SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
CISSP Attacks
Start Test
Study First
Subjects
:
certifications
,
it-skills
,
cissp
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Type: Fun or Snoop Info - How: Attacker sends unsolicited message to Bluetooth enabled device. e.g. insert contact into address book. Why: May Enable future attacks on the device via emails - Recipent reaction or get data w/o your knowledge while con
Bluejacking
Bluetooth DoS (1 or more attackers)
Bluetooth Malicious Threats
Network Address Hijacking
2. Counter: Non-public #s - Tight AC for modems / pools
Deliberate exploit
Pharming
Wardialing
SMiShing
3. Type: DDoS - How: uses a master program to communicate with attack agents across multiple nets. Attacker remotely connects to Master host - then master commands agents to perform UDP flood to a list of Target IP addresses. - Why: your IP address is i
Botnet Names
Trinoo
Bluetooth DoS (1 or more attackers)
Race Condition
4. Type: Masquerading Attack - How: For a given IP address in ARP table - attacker enters his MAC address - Why: Attacker alters System ARP table. Goal to receive packets.
Jamming
Race Condition
Time of Use/Time of Check Attack
ARP Table Poisioning
5. Uses DiffieH PK to determine shared Symm key
Botnet Names
Wardialing
S-RPC
Spoofing at Login
6. Type: DoS - How: Attacker sends your packets to a non-existent address - How: One way is special type of ARP poisioning.
Black Hole
Shellcode
Buffer Overflow
Loki
7. Attacker deletes incriminating evidence or data from audit logs. - Countermeasure: Protect log from modification via strict access control
Scrubbing
Loki
Shellcode
Slamming
8. Type: DoS - How: Send Packet > max allowable size of 65535 bytes - Why: Causes vulnerable host to fail and/or reboot - Counter: Ingress filter - patch systems
Ping of Death
S-RPC
Land
Network Address Hijacking
9. Type of Remote Shellcode that downloads and executes some form of malware on the target system. This type of shellcode does not spawn a shell - but rather instructs the machine to download a certain executable file off the network - save it to disk
Caller ID Spoofing
Download and Execute
TDL-4 Bot-Net #2
Hijacking Tools
10. Mobile device attack that seeks to dupe the recipient of an SMS (short message service - text) message into downloading malware onto their handset. Once the handset is infected - it can be turned into a 'zombie -' allowing attackers to control the de
Tap
Black Hole
SMiShing
Bluebugging
11. aka ARP Flooding - poisioning
Slamming
ARP Spoof
Wardialing
Scrubbing
12. Intruder re-routes data traffic from a network device to Attacker's machine
Worms
Stack Overflow
Network Address Hijacking
Slamming
13. RF interference / blocking
Jamming
Buffer Overflow
Network Address Hijacking
Bluetooth BackDoor Attack
14. May result in data at a specific location being altered in an arbitrary way - or in arbitrary code being executed. - Counter: make sure your OS and application libraries are patched to detect/prevent against these types of overflows
Tribal Flood Network (TFN) & TFN2K
Deliberate exploit
SMiShing
Mail bombing
15. Completed by using commercially available couplers to place a microbend in the cable to allow light to radiate through the cladding and be exposed to a photodetector. photodetector is connected to an electro-optical converter that acts as an interfac
Heap Overflow
Buffer Overflow
Race Condition
Tap
16. Juggernaut & HUNT Project - Spy then attack
Race Condition
Caller ID Spoofing
Hijacking Tools
Black Hole
17. How: Attacker uses technologies (especially associated with VoIP) that allow callers to lie about their identity and present false names and numbers - Why: defraud or harass.
Caller ID Spoofing
ARP Table Poisioning
S-RPC
Bluetooth Threat Mitigation
18. Counters:Best: Proper programming with Input value bounds checking. Keep systems current: Patching - hot fixes - etc.
Phishing
Buffer Overflow
Birthday
Slamming
19. Overwhelm mail server & Clients
Tribal Flood Network (TFN) & TFN2K
Heap Overflow
Tap
Mail bombing
20. Attacker must win the race of responding between 2 different processes carrying out a task/function. Counter: Do not Split up critical tasks that can have results or sequence altered. - Employ Software locks to files to prevent unauthorized access.
Hijacking Tools
Heap Overflow
S-RPC
Race Condition
21. Type: DoS (Flood or Crashing) - How: Malformed fragmented packts - Why: Causes vulnerable host to fail and/or reboot - Countermeasure: Network IDS - drop faulty or corrupted packets - ingress filters
E-mail address spoofing
Bluetooth Malicious Threats
Worm Names
Teardrop
22. Type: Buffer Overflow - How: Memory Stack is overflown to write data into another area of memory in the Identify of the System. (Priviledged System account) - Why: The most common cause of stack overflows is excessively deep or infinite recursion. T
Stack Overflow
TDL-4 Bot-Net #3
Caller ID Spoofing
Bluetooth BackDoor Attack
23. Type: DDoS - How: TFN uses a master program to communicate with attack agents across multiple nets. TFN can launch several types of attacks simultaneously: UDP flood - TCP SYN flood - ICPM echo request flood and ICMP directed broadcasts. - Why: TFN M
Tribal Flood Network (TFN) & TFN2K
Time of Use/Time of Check Attack
Caller ID Spoofing
Network Address Hijacking
24. Type: Buffer Overflow in the heap data area. - Heap overflows are exploitable in a different manner to that of stack-based overflows. Memory on the heap is dynamically allocated by the application at run-time and typically contains program data. Expl
Land
Heap Overflow
Slamming
Tap
25. Counters: A firewall can be used to detect the outgoing connections made by connect-back shellcodes and the attempt to accept incoming connections made by bindshells. They can therefore offer some protection against an attacker - even if the system i
Remote Code
E-mail address spoofing
Bluetooth BackDoor Attack
Teardrop
26. Type: Reconn - How: Use port scanning tool to identify Listening Ports (TCP/UDP) on Servers - Tools: Nmap - Foundstone Products (Scanline - etc.) - Angry IP Scanner - etc.
