Quiz
Chapter 5
Crie uma conta grátis para terminar este quiz
Salve seu progresso e veja sua nota final.
Já tem uma conta? Inicie sessão
Perguntas do quiz (26)
1What type of attack intercepts communication between parties to steal or manipulate the data?
- Areplay
- BMAC spoofing
- Cman-in-the-browser
- DARP poisoning
2What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?
- ADNS
- BARP
- CTCP
- DUDP
3What type of additional attack does ARP spoofing rely on?
- ADNS Poisoning
- Breplay
- CMITB
- DMAC spoofing
4What type of privileges to access hardware and software resources are granted to users or devices?
- Aaccess privileges
- Buser rights
- Caccess rights
- Dpermissions
5When an attack is designed to prevent authorized users from accessing a system, it is called what kind of attack?
- AMITM
- Bspoofing
- Cdenial of service
- Dblocking
6Which type of attack broadcasts a network request to multiple computers but changes the address from which the request came to the victim's computer?
- AIP spoofing
- Bdenial of service
- CDNS Poisoning
- Dsmurf attack
7An attack that takes advantage of the procedures for initiating a session is known as what type of attack?
- ADNS amplification attack
- BIP spoofing
- Csmurf attack
- DSYN flood attack
8What language below is used to view and manipulate data that is stored in a relational database?
- AC
- BDQL
- CSQL
- DISL
9Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?
- Awhatever AND email IS NULL; --
- Bwhatever; AND email IS NULL; --
- Cwhatever"" AND email IS NULL; --
- Dwhatever' AND email IS NULL; --
10Choose the SQL injection statement example below that could be used to find specific users:
- Awhatever' OR full_name = '%Mia%'
- Bwhatever' OR full_name IS '%Mia%'
- Cwhatever' OR full_name LIKE '%Mia%'
- Dwhatever' OR full_name equals '%Mia%'
11Which SQL injection statement example below could be used to discover the name of the table?
- Awhatever%20 AND 1=(SELECT COUNT(*) FROM tabname); --
- Bwhatever' AND 1=(SELECT COUNT(*) FROM tabname); --
- Cwhatever; AND 1=(SELECT COUNT(*) FROM tabname); --
- Dwhatever%; AND 1=(SELECT COUNT(*) FROM tabname); --
12An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:
- ASession replay
- BSession spoofing
- CSession hijacking
- DSession blocking
13Which type of attack below is similar to a passive man-in-the-middle attack?
- Areplay
- Bhijacking
- Cdenial
- Dbuffer overflow
14When TCP/IP was developed, the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:
- AHTTP
- BNSDB
- CURNS
- DDNS
15How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?
- ADNS poisoning
- BPhishing
- CDNS marking
- DDNS overloading
16The exchange of information among DNS servers regarding configured zones is known as:
- Aresource request
- Bzone sharing
- Czone transfer
- Dzone removal
17On a compromised computer, you have found that a user without administrative privileges was able to perform a task limited to only administrative accounts. What type of exploit has occurred?
- APrivilege escalation
- BDNS cache poisoning
- CARP poisoning
- DMan-in-the-middle
18What type of web server application attacks introduce new input to exploit a vulnerability?
- Alanguage attacks
- Bcross-site request attacks
- Chijacking attacks
- Dinjection attacks
19If an attacker purchases and uses a URL that is similar in spelling and looks like a well-known web site in order for the attacker to gain Web traffic to generate income, what type of attack are they using?
- Aspoofing
- BURL hijacking
- CWeb squatting
- Dtypo hijacking
20What attack occurs when a domain pointer that links a domain name to a specific web server is changed by a threat actor?
- Apointer hack
- BDNS spoofing
- Cclickjacking
- Ddomain hijacking
21When an attacker promotes themselves as reputable third-party advertisers to distribute their malware through the Web ads, what type attack is being performed?
- Aad squatting
- Bclickjacking
- Cmalvertising
- Dad spoofing
22What technology expands the normal capabilities of a web browser for a specific webpage?
- Aextensions
- Badd-ons
- Cplug-ins
- DJava applets
23Where are MAC addresses stored for future reference?
- AMAC cache
- BEthernet cache
- CARP cache
- DNIC
24What type of an attack is being executed if an attacker substituted an invalid MAC address for the network gateway so no users can access external networks?
- AARP poisoning
- Bman-in-the-middle
- Cdenial of service
- DDNS poisoning
25What type of attack is being performed when multiple computers overwhelm a system with fake requests?
- ADDoS
- BDoS
- CSYN flood
- Dreplay attacks
26What criteria must be met for an XXS attack to occur on a specific website?
- AThe website must accept user input while validating it and use that input in a response.
- BThe website must accept user input without validating it and use that input in a response.
- CThe website must not accept user input without validating it and use that input in a response.
- DThe website must accept user input while validating it and omit that input in a response.
Informações
- Descrição
- Quiz sobre Chapter 5, criado por Nitha Nitha em 09-10-2018.
- Autor
- Nitha Nitha
- Idioma
- English
- Visualizações
- 4
- Avaliação
- Ainda sem avaliações Avalie este quiz