SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. CIDR is a shorthand way of specifying which portion of the address is the network - and which portion is the host
CIDR
IDS not
MAN
Group
2. keeps the same letters - but changes the position within the text - easy to break - can be combined with substitution
Some types of malicious code
DDoS attack
What primary threats should be protected against
Permutation
3. Network scanner.
3-way handshake
Nmap
Race conditions
Permutation
4. True positive - false positive - true negative - false negative
COM/Script program infector
Trojan horse
The four types of events reported by IDS
Program infector
5. A cracking tool inserted into the OS that allows the attacker to do as they please.
Rootkit
The session layer
Brute force
What categories do vulnerabilities fall into?
6. Message in its encrypted form
Switches
Denial of service
Ciphertext
Rootkit
7. Relies on executable code insertion and user interaction to spread
To close a TCP session
Parasitic malware
WAN
What categories do vulnerabilities fall into?
8. A list of files is defined that should be monitored for a change - HIDS software calculates a one-way hash for each file - if a change is made to the file - the hash is changed
Port scan
Anomaly analysis work
File integrity checking work
DDoS attack
9. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
The conficker worm
Remote maintenance
Rootkit
Some malware propagation techniques
10. Trying to ID modems in a telephone exchange that may be susceptible to compromise
War Dialing
No State Inspection ACK flag set
The difference in stacks
Boot record infector
11. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.
Address resolution protocol
Plaintext
Smurf attack
Router
12. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
MAN
Port scan
A blind FTP
The five threat vectors
13. Attaches itself to existing program files and activated when the exe is launched
Denial of service
Program infector
Total cell size for asynchronous transfer mode (ATM)
The four basic approaches to defense in depth
14. 53 bytes - 48 bytes for data - 5 bytes for the header
Defense in depth
Total cell size for asynchronous transfer mode (ATM)
LAN
Brute force
15. When someone has compromised the integrity of data or a program. Allows attackers to create backdoors.
Alteration of code
NIDS challenges
The difference in stacks
What threats should be protected against - based on threat levels
16. An FTP that allows downloads only if the user knows the exact name of the file they're looking for
EXE program infector
ATM work
A blind FTP
The session layer
17. It handles the establishment and maintenance of connections between systems
The session layer
Boot record infector
Alteration of code
The Information Centric defense in depth
18. Isolates systems when they initially connect to the network - allows systems to be scanned and checked prior to being put on a trusted segment
When setting up a virtual circuit
The protected enclave to defense in depth
NAC
Wardriving
19. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
When implementing protocols - what stack should be used?
The Information Centric defense in depth
Some common TCP ports
What threats should be protected against - based on threat levels
20. A system resource that has no legitimate purpose or reason for someone to connect to it - its purpose is to draw in attackers to understand how they break into a system
Total cell size for asynchronous transfer mode (ATM)
Honeypot
Anomaly analysis work
Some reasons to use UDP over TCP
21. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535
The OSI Protocol Stack
NIDS challenges
Datagram length of a UDP packet
A netmask
22. Identify critical assets and provide layered protection - data is accessed by applications - applications reside on hosts - hosts operate on networks
Router
Permutation
The Information Centric defense in depth
NAC
23. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted
Some reasons to use UDP over TCP
Network stumbler
Kismet
Ciphertext
24. It allows the transport layer to detect when the UDP headers or the payload have been modified in transit
Checksum in UDP
Macro virus
Internet
The four types of events reported by IDS
25. Stateful firewalls maintain state of traffic flows
Stateful firewall
Honeyd
NIDS challenges
Some malware capabilities
26. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Kismet
PAN
DDoS attack
HIDS monitor
27. Threat requires a vector to cross the vulnerability - stop the ability of the threat to use the vector
The threat vector analysis in defense in depth
The session layer
Some malware propagation techniques
Honeypot
28. Strips OS commands and characters from input - avoid making system calls from within the app * especially based on user input
A network protocol
OS Command Injection defenses
Smurf attack
Deep packet inspection
29. Unified data carrying service - replacing from replay and ATM
Multi protocol label switching
Firewall
Some external threat concerns
OS Command Injection defenses
30. Attempt to manipulate or trick a person into providing information or access - bypass network security by exploiting humans - vector is often outside attack by telephone or visitor inside
The presentation layer
The conficker worm
Denial of service
Social engineering
31. Switches networks make it difficult to monitor traffic in promiscuous mode - topology must be able to support traffic aggregation for monitoring
Buffer overflow
Some NIDS topology limitations
Router
Wardriving
32. The Practice of sending an ACK inside another packet going to the same destination
No State Inspection ACK flag set
IDS data normalization
Ack Piggybacking
Address Resolution Protocol (ARP)
33. UDP based infection - infected through vulnerability in SQL server - caused DoS on saturated networks
The physical layer stack
Rotation?