S-RPC
Network Address Hijacking
Port Scanning
Bluetooth BackDoor Attack
27. Allows skilled individuals to access phone Commands using Bluetooth wireless technology without notifying or alerting the phone's user. - Why: This vulnerability allows the hacker to initiate phone calls - send and read SMS - read and write phoneboo
Phishing
Download and Execute
Bluebugging
Pharming
28. Flood w/ Pairing requests. (spoofed or not) - Victim consumed with Responses
Land
Scrubbing
Worm Names
Bluetooth DoS (1 or more attackers)
29. Zeus - Mariposa - Storm
Botnet Names
TDL-4 Bot-Net #2
Mail bombing
Ping of Death
30. Social engineering technique
Cramming
Phishing
Wardialing
Deliberate exploit
31. AKA Session Hijacking - Enables user to gain control of session read change data and/or packets. Could potentially get passwords or Paswd file if attacks admin
Bluesnarfing
Phishing
Network Address Hijacking
Bluetooth DoS (1 or more attackers)
32. AKA: Asynchronous attack - How: Takes advantage of dependency of event timing in a multitasking OS - How: Attacker gets between instructions and manipulates something. Goal is Control the result.
E-mail address spoofing
Time of Use/Time of Check Attack
TDL-4 Bot-Net
Bluetooth DoS (1 or more attackers)
33. Covert Channel ICMP comms - writes data after header Sniffing - Counter: Secure protocols -
Scrubbing
Tribal Flood Network (TFN) & TFN2K
Stack Overflow
Loki
34. Bluebugging - Bluesnarfing
Botnet Names
Bluetooth Malicious Threats
Buffer Overflow
Network Address Hijacking
35. Type: Man-in-Middle Attack - AKA: Phishing - URL Spoofing - How: Spoofs the public key of web site/server - Why: Get users to go to Attackers Website instead - Goal: usually to get user's data (ID - password - bank account info - etc.) However - coul
Web Spoofing Attack
Shellcode
TDL-4 Bot-Net #2
SMiShing
36. TDL-4's makers created their own encryption algorithm - Kaspersky's Golovanov said in his analysis - and the botnet uses the domain names of the C&C servers as the encryption keys.
Tap
Stack Overflow
Time of Use/Time of Check Attack
TDL-4 Bot-Net #2
37. 1) If phone is vulnerable to bluesnarfing or bluebugging-- seek patches. Manufacturer or manufacturer-authorized dealer. Software patches available for many older Bluetooth phones. 2) Turn device to non-discoverable mode when not using Bluetooth tech
Botnet Names
ARP Spoof
Bluetooth Threat Mitigation
Download and Execute
38. Attacker uses program presenting Fake Logon Screen Capture Username & Pswd - Counter: Host IDS
Birthday
Spoofing at Login
Hijacking Tools
Tap
39. Redirect victim to fake website - How: DNS poison -
Pharming
Jamming
Tribal Flood Network (TFN) & TFN2K
ARP Spoof
40. How: Attacker sends forged stream of TCP SYN packets with Source & Destination = to victim's IP address - Victim's system attempts to reply to itselft (attacks itself) - Vulnerable systems: Systems with BSD TCP/IP stack - Counter: Edge routers drop p
Mail bombing
Land
ARP Spoof
Bluetooth Threat Mitigation
41. Change user's service provider - w/o concent
Worms
Bluetooth DoS (1 or more attackers)
Bluetooth BackDoor Attack
Slamming
42. Sasser - Blaster - Melissa - ILOVEYOU - Conflicker
Remote Code
Trinoo
Worm Names
Hijacking Tools
43. The botnet also uses the public Kad P2P network for one of its two channels for communicating between infected PCs and the C&C servers - said Kaspersky. Previously - botnets that communicated via P2P used a closed network they had created.
ARP Spoof
TDL-4 Bot-Net #3
Cramming
Loki
44. In computer security - a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called 'shellcode' because it typically starts a command shell from which the attacker can control the compromised
Slamming
Web Spoofing Attack
Scrubbing
Shellcode
45. Type: Worm. How: Self replicating usually Rapid over net or other means.
Scrubbing
TDL-4 Bot-Net
Spoofing at Login
Worms
46. Hacker gains access to data stored on Bluetooth enabled phone. Why: hacker make phone calls - send & receive text messages - read & write phonebook contacts - eavesdrop on phone conversations - and connect to Internet. - How: requires advanced equip
Worm Names
Bluesnarfing
Loki
Bluetooth Malicious Threats
47. Type: Brute force How: Attack hashing function via Brute force. Changes message until he gets one that produces the same hash value. - Why: Attacker wants to change your message without detection.
Jamming
Buffer Overflow
Birthday
Scrubbing
48. How: SMTP doesn't provide any authentication.E-mail address spoofing is done in quite the same way as writing a forged return address using snail mail. As long as the letter fits the protocol - (i.e. stamp - postal code) the SMTP protocol will send t
E-mail address spoofing
Web Spoofing Attack
Jamming
Ping of Death
49. Installs its rootkit on the MBR - Sector 0 - Invisible to OS & security software - advanced encryption and the use of a public peer-to-peer (P2P) network for the instructions issued to the malware by (C&C) servers
Web Spoofing Attack
Hijacking Tools
Mail bombing
TDL-4 Bot-Net
50. 'Pairing' establishes trust relationship - Access to All Data on device
TDL-4 Bot-Net
Bluetooth BackDoor Attack
Remote Code
Scrubbing