Test
Network Security
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (21)
1The protocol which secures the network login credentials in a Windows domain is:
- APAM
- BKerberos
- CLan Manager
- DNTLM
2Dictionary password cracking is a technique which..
- Acompares passwords against saved passwords
- Bgoes through every possible combination of a password to find the saved password
- CApplies the dictionary to generate passwords
- DTests the hashes generated by a predetermined set of words to see if they match the password hashes saved
3A method of automating nap scans to do complex tasks uses files with a file extension of;
- A.txt
- B.nse
- C.nmp
- D.sh
4Passwords on a modern Linux machine, like CentOS are stored in;
- A/proc/shadow
- B/etc/passwd
- C/proc/passwd
- D/etc/shadow
5Which of the following would NOT be a logical choice to include in a Forward DNS Brute Force attack?
- Amars
- Bmail
- Cwww
- Dproxy
6Metasploit is utility built into backtrack and is useful for:
- ADetermining which ports are open and available for attack
- BQuerying DNS to gain more information about a network
- CCapturing authentication traffic off the network and then cracking target passwords
- DUsing existing exploits to deliver a specific payload to a target machine
7An attacker can get access to a command line on a target machine behind a NAT firewall provided they...
- AHave access to port 1047 on the target machine
- BCan establish a reverse bind shell with the target machine
- CCan establish a bind shell with the target machine
- DSince a NAT firewall drops ALL traffic originating outside the network, it is not possible to get command line access to a target machine
8The process of sending out a fake MAC address to target machines in a Man in the middle attack is known as:
- AMAC Rendering
- BMAC engineering
- CARP Poisoning
- DARP engineering
9An effective tool an attacker might use to discover information about the topology and layout of your physical network would be;
- ANetcat
- BEttercap
- CMaltego
- DMetasploit
10The registry on a Windows 7 machine, is located in the ______________ directory by default.
- AC:\win\system32
- BC:\Documents and Settings\all users\registry
- CC:\windows\system32\config
- DC:\windows\system32\drivers\etc
11The use of rainbow tables is effective in greatly reducing the time required for cracking password hashes on a Windows machine. If you were interested in attacking passwords on a Linux machine, rainbow tables would;
- AGreatly reduce the time required to crack the passwords since the hashes could be run against the rainbow table
- BThis would not help speed up the process since Linux stores passwords as reversibly encrypted passwords which would is a different technology
- CThis would not help speed up the process since password hashes on a Linux system are "salted", making rainbow tables useless
- DThis would not help speed up the process since password hashes on a Linux system are created using SHA-1 which is unbreakable
12One concern with logging on as the local administrator account on a domain machine is that;
- AThe password of the domain administrator will be cached in the registry
- BThe machine will cache credentials of a user who has rights to modify
- CThis will overwrite the credentials of other users when running applications
- DThere is no concern in this case, since the local administrator has no rights in the domain
13NMAP is a port scanner capable of which of the following?
- ADetermining ports open on a target machine
- BFinding the Operating System of the target machine
- CIdentifying the user accounts on a Windows Server
- DAll of the Above
14A reverse DNS Brute force attack is a useful method to discover potential targets provided the victim DNS system has created what kind of records?
- AA
- BCNAME
- CMX
- DPTR
15Which of the following utilities will allow an attacker to perpetrate a Man in the Middle attack on a https:// connection?
- AEttercap
- BMetasploit
- Cnetcat
- DNone - you can not do a Man in the middle attack of a https:// connection
16Which of the following passwords would be the most difficult to brute force?
- AA 10 character password which includes lower case letters and numbers
- BA 6 character password which includes lower case and upper case letters and numbers
17Which of the following would NOT be considered an important consideration in building a AAA secured network?
- AAutosecure
- BAuditing
- CAuthentication
- DAuthorization
18netcat is a tool which is useful for "banner grabbing" - why might this be useful for an attacker
- AA banner provides the security token to run the program
- BOnce the banner is taken, the attacker then gets control of the program
- CThe banner often displays information about the program and version number
- DThe banner is required to press legal charges against an attacker, once the attacker has it, they can not be legally charged
19The Microsoft Framework describes the following steps important in securing an asset EXCEPT....
- ADepth of Defense
- BAuditing
- CLeast Privilege
- DMinimized attack surface
20An attacker can get access to a command line on a target machine behind a NAT firewall provided they...
- AHave access to port 1047 on the target machine
- BCan establish a reverse bind shell with the target machine
- CCan establish a bind shell with the target machine
- DSince a NAT firewall drops ALL traffic originating outside the network, it is not possible to get command line access to a target machine
21In order to ensure that passwords are managed correctly on your network it is a good idea to
- ACreate a written policy that details how passwords should be created and managed on your network, and make sure that all personnel understand the policy
- BEnsure that passwords are complex
- CEnsure that passwords are long
- DEnsure that passwords are unique.
Información
- Descripción
- network security
- Autor
- Ali Sahar
- Idioma
- English
- Visitas
- 27
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test