CompTIA Security+ Exam Notes

CompTIA Security+ Exam Notes
Let Us Help You Pass

Saturday, October 26, 2024

Understanding Vishing: The Voice Phishing Threat

 Vishing

"Vishing" is a term used for "voice phishing," a type of cybercrime in which attackers use phone calls to trick victims into revealing sensitive personal information, like credit card numbers or login details, by pretending to be a legitimate company or authority figure over the phone; essentially, it's phishing conducted through voice calls instead of email.

Method:

Attackers often use caller ID spoofing to make it appear that they are calling from a trusted source, such as a bank or credit card company.

Goal:

To obtain sensitive information from the victim by using deceptive tactics and social engineering.

Example scenario:

A scammer might call, claiming to be from a bank's fraud department, and ask the victim for credit card details to "verify" a suspicious activity.

ifconfig Basics: Viewing and Modifying Network Settings on Linux/macOS

 Ifconfig (Linux)

ifconfig (short for interface configuration) is a command-line utility used in Unix-like operating systems, including Linux, macOS, and BSD, to configure, control, and query network interface parameters. Here are some key points about ifconfig:

Functionality: It allows users to set IP addresses, subnet masks, and enable or disable network interfaces. It can also be used to view the current configuration of network interfaces.

Usage: Common commands include ifconfig to display all active interfaces, ifconfig [interface] up to enable an interface, and ifconfig [interface] down to disable an interface.

Deprecation: In many modern Linux distributions, ifconfig has been deprecated in favor of the ip command from the iproute2 package, which offers more features and better support for modern networking needs.

Incremental vs. Differential Backups: A Breakdown of Key Differences

 Incremental vs. Differential Backups

The main difference between incremental and differential backups lies in what data they back up and how they handle changes:

Incremental Backup

What it Backs Up: only the data that has changed since the last backup (whether full or incremental).

Backup Speed: Generally faster because it only backs up the most recent changes.

Storage Space: Requires less storage space since each backup contains only the changes made since the last backup.

The restore process is slower and more complex. It requires the last full backup and all subsequent incremental backups to restore the data.

Differential Backup

What it Backs Up: All the data has changed since the last full backup.

Backup Speed: Slower than incremental backups because it backs up more data each time.

Storage Space: Requires more storage space over time as each differential backup grows larger until the next full backup.

Restore Process: This process is faster and simpler, as it only requires the last full backup and the most recent differential backup to restore the data.

Summary

Incremental backups are more efficient regarding backup time and storage space but can be slower to restore.

Differential backups take more time and space for backups but offer quicker and simpler restoration.

Ensuring Data Safety with Regionally Diverse Backups

 Regionally Diverse Backups

Regionally diverse backups, also known as geo-redundant backups, are used to protect data and ensure business continuity in the event of a disaster:

Disaster recovery

By storing data in multiple regions, backups can be used to recover from a disaster and reduce downtime.

Compliance

Backups can be stored in different geographical locations to meet compliance requirements.

Data migration

Regionally diverse backups can migrate data from one region to another.

Resiliency

Backups in multiple regions can help ensure that workloads can continue to run even if one region experiences an outage.

Some examples of regionally diverse backups include:

AWS Backup: Allows customers to copy backups across multiple services to different regions.


Understanding NFC: The Power of Near Field Communication

 NFC (Near Field Communication)

NFC stands for Near Field Communication, a short-range wireless technology that allows devices to exchange information when they are a few centimeters apart. NFC is used in a variety of ways, including:

Contactless payments: NFC-enabled credit cards or mobile wallets can wirelessly communicate with a payment terminal to send encrypted payment information.

Data exchange: NFC can be used to share small amounts of data, such as photos, music, or videos, between two devices.

Connecting to devices: NFC can be used to connect to wireless devices, such as connecting a toy to a video game.

Tracking inventory: NFC can be used to track inventory by scanning products.

Accessing coupons: NFC can be used to access coupons by scanning in-store signs.

NFC is more power-efficient than Bluetooth and is best suited for applications where devices need to be in close proximity.

To check if your device has NFC capabilities, you can look at the backplate of your device.

APT Explained: Efficient Software Management for Linux

 APT (Advanced Package Tool)

APT, or Advanced Package Tool, is a package management system used in Debian-based Linux distributions like Ubuntu, Debian, and Linux Mint. It simplifies the process of installing, updating, and removing software packages. Here are some key points about APT:

Functionality: APT is a front-end to the lower-level dpkg package manager, handling .deb packages. It can automatically resolve dependencies, ensuring that all required packages are installed.

Repositories: APT uses repositories, which are directories that store collections of software packages. These repositories can be local or remote and are accessed over a network.

Commands: Common APT commands include apt update (to update the package list), apt upgrade (to upgrade all installed packages), apt install (to install new packages), and apt remove (to remove packages).

APT is a powerful tool that makes managing software on Linux systems straightforward and efficient.

YUM Explained: Managing Software Packages on Linux

 yum (Yellowdog Updater, Modified)

YUM, or Yellowdog Updater, Modified, is a free, open-source tool that manages software packages for Linux systems:

What it does

YUM can install, update, remove, and query RPM software packages from official and third-party repositories. It can also automatically resolve dependencies during installation.

How it works

YUM is a front-end for the RPM package manager. It stores packages in software repositories or repos. Repos can be local or remote, and users can access them over a network connection.

How to use it

YUM has a command-line interface, but other tools provide graphical user interfaces. For example, to update all packages in the system, you can run the command yum update. To update only security-related packages, you can run the command yum update --security.

History

YUM was originally a rewrite of Yellowdog UPdater (YUP), a software updater for Yellow Dog Linux. A newer version of YUM called Dandified YUM (DNF) has replaced YUM as the default package manager in Fedora and Red Hat Enterprise Linux.