Sec Ops Analyst Quiz

Question 1 of 100

1

What is a Trojan?

Select one of the following:

a. Backdoor malware
b. Virus
c. Worm

Explanation

Question 2 of 100

1

What technique does Zberb use to remain invisible on a system?

Select one of the following:

a. Adding values in the registry
b. Steganography
c. Exe wrapping

Explanation

Question 3 of 100

1

How can malware infections be prevented?

Select one of the following:

a. Using antiviruses and personal IDS
b. Using an up-to-date operating system
c. Using KeyScrambler

Explanation

Question 4 of 100

1

How should you check your system for infection?

Select one of the following:

a. Using checksum method to check file integrity
b. Using malware scanners
c. Checking for suspicious looking files and network connections

Explanation

Question 5 of 100

1

What is the use of a DoS attack Trojan?

Select one of the following:

a. Make a remote service unavailable to legit users
b. Transfer information and files
c. Provide remote access

Explanation

Question 6 of 100

1

A tool to monitor file integrity is:

Select one of the following:

a. Tripwire
b. Netcat
c. HiJackThis

Explanation

Question 7 of 100

1

Which is a port monitoring tool?

Select one of the following:

a. Carberb
b. CM tool
c. Sigcheck

Explanation

Question 8 of 100

1

Which tool is used for sniffing a network?

Select one of the following:

a. Billy Bastard
b. Ophcrack
c. Cain and Abel

Explanation

Question 9 of 100

1

How is a salted password validated?

Select one of the following:

a. Retrieve the salt and hash from the database; Append the salt and the hash again with the same algorithm; Check for the resulting password hash, match or not
b. Check for the resulting password hash, match or not; Retrieve the salt and hash from the database; Append the salt and the hash again with the same algorithm
c. Append the salt and the hash again with the same algorithm; Check for the resulting password hash, match or not; Retrieve the salt and hash from the database

Explanation

Question 10 of 100

1

Which utility is used for a hash insertion attack?

Select one of the following:

a. Kerbcrack
b. NTPASSWD
c. iKey 2032

Explanation

Question 11 of 100

1

On which system do alternate data streams work?

Select one of the following:

a. FAT
b. NTFS
c. Ext4

Explanation

Question 12 of 100

1

What is steganography?

Select one of the following:

a. Data encryption technique
b. Data hiding technique
c. File infection technique

Explanation

Question 13 of 100

1

Steganography can be used as a substitute for which encryption values?

Select one of the following:

a. symmetric
b. asymmetric
c. one-way hash

Explanation

Question 14 of 100

1

Using alternate data streams negatively impacts the file.

Select one of the following:

True
False

Explanation

Question 15 of 100

1

What type of encryption does NTLM use?

Select one of the following:

a. Symmetric
b. Asymmetric
c. One-way hash

Explanation

Question 16 of 100

1

How can an MD5 hash be cracked?

Select one of the following:

a. Brute-force attack
b. Rainbow table attack
c. Dictionary attack

Explanation

Question 17 of 100

1

For what purpose is the pass-the-hash technique used?

Select one of the following:

a. To bypass Syskey
b. To bypass Windows normal login
c. To crack a password hash

Explanation

Question 18 of 100

1

How can password guessing be prevented?

Select one of the following:

a. Using long passwords
b. Using alphanumeric passwords with both uppercase and lower¬case letters
c. Using Syskey and storing key on an external drive
d. All of these

Explanation

Question 19 of 100

1

Which of the following operating systems employs Kerberos authentication?

Select one of the following:

a. Windows 2000
b. Windows NT SP3
c. Windows 98

Explanation

Question 20 of 100

1

Which of the following is not true about Certification Authority?

Select one of the following:

a. It is a third party that issues digital certificates
b. It is a third party that encrypts information for people
c. CA validates the identity of the certificate holder

Explanation

Question 21 of 100

1

Which of the following are rootkit functionalities?

