PMP Exam Prep, Sixth Edition: Rita’s Course in a Book for Passing the PMP Exam (Perfect Paperback)
Review
Rita’s book is boon to men and women preparing to take PMI’s certification examination. –J. Davidson Frame, Ph.D., PMP and Past PMI Director of Certification
Can you imagine valuing a book so much that you send the author a Thank You letter? Hundreds of thousands of project managers understand why PMP Exam Prep by Rita Mulcahy, PMP, is a worldwide best-seller. Is it Rita’s years of PMP exam preparation experience? The endless hours of ongoing res (more…)
PMP Review Notes (Chapter 1) – What is Project Management?
Project Management
- Brings together a set of tools and techniques – performed by people – to describe, organize and monitor the work of project activities
- According to PMBOK Guide: involves applying knowledge skills, tools and techniques during the course of the project to accomplish the project’s objective; it is the responsibility of the project manager to ensure that project management techniques are applied and followed
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – More Protocols
Host-to-Host Transport Layer Protocols
TCP – Transmission Control Protocol
- Connection oriented
- Sequenced packets
- Acknowledgement is sent back for received packets
- If no acknowledgement then packet is resent
- Packets are re-sequenced
- Manageable data flow is maintained
Note: TCP and UDP use dynamic port numbers greater than 1023
PMP Review Notes (Chapter 1) – Projects Defined
Projects
- Temporary in nature
- Have definite start dates and definite end dates
- Completed when goals and objectives are accomplished to the satisfaction of the stakeholders
- Exist to bring about a product, service, or result that didn’t exist before
- Unique
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Protocols – Continued
Data Encapsulation
- The process in which information from one packet is wrapped around or attached to the data of another packet
- In the OSI model each layer encapsulates the layer immediately above it
OSI Layers
- Process down the stack and up the stack
- Each layer communicates with corresponding layer through the stack
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Protocols
Protocols – a standard set of rules that determines how computers communicate with each other across networks despite their differences
Layered architecture
- Shows how communication should take place
- Clarify the general functions of a communication process
- To break down complex networking processes into more manageable sub-layers
- Using industry standard interfaces enables interoperability
- To change the features of one layer without changing the code in every layer
- Easier troubleshooting Read more
Do People Still Fall For This?
I still regularly get communication like the one below from wives of presidents, sons of billionaires, daughters of a wealthy sheik, etc. and saying that with my help I can be an instant millionaire. The words in the message slightly vary, but the message is pretty much the same. This scam, commonly known as the “Nigerian Sam”, has been going on even before e-mail became widely widespread, but after all these years and after all the media exposure it has received, one would think folks would no longer fall for it and perhaps the scammers will change their tactics.
Well as illustrated in the e-mail below, and from the tons of similar e-mails I have received, it doesn’t look like the tactic have changed at all. I wonder if people still fall for them, since nothing changed on the bad guys side.
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Key Concepts and Other Definitions
Rainbow Series
The Rainbow Series (sometimes known as the Rainbow Books) is a series of computer security standards published by the United States government in the 1980s and 1990s. They were originally published by the U.S. Department of Defense Computer Security Center, and then by the National Computer Security Center.
These standards describe a process of evaluation for trusted systems. In some cases, U.S. government entities (as well as private firms) would require formal validation of computer technology using this process as part of their procurement criteria. Many of these standards have influenced, and have been superseded by, the Common Criteria. Read more
Yeah Boy! Yah Suck! – David Pogue | Microsoft
This week’s, Yeah Boy!!!
I don’t know if you’ve heard of David Pogue, New Technology Columnist for NyTimes.Com. His website is aptly named: DavidPogue.com. I first got turned on to him (no he did not turn me on 
) when he did the keynote for a marketing conference I attended in Las Vegas about 2 years ago. The man has proven that he had the gift for writing, the gift of gab, he delivers his stuff in a very down-to-earth and funny fashion (both in text and in speech) and as he demonstrated in that keynote speech, he got musical skills, too. He explained that Music was actually his major in college and becoming one of the most recognized and respected tech reviewer in the web today is quite a feat indeed. Read more
CISSP Exam Note (Domain 2: Telecommunications and Networking Security) – Session Hijacking
In computer science, session hijacking refers to the exploitation of a valid computer session—sometimes also called a session key—to gain unauthorized access to information or services in a computer system. In particular, it is used to refer to the theft of a magic cookie used to authenticate a user to a remote server. It has particular relevance to web developers, as the HTTP cookies used to maintain a session on many web sites can be easily stolen by an attacker using an intermediary computer or with access to the saved cookies on the victim’s computer (see HTTP cookie theft).
TCP session hijacking is when a hacker takes over a TCP session between two machines. Since most authentication only occurs at the start of a TCP session, this allows the hacker to gain access to a machine. Read more
Join Me On Facebook
Business Tech Press Releases- ConvergEx Offers Eze OMS Clients Access to LiquidPoint's Latest Options Execution and Routing Technologies March 11, 2010
- NI Technology Updates Outlooks for Microvision, Towerstream, National Semiconductor, TriQuint Semiconductor and RF Micro Devices March 11, 2010
- Fund.com Forms Strategic Alliance With Transparensee to Create Next Generation Search Engine for Mutual Funds and ETFs March 11, 2010
- Allion Test Labs Selects LeCroy USB 3.0 Test Suite for Complete SuperSpeed USB Compliance Testing March 11, 2010
- High Gear Media Launches All-New Used Car Listings Marketplace March 11, 2010
- From the National Vulnerbility Database
- CVE-2010-0958 (tribisur) March 9, 2010Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from third party information. […]nvd@nist.gov
- CVE-2010-0957 (saskias_shopsystem) March 9, 2010Directory traversal vulnerability in content.php in Saskia's Shopsystem beta1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter. […]nvd@nist.gov
- CVE-2010-0947 (bbsmax) March 9, 2010Cross-site scripting (XSS) vulnerability in post.aspx in Max Network Technology BBSMAX 3.0, 4.1, and 4.2 allows remote attackers to inject arbitrary web script or HTML via the action parameter. […]nvd@nist.gov
- CVE-2010-0956 (opencart) March 9, 2010SQL injection vulnerability in index.php in OpenCart 1.3.2 allows remote attackers to execute arbitrary SQL commands via the page parameter. […]nvd@nist.gov
- CVE-2010-0949 (natychmiast-cms) March 9, 2010Multiple cross-site scripting (XSS) vulnerabilities in Natychmiast CMS allow remote attackers to inject arbitrary web script or HTML via the id_str parameter to (1) index.php and (2) a_index.php. […]nvd@nist.gov
- CVE-2010-0955 (bild_flirt_community) March 9, 2010SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. […]nvd@nist.gov
- CVE-2010-0791 (ncpfs) March 9, 2010The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. […]nvd@nist.gov
- CVE-2010-0954 (pre_e-learning_portal) March 9, 2010SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter. […]nvd@nist.gov
- CVE-2010-0103 (duo_usb) March 9, 2010UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777. […]nvd@nist.gov
- CVE-2010-0953 (phpcoin) March 9, 2010Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the mod parameter. […]nvd@nist.gov
- CVE-2010-0958 (tribisur) March 9, 2010