Quiz
Untitled
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (104)
1Ensuring network ________ means that authorized users have access to information, services, and network resources.
- Aconfidentiality
- B integrity
- Cavailability
- Dauthentication
2In regards to network security, ________ means preventing unauthorized users from gaining information about the network structure, data flowing across the network, network protocols used, or packet header values.
- Aconfidentiality
- Bintegrity
- C availability
- Dauthentication
3Ensuring appropriate network ________ means preventing attackers from altering the capabilities or operation of the network.
- Aconfidentiality
- Bintegrity
- Cavailability
- Dfunctionality
4In regards to network security, ________ is the policy-driven control of access to systems, data, and dialogues.
- Aconfidentiality
- Bintegrity
- Caccess control
- Davailability
5"Death of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is impossible.
- ATrue
- BFalse
6"Breadth of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is possible.
- ATrue
- BFalse
7DoS network attacks are fairly uncommon.
- ATrue
- BFalse
8A DoS attack makes a server or network unavailable by flooding it with attack packets.
- ATrue
- BFalse
9The ultimate goal of a DoS attack is to ________.
- Acause harm
- Bfrustrate users
- Cpractice hacking
- DNone of the above
10DoS attacks can cause harm by ________.
- Astopping a critical service
- B slowly degrading services over a period of time
- CBoth A and B
- DNeither A nor B
11A direct attack occurs when an attacker tries to flood a victim with a stream of packets directly from the attacker's computer.
- ATrue
- BFalse
12An indirect attack occurs when an attacker tries to flood a victim with a stream of packets directly from the attacker's computer.
- ATrue
- BFalse
13Similar to a direct attack, an indirect attack occurs when an attacker spoofs his/her IP address.
- ATrue
- BFalse
14________ is the process of obscuring an attackers source IP address.
- ABackscatter
- BSpoofing
- CIP Flood
- DNone of the above
15A ________ attack is when a victim is flooded with SYN packets in an attempt to make many half-open TCP connections.
- ASYN flood
- BPing flood
- C HTTP flood
- DNone of the above
16A ________ attack is when a victim is flooded with ICMP packets that appear to be normal supervisory traffic.
- ASYN flood
- BPing flood
- CHTTP flood
- DNone of the above
17A ________ attack is when a webserver is flooded with application layer web requests.
- ASYN flood
- BPing flood
- CHTTP flood
- DNone of the above
18 ICMP can be best described as the second part of a three-way TCP handshake sent in response to a SYN.
- ATrue
- BFalse
19SYN-ACK can be best described as the second part of a three-way TCP handshake sent in response to a SYN.
- ATrue
- BFalse
20________ are compromised hosts running malware controlled by the hacker.
- ADDoS
- BICMP
- CBots
- DNone of the above
21An attacker controlling bots in a coordinated attack against a victim is known as a ________.
- ADoS attack
- BDDoS attack
- CICMP
- DNone of the above.
22Once established, botnets can be leased to other criminals for DoS attacks.
- ATrue
- BFalse
23________ are an additional layer of compromised hosts that are used to manage large groups of bots.
- ABotnets
- B Handlers
- CPhatbots
- DNone of the above
24 In a P2P attack, there is a change in the overall volume of traffic but the traffic pattern is the same.
- ATrue
- BFalse
25In a P2P attack, there is a change in traffic pattern but the overall volume of traffic is the same.
- ATrue
- BFalse
26Listing your friend's home in the local classifieds at a low price is equivalent to a ________.
- AP2P redirect
- BP2P port
- CDDoS
- DNone of the above
27In a reflected DoS attack, attackers send spoofed requests to legitimate servers. The servers then send all responses to the victim.
- ATrue
- BFalse
28In a smurf flood DoS attack, attackers can benefit from a multiplier effect because multiple ICMP requests are responded to by a single host.
- ATrue
- BFalse
29In a smurf flood DoS attack, attackers can benefit from a multiplier effect because a single ICMP request is responded to by multiple hosts.
- ATrue
- BFalse
30A ________ is an older attack that uses an illegally large IP packet to crash an operating system.
- Asmurf flood
- BP2P redirect
- C ping of death
- DNone of the above
31Most DoS attacks are difficult to detect.
- ATrue
- BFalse
32________ is one method of thwarting DoS attacks by dropping all IP packets from an attacker.
- ABlack holing
- BICMP echo
- CP2P redirect
- DNone of the above
33A firewall does note set aside resources for a connection when a SYN segment arrives, so handling a large number of false SYN segments is only a small burden.
- ATrue
- BFalse
34________ is a good option if an attack is aimed at a single server because it keeps transmission lines at least partially open for other communication.