Select one of the following:

a. To hide OS processes
b. To elevate the privileges of processes
c. To hide files or registry entries
d. To delete or audit logs
e. All of the above

Explanation

Question 22 of 100

1

Which process stage does not verify or try to exploit the vulnerability, just lists and ranks the identified weaknesses?

Select one of the following:

a. Vulnerability assessment
b. Vulnerability scan

Explanation

Question 23 of 100

1

How can rootkits be prevented?

Select one of the following:

a. By using updated antivirus
b. By using anti-rootkits
c. By reinstalling the operating system

Explanation

Question 24 of 100

1

Which is the strongest password among these?

Select one of the following:

a. Password
b. Airplane
c. P@5S\/\/OrD

Explanation

Question 25 of 100

1

What is the maximum length of a LanMan Hash?

Select one of the following:

a. 32
b. 14
c. 127

Explanation

Question 26 of 100

1

Which is a non-technical type of social engineering attack?

Select one of the following:

a. Fake calling as a technician and asking the victim for system details
b. Phishing
c. Infecting the victim with malware

Explanation

Question 27 of 100

1

What is the correct order of the challenge-response process of Windows authentication?

Select one of the following:

a. Response, login request, result, challenge
b. Challenge, login request, response, result
c. Login request, challenge, response, result
d. Result, challenge, login request, response

Explanation

Question 28 of 100

1

What is needed to successfully crack an FTP password?

Select one of the following:

a. A good word list
b. A Windows system
c. Syskey

Explanation

Question 29 of 100

1

What is a good password policy to implement in an organization?

Select one of the following:

a. Do not use old passwords
b. Change your passwords every 2 weeks
c. Do not use a dictionary word
d. All of these

Explanation

Question 30 of 100

1

In which file are Windows passwords stored?

Select one of the following:

a. Boot.ini file
b. SAM file
c. Hosts file
d. None of these

Explanation

Question 31 of 100

1

Which tool can be used to crack a Windows password protected with Syskey?

Select one of the following:

a. BKhive
b. Cain and Abel
c. LC4

Explanation

Question 32 of 100

1

Which is the best hardware to crack a password?

Select one of the following:

a. Using a system CPU
b. Using a powerful GPU
c. Using high network bandwidth

Explanation

Question 33 of 100

1

What type of password hash is this: 2ea886556a3a225a18bf4bcc425486db ?

Select one of the following:

a. SHA
b. MD5
c. DES

Explanation

Question 34 of 100

1

Which of these is not a countermeasure against attacks?

Select one of the following:

a. Use self-encrypting drives
b. Disable the storage of the LM hash
c. Disable the LM authentication
d. None of these

Explanation

Question 35 of 100

1

Which tools can be used to sniff traffic on a network?

Select one of the following:

a. L0phtcrack
b. Cain and Abel
c. TSGrinder

Explanation

Question 36 of 100

1

How can LM hash storage be disabled?

Select one of the following:

a. By creating a Group Policy Object
b. By using BitLocker
c. By using kerbcrack.exe

Explanation

Question 37 of 100

1

What type of authentication protocols does Windows support?

Select one of the following:

a. LM
b. NTLM
c. NTLMv2
d. All of these

Explanation

Question 38 of 100

1

Which of the following are tools that can be used to extract hidden data using steganography?

Select one of the following:

a. Stegdetect
b. Cain and Abel
c. Stream Explorer

Explanation

Question 39 of 100

1

A hash injection attack is possible due to?

Select one of the following:

a. Network access
b. Physical access
c. Viruses and backdoors

Explanation

Question 40 of 100

1

Which utility is used for hash injection attacks?

Select one of the following:

a. Kerbcrack
b. NTPASSWD
c. iKey 2032

Explanation

Question 41 of 100

1

Which of the following .exe of a Trojan is executed on a victim machine?

Select one of the following:

a. Builder.exe
b. Server.exe
c. Client.exe

Explanation

Question 42 of 100

1

SigCheck is a download offered by Microsoft.

