GISP: GIAC Information Security Professional Certification

A proxy server is designed to intercept and relay requests between internal clients and external services, effectively standing in for the client when communicating with the Internet. It can perform functions such as caching content, filtering requests, masking the client's IP address, and enforcing access policies — all characteristic of acting as an intermediary. In contrast, a firewall filters traffic based on security rules rather than acting as a go-between for service requests, while DNS and WINS servers merely perform name resolution and do not mediate communication sessions between clients and external services.

Attempting a DNS zone transfer is a classic reconnaissance technique, where an attacker tries to obtain a complete copy of a DNS zone (including all hostnames, IP addresses, and subdomains) to map out the target's network infrastructure before launching further attacks. This activity falls under the reconnaissance phase of the attack lifecycle, as it involves gathering information about the target rather than exploiting a vulnerability directly.

Employees are considered the most probable source of asset loss from computer misuse because they already possess authorized access to organizational systems, applications, and data. This inherent trust and access level makes it easier for employees—whether through negligence, error, or intentional misconduct—to cause loss of confidentiality, integrity, or availability of assets, compared to outsiders (hackers), who must first overcome external defenses to gain access, or visitors and customers, who typically have minimal or no direct access to internal computing resources. Security risk models used in frameworks such as CISSP's asset security domain emphasize that insider threats, including employees, represent the largest and most consistent risk category for asset loss due to inappropriate computer use.

A power regulator controls and stabilizes voltage, helping keep the power supplied to equipment steady and clean.

A switch uses the destination MAC address in a received Ethernet frame to look up the appropriate outgoing port in its MAC/CAM table and forward the frame toward its destination.