- ARate limiting
- BFalse open
- CBlack holing
- DNone of the above
35ARP is used to resolve 48-bit IP addresses into 32-bit local MAC addresses.
- ATrue
- BFalse
36ARP is used to resolve 32-bit IP addresses into 48-bit local MAC addresses.
- ATrue
- BFalse
37Rerouting traffic using ARP poisoning is an attack on ________ of a network.
- Afunctionality
- Bconfidentiality
- CBoth A and B
- DNone of the above
38One problem with ARP requests and replies is that they do not require authentication of verification.
- ATrue
- BFalse
39In normal ARP traffic, generally an attacker on the same network cannot see traffic between two hosts.
- ATrue
- BFalse
40In normal ARP traffic, every host can make ARP requests.
- ATrue
- BFalse
41In a MITM attack, access to the local network is not required in order to work.
- ATrue
- BFalse
42________ is/are effective method(s) to preventing ARP poisoning attacks.
- AStatic tables
- BLimiting local access
- CBoth A and B
- DNeither A nor B
43Traditionally, Ethernet LANs offered no access security.
- ATrue
- BFalse
44Access control is more of a problem for wired LANs than for wireless LANs.
- ATrue
- BFalse
45Eavesdropping usually is more of a concern for ________ LANs than for ________ LANs.
- Awired, wireless
- Bwireless, wired
- Cabout an equal concern for wired and wireless LANs
- DNone of the above
46________ is called Port-Based Access Control
- A802.11i
- B802.1X
- CBoth A and B
- DNeither A nor B
47The main access threat to 802.11 wireless LANs is an attacker plugging into a wall jack.
- ATrue
- BFalse
48In 802.1X, the heavy authentication work is done on ________.
- A authenticators
- Bclients
- CBoth A and B
- DNeither A nor B
49Which of the following is a benefit of using a central authentication server in 802.1X?
- AReduced cost
- BConsistency in authentication
- CImmediacy in access control changes
- DAll of the above
50The authenticator is the ________.
- Aworkgroup switch
- Bcentral authentication server
- Cclient
- D None of the above
51An EAP response message may contain ________.
- Aa request for a different authentication mechanism
- Ba negative acknowledgement
- CBoth A and B
- DNeither A nor B
52An EAP message begins with an ________ message.
- AEAP request
- BEAP accept
- CEAP start
- DEAP response
53An EAP failure message is sent to the ________.
- Aauthentication server
- Bauthenticator
- Cclient
- DAny of the above
54When a new EAP authentication is added, software does not have to be changed on the ________.
- Aclient
- B authenticator
- Ccentral authentication server
- D) No software has to be changed on ANY device
55When a new EAP authentication is added, software has to be changed on the ________.
- Aauthenticator
- Bcentral authentication server
- CBoth A and B
- DNeither A nor B
56Most central authentication servers are governed by the ________ standard.
- AEAP
- BRADIUS
- CIPsec
- D802.1X
57________ is used by ________ for authentication.
- AEAP, RADUS
- BRADIUS, EAP
- CBoth A and B
- DNeither A nor B
58EAP uses RADIUS for authentication.
- ATrue
- BFalse
59The 802.1X protocol created for wired LANs can work in wireless LANs without significant modification.
- ATrue
- BFalse
60The 802.11 standards were developed by the IEEE 802.11 Working Group.
- ATrue
- BFalse
61Wireless attacks avoid the access points to limit detection.
- ATrue
- BFalse
62Wireless 802.11 networks generally have a range of ________.
- A5 to 10 meters
- B10 to 30 meters
- C15 to 45 meters
- DNone of the above
63Which of the following is an example of a wireless attack?
- AUnauthorized network access
- BMan-in-the-middle attack using an evil twin
- CWireless DOS attacks
- DAll of the above
64The most common attack against a wireless network is a wireless DoS attack.
- ATrue
- BFalse
65The most common attack against a wireless network is a ________.
- Aman-in-the-middle attack using an evil twin
- Bwireless DOS attacks
- Cunauthorized network access
- DNone of the above
66Secure wireless networks can be legally accessed by anyone and are frequently posted as such.
- ATrue
- BFalse
67Open networks can be legally accessed by anyone and are frequently posted as such.
Answer:- ATrue
- BFalse
68Rogue access points are authorized access points set up by individuals or departments.
- ATrue
- BFalse
69Rogue access points are unauthorized access points set up by individuals or departments.
- ATrue
- BFalse
70By giving unauthorized users access to a local WLAN means that they are on the local network.
- ATrue
- BFalse
71After gaining wireless access to the private network, the attach can ________.
