie-Hellman key exchange protocol allows two parties to establish a shared secret over an insecure channel by exchanging public values and computing a shared secret using their private keys . Despite its effectiveness in establishing a secure key, it lacks an inherent authentication mechanism, making it susceptible to man-in-the-middle attacks where an attacker intercepts and alters communications without the parties' knowledge. Mitigating this vulnerability requires additional security measures such as digital signatures or public key certificates .

Digital signatures enhance message security by verifying the identity of the sender and ensuring the integrity of the message, preventing unauthorized alterations . Their inherent strengths include ensuring message authenticity and non-repudiation, meaning that the sender cannot deny having sent the message. These attributes make digital signatures crucial for secure electronic communication .

Multi-factor authentication enhances security by requiring multiple verification methods, making it harder for unauthorized users to gain access even if one factor, such as a password, is compromised . Despite its advantages, it may introduce new security risks, such as potential vulnerabilities in the second factor (e.g., SMS interception) or user inconvenience, which can lead to poor adoption rates if not designed and implemented properly .

Biometric authentication is advantageous due to its security enhancements through the use of unique physical traits that are difficult to forge . However, significant privacy concerns arise because biometric data is sensitive and immutable; it cannot be changed once compromised. This poses long-term security risks and raises concerns about user privacy, potentially affecting the widespread adoption of biometric systems, especially in situations where robust data protection policies are not in place .

Symmetric encryption is beneficial because it is faster and more efficient than asymmetric encryption, making it suitable for encrypting large volumes of data . However, it requires secure key distribution, which poses a challenge; both parties involved need to know the shared key in advance, and ensuring this key is communicated securely is a significant logistical issue. Additionally, if the key is compromised, unauthorized parties can decrypt the data .

CORBA is considered complex due to its comprehensive architecture designed to support communication between software components in a network, regardless of where they run. However, one major limitation is its incompatibility with modern web technologies, which are more dynamic and lightweight compared to CORBA's structured approach. This limits its use in environments that prioritize compatibility with evolving web standards .

The CAP theorem asserts that in a distributed system, it is impossible to simultaneously provide all three guarantees: Consistency, Availability, and Partition Tolerance. System designers must therefore choose which two of these guarantees to prioritize based on specific needs and constraints. For instance, systems prioritizing consistency and partition tolerance may sacrifice availability during network partitions, while those focusing on availability and partition tolerance might accept eventual consistency . This understanding informs trade-offs in distributed system architecture and strategy design .

You might also like