Flashcards
SCIA 470 Chapter 10
Cards in this deck (20)
- 1The _______________ command line program is a common way of examining network traffic, which provides records of network activity while it is running, and produce hundreds or thousands of records. a. netstat b. ls c. ifconfig d. tcpdumpd. tcpdump
- 2At what layers of the OSI model do most packet analyzers function? a. Layer 1 or 2 b. Layer 2 or 3 c. Layer 3 or 4 d. Layer 4 or 5b. Layer 2 or 3
- 3In VirtualBox, ____________ different types of virtual network adapters are possible, such as AMD and Intel Pro adapters. a. 2 b. 4 c. 6 d. 8c. 6
- 4In Windows, what PowerShell cmdlet can be used in conjunction with Get-VM to display a virtual machine's network adapters? a. Show-NetworkAdapters b. Query-ipconfig c. Get-VMNetworkAdapter d. Dump-Netconfigc. Get-VMNetworkAdapter
- 5In a __________ attack, the attacker keeps asking your server to establish a connection, with the intent of overloading a server with established connections. a. smurf b. SYN flood c. spoof d. ghostb. SYN flood
- 6Select below the option that is not a common type 1 hypervisor: a. VMware vSphere b. Microsoft Hyper-V c. Citirix XenServer d. Oracle VirtualBoxd. Oracle VirtualBox
- 7Select below the program within the PsTools suite that allows you to run processes remotely: a. PsService b. PsPasswd c. PsRemote d. PsExecd. PsExec
- 8Select the file below that is used in VirtualBox to create a virtual machine: a. .vdi b. .vbox c. .r0 d. .ovad. .ova
- 9The tcpdump and Wireshark utilities both use what well known packet capture format? a. Netcap b. Pcap c. Packetd d. RAWb. Pcap
- 10The NSA's defense in depth (DiD) strategy contains three modes of protection. Which option below is not one of the three modes? a. People b. Technology c. Operations d. Managementd. Management
- 11The SANS Investigative Forensics Toolkit (SIFT) appliance can currently only be installed on what version of Ubuntu? a. 12.04 b. 13.11 c. 14.04 d. 14.11a. 12.04
- 12The __________ disk image file format is associated with the VirtualBox hypervisor. a. .vmdk b. .hda c. .vhd d. .vdid. .vdi
- 13The __________________ is the version of Pcap available for Linux based operating systems. a. Winpcap b. Libpcap c. Tcpcap d. Netcapb. Libpcap
- 14The ___________________ is a good tool for extracting information from large Libpcap files; you simply specify the time frame you want to examine. a. Tcpdstat b. Tcpslice c. Ngrep d. tcpdumpb. Tcpslice
- 15The _____________________ tool is an updated version of BackTrack, and contains more than 300 tools, such as password crackers, network sniffers, and freeware forensics tools. a. Kali Linux b. Ubuntu c. OSForensics d. Sleuth Kita. Kali Linux
- 16What Windows Registry key contains associations for file extensions? a. HKEY_CLASSES_ROOT b. HKEY_USERS c. HKEY_LOCAL_MACHINE d. HKEY_CURRENT_CONFIGa. HKEY_CLASSES_ROOT
- 17What file type below, associated with VMWare, stores VM paging files that are used as RAM for a virtual machine? a. .nvram b. .vmem c. .vmpage d. .vmxb. .vmem
- 18What processor instruction set is required in order to utilize virtualization software? a. AMD-VT b. Intel VirtualBit c. Virtual Machine Extensions (VMX) d. Virtual Hardware Extensions (VHX)c. Virtual Machine Extensions (VMX)
- 19What utility is best suited to examine e-mail headers or chat logs, or network communication between worms and viruses? a. tcpdump b. Argus c. Ngrep d. Tcpslicec. Ngrep
- 20What virtual machine software supports all Windows and Linux OSs as well as Macintosh and Solaris, and is provided as shareware? a. KVM b. Parallels c. Microsoft Virtual PC d. VirtualBoxd. VirtualBox
Information
- Description
- SCIA 470 Flashcards on SCIA 470 Chapter 10, created by Tyler Rock on 22/04/2019.
- Created by
- Tyler Rock
- Views
- 5
- Tags
- Rating