- Acause harm to internal clients
- Bsteal data
- C launch external attacks
- DAll of the above
72A ________ can be used to gather network information or user data.
- ARFMON
- Bpacket sniffer
- Cwhaling device
- DNone of the above
73ocusing electronic attacks on specific high-value targets is known as promiscuous attacks.
- ATrue
- BFalse
74Focusing electronic attacks on specific high-value targets is known as whaling.
- ATrue
- BFalse
75 In a man-in-the-middle attack, an evil twin sends own attacks, impersonating the victim.
- ATrue
- BFalse
76In a man-in-the-middle attack, ________.
- Aan evil twin must have a stronger signal than the legitimate AP
- Ban evil twin sends own attacks, impersonating the victim
- CBoth A and B
- DNeither A nor B
77Evil twin access point attacks are most common in ________.
- Asecure WLANs
- Bpublic hotspots
- C wired connected networks
- DNone of the above
78WLAN DoS attacks are designed to affect the ________ of the network.
- Aconfidentiality
- Bintegrity
- Cavailability
- Dauthentication
79Flooding the frequency of a wireless network is one method attackers use to affect the network.
- ATrue
- BFalse
80A network administrator notices extensive damage to wireless packets. This might indicate a ________ attack.
- Aman-in-the-middle
- BSYN/ACK
- CDoS flood attack
- D None of the above
81In addition to deauthenticate messages, an attacker could flood wireless clients with ________.
- ARTS
- BCTS
- C Both A and B
- DNeither A nor B
82RTS frames tell other wireless clients that you want to transmit for a given amount of time.
- ATrue
- BFalse
83CTS frames tell other wireless clients that you want to transmit for a given amount of time.
- ATrue
- BFalse
84CTS frames tell other clients that you have received a RTS frame.
- ATrue
- BFalse
85What standard did the 802.11 Working Group create to extend 802.1X operation to WLANs with security for EAP?
- A802.11i
- B802.1i
- C802.1Xi
- DNone of the above
86In 802.11i, EAP outer authentication takes place before inner authentication.
- ATrue
- BFalse
87in 802.11i, ________ authentication always uses SSL/TLS.
- Ainner
- Bouter
- CBoth A and B
- DNeither A nor B
88PEAP is a popular extended EAP protocol.
- ATrue
- BFalse
89802.11i offers strong security.
- ATrue
- BFalse
90The original 802.11 core security protocol, ________, was deeply flawed.
- A802.11i
- BWPA
- CWEP
- DNone of the above. The original core protocol was NOT deeply flawed.
91WEP stands for ________.
- Awireless equivalent privacy
- Bwireless equivalent policy
- Cwired equivalent privacy
- Dwired equivalent policy
92WEP typically takes ________ to crack today.
- Aminutes
- B hours
- Cdays
- Dweeks
93WEP encrypts each frame with a per-frame key that consists of the shared RC4 key plus a 24-bit initialization vector that is different for each frame.
- ATrue
- BFalse
94What mistake did the 802.11i Working Group make when creating IVs?
- ATransmitting IVs in the clear
- B Making the IV too short
- CBoth A and B
- DNeither A nor B
95WEP mandates private keys.
- ATrue
- BFalse
96WEP mandates shared keys.
- ATrue
- BFalse
97Attackers can exploit WEPs weaknesses by ________.
- Ausing WEP cracking software
- Breading two messages encrypted with the same key
- CBoth A and B
- DNeither A nor B
98In a large organization, WEP rekeying is inexpensive.
- ATrue
- BFalse
99RC4 uses WEP for fast and therefore cheap encryption.
- ATrue
- BFalse
100WEP uses RC4 for fast and therefore cheap encryption.
- ATrue
- BFalse
101Nearly all wireless access points can support 802.11i.
- ATrue
- BFalse
102Firms still choose to use WPA in order to ________.
- Aavoid configuration expenses for access points
- Bavoid configuration expenses for wireless clients
- CBoth A and B
- DNeither A nor B
103Many companies continue to use WEP to avoid the cost of reconfiguring all of their access points and clients to 802.11i and because WEP has not been fully cracked yet.
- ATrue
- BFalse
104________ security uses the RC4 cipher in encryption for confidentiality and the Temporal Key Integrity Protocol for keying and rekeying.
- A802.11i
- BWPA
- CWEP
- DNone of the above
Information
- Description
- Quiz on Untitled, created by Fonzirelli Lawso on 30/03/2015.
- Author
- Fonzirelli Lawso
- Language
- English
- Views
- 0
- Rating
- No ratings yet Rate this quiz