Quiz
Lecture 2
This quiz has question types that open in the usual player.
Questions in this quiz (26)
1Network attacks can be classified into 3 major categories:
1. Reconnaissance Attacks
2. [blank_start]Access[blank_end] Attacks
3. [blank_start]Denial[blank_end] of Service Attacks- AAccess
- BDenial
2True of false - Reconnaissance Attacks are also known as information gathering?
- ATrue
- BFalse
3Does a DoS attack precede, or follow a reconnaissance attack?
- APrecede
- BFollow
4Reconnaissance attacks can consist of the following:
- APerform an information query of a target
- BInitiate a ping sweep of the target network
- CInitiate a port scan of active IP addresses
- DRun Vulnerability Scanners
- ERun Exploitation tools
- FAll of the above
- GNone of the above
5True or false:
DNS queries cannot reveal information such as who owns a particular domain and what public IP addresses have been
assigned to that domain- ATrue
- BFalse
6Fill in the blanks.
A ping sweep, or [blank_start]ICMP[blank_end] sweep, scans to determine which range of IP addresses map to live hosts- AICMP
7Fill in the blank.
[blank_start]Nmap[blank_end] is an example of a port scanner which we used extensively throughout the year.- ANmap
8Nmap gathers information by examining IP addressing and port data from what type of ports.
1. TCP ports
2. [blank_start]UDP[blank_end] ports- AUDP
9Fill in the blanks.
Vulnerability Scanners query identified ports to determine three main things.
1. [blank_start]Type[blank_end] and [blank_start]Version[blank_end] of the application
2. [blank_start]Operating system[blank_end] that is running on the target host.- AType
- BVersion
- COperating system
10Fill in the blanks.
Once a hacker has identified vulnerable services, what main tool may he use. Hint - just looking for the main tool we used throughout the year.
1. [blank_start]Metasploit[blank_end]- AMetasploit
11Access attacks exploit known vulnerabilities in authentication services, FTP services, and web services to gain entry to web accounts, confidential databases and other sensitive information.
Put a check mark beside all the ways you think an access attack can take place.- APassword attacks
- BTrust exploitation
- CPort redirection
- DDos Attack
- EDDos Attack
- FMan-in-the-middle attacks
- GBuffer overflow
- HIP, MAC, DHCP Spoofing
12Fill in the blanks
Hackers implement password attacks using the following:
1. Social [blank_start]engineering[blank_end]
2. [blank_start]Dictionary[blank_end] attacks
3. [blank_start]Brute[blank_end]-force attacks
4. Network [blank_start]sniffing[blank_end]- Aengineering
- BDictionary
- Csniffing
- DBrute
13True or false
Brute-force password attacks involve repeated attempts using tools such as OphCrack, L0phtCrack, THC Hydra, RainbowCrack and Medusa- ATrue
- BFalse
14Fill in the blanks
A port redirection attack is a type of trust exploitation attack that uses a compromised host to pass traffic through a firewall that would otherwise have been dropped.
Port redirection [blank_start]bypasses[blank_end] the [blank_start]firewall[blank_end] rule sets by changing the normal [blank_start]source[blank_end] port for a type of network traffic- Abypasses
- Bfirewall
- Csource
15Fill in the blanks
A buffer overflow is when a hacker exploits the [blank_start]buffer memory[blank_end] and overwhelms it with unexpected [blank_start]values[blank_end].- Abuffer memory
- Bvalues
16What are the three most common spoofing attacks?
- ADHCP
- BMAC
- CBuffer overflow
- DSyslog
- EIP
17Social engineering is an access attack that attempts to manipulate individuals into performing actions or divulging
confidential information.
The attacks can be classified into 7 categories. Place a check mark beside all correct answers.- APreceding - this attack takes place during the reconnaissance phase and can be followed by a DoS attack.
- BPretexting: A fictional situation is created for the purpose of obtaining personal and sensitive information from an unsuspecting individual
- CTrawling: A malicious party "trawls" through personal emails looking for sensitive information from an unsuspecting individual
- DPhishing: Malicious party sends a fraudulent email disguised as being from a legitimate, trusted source
- ESpear phishing: Targeted phishing attack tailored for a specific individual or organisation
- FSpam: Spam email used to trick user to click an infected link or download infected file
- GConvoying: Hacker quickly follows an authorised person into a secure location
- HTailgating: Hacker quickly follows an authorised person into a secure location
- ISomething for Something: Hacker requests personal information from a party in exchange for something like a free gift
- JBaiting: Hacker leaves a malware-infected physical device, such as a USB flash drive in a public location such as a corporate washroom
18True or false - A DoS attack results in some sort of interruption of service to users, devices or applications
- ATrue
- BFalse
19Two of the following three DoS attacks are now considered to be legacy attacks, as there are ways to mitigate against them.
Place a check mark beside the two legacy attacks- APing of death
- BSmurf Attack
- CTCP SYN flood attack
20Fill in the blanks
A Distributed DoS Attack (DDoS) is similar in intent to a DoS attack, except that a DDoS attack increases in magnitude because it originates from multiple, coordinated sources.
Hacker builds a network of infected machines
1. A network of infected hosts is called a [blank_start]botnet[blank_end]
2. The compromised computers are called [blank_start]zombies[blank_end]
3. Zombies are controlled by [blank_start]handler systems[blank_end] (hint: enter two separate words)- Abotnet
- Bzombies
- Chandler systems
21Fill in the blank
In addition to preventing and denying malicious traffic, network security professionals must also ensure that data is protected.
[blank_start]Cryptography[blank_end] is the study and practice of hiding information, is used extensively in modern network security.- ACryptography
22Domains of Network Security:
Network security domains provide an organised framework to facilitate learning about network security.
What is the main, first domain that a security department would develop?- AHuman Resources Security
- BCompliance
- CSecurity Policy
- DPhysical & Environmental Security
23Mitigating an Active Worm
As worms are more network-based than viruses, mitigation requires diligence and coordination on the part of network
security professionals
There is a four phase process to mitigate an active worm attacks. Select the four correct answers- AConcealment
- BContainment
- CInoculation
- DQuarantine
- ETreatment
24True or false:
ACL's cannot be used to contain worms on a network?- ATrue
- BFalse
25Is Port scanning and ping sweeping a crime?
- AYes
- BNo
26Which two tools can be used to perform DNS queries?
- Anet stat
- Bwhois
- Cnslookup
- Dhostname
Information
- Description
- Modern Network Security Threats
- Author
- Adam Kelly
- Language
- English
- Views
- 7
- Rating
- No ratings yet Rate this quiz