Select one of the following:

True
False

Explanation

Question 43 of 100

1

Elite wrapper is a tool to :

Select one of the following:

a. connect to an infected system
b. make an .exe FUD
c. join malware .exe to another .exe

Explanation

Question 44 of 100

1

How is Fully Undetectable (FUD) malware created?

Select one of the following:

a. Using .exe wrappers
b. Using hex editors
c. Using steganography

Explanation

Question 45 of 100

1

What is a Trojan.FakeAV?

Select one of the following:

a. Malware behaving as an antivirus
b. Tool to detect malware
c. Tool to make FUD malware

Explanation

Question 46 of 100

1

Which is a ransomware?

Select one of the following:

a. Trojan
b. Virus
c. Worm

Explanation

Question 47 of 100

1

What is the effect of SMS Trojans?

Select one of the following:

a. Data locked down
b. SMS sent to premium numbers
c. Data theft

Explanation

Question 48 of 100

1

What is email harvesting?

Select one of the following:

a. Sending bulk emails
b. Collecting email accounts
c. Cracking email passwords

Explanation

Question 49 of 100

1

What is the full form of UDP?

Select one of the following:

a. User Data Program
b. User Datagram Protocol
c. User Defined Program

Explanation

Question 50 of 100

1

Identify the spyware.

Select one of the following:

a. Cookie
b. Antivirus
c. Legitimate tracking software
d. Tracking software

Explanation

Question 51 of 100

1

Pick the non-legitimate software.

Select one of the following:

a. Trend Micro Titanium Maximum Security
b. Applications
c. Mobile apps
d. Tracking software

Explanation

Question 52 of 100

1

How does a virus spread between computers?

Select one of the following:

a. Using network weakness
b. Viruses don’t spread
c. Infecting .exe files

Explanation

Question 53 of 100

1

Spyware are malicious programs that, after downloading themselves on a PC, begin to transmit some type of information through the Internet, except:

Select one of the following:

a. Data files
b. Login usernames and passwords
c. Sensitive banking and credit information
d. Computer IP address

Explanation

Question 54 of 100

1

Which is not a method of spyware distribution?

Select one of the following:

a. Peer-to-peer distribution
b. Installing unapproved toolbars in your web browser
c. Sharing freeware
d. Replication

Explanation

Question 55 of 100

1

What is the common IANA registered Port for Kerberos?

Select one of the following:

a. UDP Port 123
b. TCP Port 119
c. UDP Port 161
d. TCP Port 88

Explanation

Question 56 of 100

1

Which type of keylogger remains undetected by both antispyware and antivirus programs?

Select one of the following:

a. Hardware Keylogger
b. Software Keylogger

Explanation

Question 57 of 100

1

A program designed to trace every keystroke on the machine on which it is installed to steal the personal information of the user is called a:

Select one of the following:

a. Virus
b. Keylogger
c. Worm
d. Trojan

Explanation

Question 58 of 100

1

Spyware is a program that runs in stealth mode. What is this program otherwise called that gathers and records sensitive information available on your PC?

Select one of the following:

a. Virus
b. Spybot
c. Cookies

Explanation

Question 59 of 100

1

Pick the odd one out.

Select one or more of the following:

a. Form grabbing keylogger
b. Wireless keyloggers
c. Keyboard overlays
d. Firmware keyloggers

Explanation

Question 60 of 100

1

SetWindowsHookEx() is a Windows function used by:

Select one of the following:

a. Software keyloggers
b. Hardware keyloggers

Explanation

Question 61 of 100

1

The memory injection-based keyloggers can alter while patching the memory table of your PC and browser, and help the hackers gain control over your personal data. An example of Trojans that use memory injection-based keyloggers is:

Select one of the following:

a. Hyper-V
b. API
c. Zeus
d. Ultimate Keylogger

Explanation

Question 62 of 100

1

What is not true about Social Engineering?

Select one of the following:

a. It uses social tactics to gain information.
b. It uses high-end technologies.
c. Exploits the trust of the victims.

Explanation

Question 63 of 100

1

Select all the countermeasures that can keep you safe from spyware and keyloggers.

Select one or more of the following:

a. Expensive antivirus
b. Use of a firewall
c. KeyScrambler
d. Use of freeware

Explanation

Question 64 of 100

1

The majority of keyloggers are used by hackers to steal people’s confidential information, but there are few exceptions like Amac and:

Select one of the following:

a. Ultimate Keylogger
b. Hyper-V
c. SpyEye

Explanation

Question 65 of 100

1

Pick the non-legitimate software.

Select one of the following:

a. Trend Micro Titanium Maximum Security
b. Applications
c. Mobile apps
d. Tracking software

Explanation

Question 66 of 100

1

Which of these is the odd one out?

Select one of the following:

a. USB spyware
b. Screen capture spyware
c. Image spyware
d. Video spyware

Explanation

Question 67 of 100

1

Spyware activity can cause the following except:

Select one of the following:

a. System crashes
b. Utilization of bandwidth of the Internet connection
c. Deletion of files
d. Changes in the default browser

Explanation

Question 68 of 100

1

Antivirus and antispyware programs fail to detect kernel-based keyloggers because, they . (Select all that apply.)

Select one or more of the following:

a. are user level applications
b. run at ring 3
c. run at ring 0

Explanation

Question 69 of 100

1

Though hackers are always a step ahead, even sophisticated spyware programs cannot:

Select one of the following:

a. Uninstall antivirus
b. Remove antispyware
c. Disable firewalls
d. Change your web browser’s security settings

Explanation

Question 70 of 100

1

It is safe to install all search engine toolbars?

Select one of the following:

True
False

Explanation

Question 71 of 100

1

Identify the hardware keyloggers.

Select one or more of the following:

a. Form grabbing
b. Wireless keyloggers
c. API
d. Keyboard overlays

Explanation

Question 72 of 100

1

Which of the following, when installed on a PC, can include a kernel-based keylogger?

Select one of the following:

a. Trojans
b. Rootkits
c. Drive-by downloads

Explanation

Question 73 of 100

1

The following steps can help you stay protected, except :

Select one of the following:

a. never using an administrator account on a daily basis
b. using free file sharing sites
c. enabling firewalls

Explanation

Question 74 of 100

1

Select all the programs that will protect your PC.

Select one or more of the following:

a. KeyScrambler
b. HiJackThis
c. Torrent
d. Comodo

Explanation

Question 75 of 100

1

Almost all programs contain spyware code.

Select one of the following:

True
False

Explanation

Question 76 of 100

1

Antivirus software is spyware.

Select one of the following:

True
False

Explanation

Question 77 of 100

1

There is a difference between legitimate tracking software and spyware.

Select one of the following:

True
False

Explanation

Question 78 of 100

1

When you visit some websites, you will get a popup asking you to install ActiveX or a similar plug-in. This is known as a drive-by download.

Select one of the following:

True
False

Explanation

Question 79 of 100

1

The keylogger works in combination with spyware and cannot be programmed to start and end when the user is prompted to enter a username and password in any browser window.

Select one of the following:

True
False

Explanation

Question 80 of 100

1

Antivirus and antispyware programs can detect the data stored in the hardware keyloggers?

Select one of the following:

True
False

Explanation

Question 81 of 100

1

Zeus can alter the memory table that is associated with your browser and control the logging functions.

Select one of the following:

True
False

Explanation

Question 82 of 100

1

Amac is a keylogger designed for the Windows operating system.

Select one of the following:

True
False

Explanation

Question 83 of 100

1

Keyloggers run at ring 0.

Select one of the following:

True
False

Explanation

Question 84 of 100

1

Built-in firewalls are easy to turn off.

Select one of the following:

True
False

Explanation

Question 85 of 100

1

What is a Netcat?

Select one of the following:

a. Network port scanner
b. Virus
c. Trojan

Explanation

Question 86 of 100

1

Which tool is used to replace the .exe icon?

Select one of the following:

a. Exe icon
b. Netcat
c. Sandbox

Explanation

Question 87 of 100

1

The pattern that can be used to identify a virus is known as:

Select one of the following:

a. Stealth
b. Virus signature
c. Armoured

Explanation

Question 88 of 100

1

Which one of the following is not an attack, but a search for vulnerabilities to attack?

Select one of the following:

a. Denial-of-service
b. Port scanning
c. Dumpster diving

Explanation

Question 89 of 100

1

Which one can’t spread viruses?

Select one of the following:

a. A plain text email
b. An email attachment
c. Downloading files over the Web

Explanation

Question 90 of 100

1

Programs that come into a computer system disguised as something else are called:

Select one of the following:

a. Spoofers
b. Loggers
c. Trojans

Explanation

Question 91 of 100

1

Nmap stands for?

Select one of the following:

a. Network Mapper
b. NetBIOS Mapper
c. Network Map

Explanation

Question 92 of 100

1

Which is the best way to test or analyse malware?

Select one of the following:

a. Use a sandbox or virtual machine
b. Use your original machine
c. Use an antivirus

Explanation

Question 93 of 100

1

Which is a function of Nmap?

Select one of the following:

a. Virus detection
b. Malware removal
c. Network scanning

Explanation

Question 94 of 100

1

What is the name of a hardware-based malware detection tool?

Select one of the following:

a. Adaptive DarkNet
b. Dr.Web
c. McAfee

Explanation

Question 95 of 100

1

How can malware infection be cured?

Select one of the following:

a. Employing a strict software policy
b. Using an anti-malware tool
c. Educating users

Explanation

Question 96 of 100

1

What is a Trojan-Game Thief?

Select one of the following:

a. A Trojan stealing gaming accounts
b. A Trojan damaging gaming accounts
c. A spamming tool

Explanation

Question 97 of 100

1

	Created by Martin Covill over 8 years ago

Security Operations Analyst Quiz

Sec Ops Analyst Quiz

Sec Ops Analyst Quiz

Question 1 of 100

What is a Trojan?

Select one of the following:

Explanation

Question 2 of 100

What technique does Zberb use to remain invisible on a system?

Select one of the following:

Explanation

Question 3 of 100

How can malware infections be prevented?

Select one of the following:

Explanation

Question 4 of 100

How should you check your system for infection?

Select one of the following:

Explanation

Question 5 of 100

What is the use of a DoS attack Trojan?

Select one of the following:

Explanation

Question 6 of 100

A tool to monitor file integrity is:

Select one of the following:

Explanation

Question 7 of 100

Which is a port monitoring tool?

Select one of the following:

Explanation

Question 8 of 100

Which tool is used for sniffing a network?

Select one of the following:

Explanation

Question 9 of 100

How is a salted password validated?

Select one of the following:

Explanation

Question 10 of 100

Which utility is used for a hash insertion attack?

Select one of the following:

Explanation

Question 11 of 100

On which system do alternate data streams work?

Select one of the following:

Explanation

Question 12 of 100

What is steganography?

Select one of the following:

Explanation

Question 13 of 100

Steganography can be used as a substitute for which encryption values?

Select one of the following:

Explanation

Question 14 of 100

Using alternate data streams negatively impacts the file.

Select one of the following:

Explanation

Question 15 of 100

What type of encryption does NTLM use?

Select one of the following:

Explanation

Question 16 of 100

How can an MD5 hash be cracked?

Select one of the following:

Explanation

Question 17 of 100

For what purpose is the pass-the-hash technique used?

Select one of the following:

Explanation

Question 18 of 100

How can password guessing be prevented?

Select one of the following:

Explanation

Question 19 of 100

Which of the following operating systems employs Kerberos authentication?

Select one of the following:

Explanation

Question 20 of 100