SQL Slammer Worm
The three goals of security
34. Syn - Syn/Ack - Ack
What primary threats should be protected against
Program infector
To establish a TCP session
The three goals of security
35. It interacts with data and prepares it to be transmitted across the network. It ensures reliable connectivity from end-to-end
Some malware capabilities
HIDS monitor
War Dialing
The transport layer
36. NTP - BootP/DHCP - NFS file systems - SNMP - TFTP
Some other UDP based protocols
Some disadvantages of honeypots
IDS data normalization
What range is a class A network?
37. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
UDP packet headers
CIDR
Worms
DDoS attack
38. A sends a SYN packet to B - B acknowledges with a SYN/ACK - A replies with ACK
Program infector
The goals of cryptography
File integrity checking work
3-way handshake
39. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
Some external threat concerns
What ways should the crypto key be protected?
What range is a class A network?
A network protocol
40. Prepends to the beginning of the file and gains control when the first instruction of the infected COM file is executed - appending to the end - virus writes its payload to the end and inserts jump instruction as the first instruction - which execute
Multi protocol label switching
Asynchronous Transfer Mode
Program infector
COM/Script program infector
41. Work groups that require additional protection are segmented from the rest of the internal organization - restricting access to critical segments - system of VPNs - internal firewall - VLANs and ACLs
Datagram length of a UDP packet
The protected enclave to defense in depth
Bus Topology
EXE program infector
42. Take the file and try to compress it. If it compresses - it means there is a pattern and it's more easily crackable
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
43. 1 and 2 - Voice/Low speed data - 3 - Voice/Data 10Mb - 4 - Voice/Data 16Mb - 5 - 5e - Voice/Data 100Mb to 1Gb - 6 - Standard for gigabit
Rotation?
Integrity of Data
The different cable categories
Some Pen Test techniques
44. Infects the EXE and make them operate slightly different - when infected - exe header sizes are altered to point to the appended viral code
Some FTP dangers
WAN
EXE program infector
What's a VLAN
45. Allows admins to remotely access a system for troubleshooting. - E.g VNC - GoToMyPc - PC Anywhere
Smurf attack
Remote maintenance
Snort
Hubs
46. Connects the physical part of the network (cables) with the abstract (packets and datastreams)
The data link layer
Permutation
HIDS monitor
NIDS challenges
47. Application layer attacks may get through - dialup - VPN - extranet connections may bypass firewalls
The four types of events reported by IDS
Hping
Some firewall challenges
Kismet
48. Not frequently seen on LANs because of expense - because of its traffic predictability and high bandwidth support - it's good for video streaming - encapsulates common protocols - uses virtual path identifiers to create end to end connectivity - has
Asynchronous Transfer Mode
DDoS attack
Wardriving
The OSI model
49. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
Types of viruses
What range is a class C network?
The difference in stacks
The OSI Protocol Stack
50. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
What ways should the crypto key be protected?
What's an easy way to test encryption?
Total cell size for asynchronous transfer mode (ATM)
Some external threat concerns
Sorry!:) No result found.
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests