SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. ATM supports two types of virtual circuits: permanent virtual circuits and switches virtual circuit - PVC is set up in advance - usually manually - SVC is established automatically through a signaling protocol and can be created on the fly - establis
The session layer
Rootkit
Types of ATM virtual circuits
Remote maintenance
2. Allows admins to remotely access a system for troubleshooting. - E.g VNC - GoToMyPc - PC Anywhere
Log monitoring work?
Remote maintenance
IDS not
Some NIDS topology limitations
3. A spoofed IP is used to send a SYN to the target. It then responds with a SYN/ACK that never receives the final ACK to complete the handshake. This occupies a portion of the target's pre-established buffer for TCP and can prevent the target from acce
The difference in stacks
Nmap scanning techniques
SYN flood
Some common TCP ports
4. 20 - FTP data - 21 - FTP - 23 - Telnet - 25 - SNMP - 53 - DNS - 79 - Finger - 80 - HTTP - 110 - POP - 443 - HTTPS
Hubs
DDoS attack
Some common TCP ports
What range is a class B network?
5. An FTP that allows downloads only if the user knows the exact name of the file they're looking for
Wardriving
COM/Script program infector
Arbitrary substitution
A blind FTP
6. 53 bytes - 48 bytes for data - 5 bytes for the header
Anomaly analysis work
What primary threats should be protected against
Total cell size for asynchronous transfer mode (ATM)
Integrity of Data
7. NTP - BootP/DHCP - NFS file systems - SNMP - TFTP
NIDS challenges
Best way to protect wireless networks
Some other UDP based protocols
Brute force
8. Considered to be a perimeter device
Router
Hping
Internet
Bus Topology
9. It interacts with the application layer to determine which network services will be required
The difference in stacks
Best way to protect wireless networks
MAN
the application layer
10. Confidentiality - integrity - availability
Types of ATM virtual circuits
Alteration of code
The CIA triad
the application layer
11. Netmasks or subnets provide a method for identifying what portion of an address is the network - and what portion is the host
The four basic approaches to defense in depth
the application layer
A netmask
Internet
12. keeps the same letters - but changes the position within the text - easy to break - can be combined with substitution
Some external threat concerns
Ciphertext
Overview of TCP
Permutation
13. Known - unknown - zero day
Trojan horse
Some malware capabilities
What categories do vulnerabilities fall into?
Proxy or application gateway
14. Anonymous FTP - FTP passes through clear text - Bounce attacks with the PORT command - user can cause an FTP to open a connection from the FTP's own commands and bypass a firewall
What's a VLAN
Social engineering
Some FTP dangers
Some types of malicious code
15. logic bomb - trojan horse - trap door
Total cell size for asynchronous transfer mode (ATM)
Logic bomb
Some disadvantages of honeypots
Some types of malicious code
16. 128.0.0.0 through 191.255.255.255 - with a subnet mask of 255.255.0.0
Race conditions
What range is a class B network?
Bridge
IDS
17. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
Firewall
When implementing protocols - what stack should be used?
Datagram length of a UDP packet
Boot record infector
18. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
What primary threats should be protected against
WAN
Port scan
A network protocol
19. Prepends to the beginning of the file and gains control when the first instruction of the infected COM file is executed - appending to the end - virus writes its payload to the end and inserts jump instruction as the first instruction - which execute
The transport layer
COM/Script program infector
The threat vector analysis in defense in depth
MAN
20. 8 bytes per packet - UDP SRC port - UDP DST Ports - UDP length - UDP Checksum
UDP packet headers
DDoS attack
Some other UDP based protocols
What categories do vulnerabilities fall into?
21. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535
Switches
Anomaly analysis work
Datagram length of a UDP packet
Some firewall challenges
22. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted
Permutation
Network stumbler
Types of viruses
Wardriving
23. Going around with equipment to detect wireless networks
Wardriving
Types of viruses
The conficker worm
Arbitrary substitution
24. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.
The transport layer
Smurf attack
Honeyd
the application layer
25. It allows the transport layer to detect when the UDP headers or the payload have been modified in transit
Checksum in UDP
A netcat listener
ACK piggybacking
Boot record infector
26. Attaches itself to existing program files and activated when the exe is launched
To establish a TCP session
Network stumbler
Program infector
What range is a class B network?
27. Message in its encrypted form
The three goals of security
Stateful firewall
Ciphertext
Checksum in UDP
28. Simple attack done by simply browsing available information that's allowed on a local network.
What primary threats should be protected against
A netcat listener
Some network design objectives
Browsing attack
29. Stateful firewalls maintain state of traffic flows
Stateful firewall
Parasitic malware
Total cell size for asynchronous transfer mode (ATM)
Anomaly analysis work
30. Infects the EXE and make them operate slightly different - when infected - exe header sizes are altered to point to the appended viral code
The protected enclave to defense in depth
EXE program infector
Address resolution protocol
Datagram length of a UDP packet
31. Handles transmissions across the physical media like wires - fiber - etc
The physical layer stack
Address resolution protocol
Parasitic malware
Kismet
32. Weakness in a system - inherent in a complex system - majority are due to poor coding - gateway by which threats are manifested
Asynchronous Transfer Mode
Some reasons to use UDP over TCP
Vulnerabilities
Brute force
33. Maintains complete TCP connection state and sequencing through 2 connections - address translation built-in by virtue of second connection above
Proxy or application gateway
Arbitrary substitution
Wardriving
Vulnerabilities
34. Protocol for mapping an IP address to a physical machine address that is recognized on the local network - A table - usually called the ARP cache - is used to maintain a correlation between each MAC and it's corresponding IP address
Address Resolution Protocol (ARP)
IDS signature analysis work
3-way handshake
The OSI model
35. War dialing - war driving - Sniffing - eavesdropping - dumpster diving - social engineering
Some firewall benefits
The difference in stacks
What's a VLAN
Some Pen Test techniques
36. 53 - DNS - 67 - BootP - 68 - BootP - 69 - TFTP - 123- NTP - 137-139 NBT - 161 - SNMP - 162 - SNMP - 2049 - NFS
Checksum in UDP
The threat vector analysis in defense in depth
Smurf attack
Some common UDP ports
37. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
The presentation layer
Shallow packet inspection
Some reasons to use UDP over TCP
Logic bomb
38. packet filter firewalls rely on TCP flags to determine connection state. Attacker can send ACK packets only to bypass firewall.
CIDR
No State Inspection ACK flag set
Remote maintenance
Kismet
39. Attacks systems through known vulnerabilities - automatically scans for more systems to attack - lowers system defenses - installs rootkit or root shell - opens up back doors - self contained malware that can copy itself
Anomaly analysis work
The three goals of security
Worms
What ways should the crypto key be protected?
40. 1.0.0.0 through 127.255.255.255 - subnet mask starts at 255.0.0.0
What range is a class A network?
Program infector
Ack Piggybacking
Router
41. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
Boot record infector
Network stumbler
The conficker worm
Some types of malicious code
42. Provides insight into the tactics - motives - and attacker tools
The five threat vectors
Address resolution protocol
Social engineering
Some honeypot advantages
43. When someone has compromised the integrity of data or a program. Allows attackers to create backdoors.
COM/Script program infector
Alteration of code
Worms
Rotation?
44. Identify critical assets and provide layered protection - data is accessed by applications - applications reside on hosts - hosts operate on networks
Switches
Arbitrary substitution
The Information Centric defense in depth
ATM work
45. Work groups that require additional protection are segmented from the rest of the internal organization - restricting access to critical segments - system of VPNs - internal firewall - VLANs and ACLs
The protected enclave to defense in depth
Parasitic malware
Defense in depth
Some disadvantages of honeypots
46. It interacts with data and prepares it to be transmitted across the network. It ensures reliable connectivity from end-to-end
Asynchronous Transfer Mode
Arbitrary substitution
OS Command Injection defenses
The transport layer
47. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
Worms
DDoS attack
The session layer
Integrity of Data
48. The practice of sending an ACK inside another packet going to the same destination
Social engineering
SYN flood
Stateless packet filter
ACK piggybacking
49. Protected at rest - protected in transit - secure the key
Address Resolution Protocol (ARP)
Stateless packet filter
What ways should the crypto key be protected?
The session layer
50. Connects many WANs - MANs - and LANs - provided via ISP
Worms
Internet
A netcat listener
What ways should the crypto key be protected?