Quiz
Chapter 5
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (26)
1What type of attack intercepts communication between parties to steal or manipulate the data?
- Areplay
- BMAC spoofing
- Cman-in-the-browser
- DARP poisoning
2What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?
- ADNS
- BARP
- CTCP
- DUDP
3What type of additional attack does ARP spoofing rely on?
- ADNS Poisoning
- Breplay
- CMITB
- DMAC spoofing
4What type of privileges to access hardware and software resources are granted to users or devices?
- Aaccess privileges
- Buser rights
- Caccess rights
- Dpermissions
5When an attack is designed to prevent authorized users from accessing a system, it is called what kind of attack?
- AMITM
- Bspoofing
- Cdenial of service
- Dblocking
6Which type of attack broadcasts a network request to multiple computers but changes the address from which the request came to the victim's computer?
- AIP spoofing
- Bdenial of service
- CDNS Poisoning
- Dsmurf attack
7An attack that takes advantage of the procedures for initiating a session is known as what type of attack?
- ADNS amplification attack
- BIP spoofing
- Csmurf attack
- DSYN flood attack
8What language below is used to view and manipulate data that is stored in a relational database?
- AC
- BDQL
- CSQL
- DISL
9Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?
- Awhatever AND email IS NULL; --
- Bwhatever; AND email IS NULL; --
- Cwhatever"" AND email IS NULL; --
- Dwhatever' AND email IS NULL; --
10Choose the SQL injection statement example below that could be used to find specific users:
- Awhatever' OR full_name = '%Mia%'
- Bwhatever' OR full_name IS '%Mia%'
- Cwhatever' OR full_name LIKE '%Mia%'
- Dwhatever' OR full_name equals '%Mia%'
11Which SQL injection statement example below could be used to discover the name of the table?
- Awhatever%20 AND 1=(SELECT COUNT(*) FROM tabname); --
- Bwhatever' AND 1=(SELECT COUNT(*) FROM tabname); --
- Cwhatever; AND 1=(SELECT COUNT(*) FROM tabname); --
- Dwhatever%; AND 1=(SELECT COUNT(*) FROM tabname); --
12An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:
- ASession replay
- BSession spoofing
- CSession hijacking
- DSession blocking
13Which type of attack below is similar to a passive man-in-the-middle attack?
- Areplay
- Bhijacking
- Cdenial
- Dbuffer overflow
14When TCP/IP was developed, the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:
- AHTTP
- BNSDB
- CURNS
- DDNS
15How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?
- ADNS poisoning
- BPhishing
- CDNS marking
- DDNS overloading
16The exchange of information among DNS servers regarding configured zones is known as:
- Aresource request
- Bzone sharing
- Czone transfer
- Dzone removal
17On a compromised computer, you have found that a user without administrative privileges was able to perform a task limited to only administrative accounts. What type of exploit has occurred?
- APrivilege escalation
- BDNS cache poisoning
- CARP poisoning
- DMan-in-the-middle
18What type of web server application attacks introduce new input to exploit a vulnerability?
- Alanguage attacks
- Bcross-site request attacks
- Chijacking attacks
- Dinjection attacks
19If an attacker purchases and uses a URL that is similar in spelling and looks like a well-known web site in order for the attacker to gain Web traffic to generate income, what type of attack are they using?
- Aspoofing
- BURL hijacking
- CWeb squatting
- Dtypo hijacking
20What attack occurs when a domain pointer that links a domain name to a specific web server is changed by a threat actor?
- Apointer hack
- BDNS spoofing
- Cclickjacking
- Ddomain hijacking
21When an attacker promotes themselves as reputable third-party advertisers to distribute their malware through the Web ads, what type attack is being performed?
- Aad squatting
- Bclickjacking
- Cmalvertising
- Dad spoofing
22What technology expands the normal capabilities of a web browser for a specific webpage?
- Aextensions
- Badd-ons
- Cplug-ins
- DJava applets
23Where are MAC addresses stored for future reference?
- AMAC cache
- BEthernet cache
- CARP cache
- DNIC
24What type of an attack is being executed if an attacker substituted an invalid MAC address for the network gateway so no users can access external networks?
- AARP poisoning
- Bman-in-the-middle
- Cdenial of service
- DDNS poisoning
25What type of attack is being performed when multiple computers overwhelm a system with fake requests?
- ADDoS
- BDoS
- CSYN flood
- Dreplay attacks
26What criteria must be met for an XXS attack to occur on a specific website?
- AThe website must accept user input while validating it and use that input in a response.
- BThe website must accept user input without validating it and use that input in a response.
- CThe website must not accept user input without validating it and use that input in a response.
- DThe website must accept user input while validating it and omit that input in a response.
Information
- Description
- Quiz on Chapter 5, created by Nitha Nitha on 09/10/2018.
- Author
- Nitha Nitha
- Language
- English
- Views
- 4
- Rating
- No ratings yet Rate this quiz