SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. CIDR is a shorthand way of specifying which portion of the address is the network - and which portion is the host
CIDR
Overview of TCP
Some reasons to use TCP over UDP
Trojan horse
2. Small program triggered by an event that provides an action. E.g. scheduled file removal if countdown isn't reset - ie: employee was fired
Logic bomb
Alteration of code
Hping
Some external threat concerns
3. It allows the transport layer to detect when the UDP headers or the payload have been modified in transit
Checksum in UDP
ACK piggybacking
Proxy or application gateway
Network stumbler
4. Protected at rest - protected in transit - secure the key
CIDR
What ways should the crypto key be protected?
Some disadvantages of honeypots
The five threat vectors
5. Connects many WANs - MANs - and LANs - provided via ISP
Some firewall benefits
Some NIDS topology limitations
Deep packet inspection
Internet
6. It interacts with the application layer to determine which network services will be required
What threats should be protected against - based on threat levels
the application layer
The TCP/IP model
Nmap scanning techniques
7. Program disguised as something helpful - only to perform actions the user did not intend. Opening ports - installing other programs - etc.
Some malware capabilities
What range is a class A network?
Trojan horse
Buffer overflow
8. fast - with little fidelity - examines header information and limited payload data
Shallow packet inspection
Permutation
Multi protocol label switching
The different cable categories
9. Provides insight into the tactics - motives - and attacker tools
Parasitic malware
What range is a class B network?
Some honeypot advantages
A network protocol
10. Bits of code embedded in programs to quickly gain access at a later time
Ciphertext
When implementing protocols - what stack should be used?
Trap door
Program infector
11. Protects internal/external systems from attack - filters communications based on content - performs NAT - encrypts communications for VPN - logging to aid in intrusion detection
Some network design objectives
Browsing attack
Some firewall benefits
Rotation?
12. 1. physical 2. data 3. network 4. transport 5. session 6. presentation 7. application
The OSI Protocol Stack
Macro virus
the application layer
Some common UDP ports
13. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535
The presentation layer
Log monitoring work?
Datagram length of a UDP packet
Hping
14. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures
Smurf attack
PAN
Asynchronous Transfer Mode
NIDS advantages
15. Message in its encrypted form
What's a VLAN
Ciphertext
3-way handshake
Some external threat concerns
16. Netmasks or subnets provide a method for identifying what portion of an address is the network - and what portion is the host
Smurf attack
A netmask
Network stumbler
Honeypot
17. Stateful firewalls maintain state of traffic flows
The conficker worm
Stateful firewall
Some malware propagation techniques
Total cell size for asynchronous transfer mode (ATM)
18. Handles transmissions across the physical media like wires - fiber - etc
The physical layer stack
When setting up a virtual circuit
Kismet
Vulnerabilities
19. A list of files is defined that should be monitored for a change - HIDS software calculates a one-way hash for each file - if a change is made to the file - the hash is changed
Types of viruses
What's a VLAN
The five threat vectors
File integrity checking work
20. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
Program infector
The conficker worm
The session layer
Anomaly analysis work
21. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
The different cable categories
Some reasons to use UDP over TCP
Some external threat concerns
The session layer
22. Attaches itself to existing program files and activated when the exe is launched
What threats should be protected against - based on threat levels
Some network design objectives
Program infector
Some disadvantages of honeypots
23. Resource exhaustion like DDoS or fork attack - unexpected input value the machine does not know how to process
Denial of service
Arbitrary substitution
Best way to protect wireless networks
Types of ATM virtual circuits
24. Relies on executable code insertion and user interaction to spread
Network stumbler
Bus Topology
War Dialing
Parasitic malware
25. Protocol for mapping an IP address to a physical machine address that is recognized on the local network. A table - usually called the ARP cache - is used to maintain a correlation between each MAC and its corresponding IP address
Some reasons to use UDP over TCP
Alteration of code
Address resolution protocol
3-way handshake
26. True positive - false positive - true negative - false negative
IDS
What range is a class A network?
The goals of cryptography
The four types of events reported by IDS
27. An appliance that controls access between public internet and a companies private network - or between a PC NIC and the rest of the PC.
IDS
The three goals of security
Firewall
PAN
28. Used for connecting two physical segments of a network - segments traffic - breaks up collision domains - not generally used because of switches
Bridge
IDS signature analysis work
No State Inspection ACK flag set
The TCP/IP model
29. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
Some reasons to use UDP over TCP
NIDS advantages
Buffer overflow
Some malware propagation techniques
30. Most commonly used transport protocol today - ensures reliable packet delivery - has error handling built in
Shallow packet inspection
Alteration of code
Parasitic malware
Overview of TCP
31. ATM supports two types of virtual circuits: permanent virtual circuits and switches virtual circuit - PVC is set up in advance - usually manually - SVC is established automatically through a signaling protocol and can be created on the fly - establis
A network protocol
To establish a TCP session
Types of ATM virtual circuits
Checksum in UDP
32. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
Port scan
Stateless packet filter
Boot record infector
Defense in depth
33. open source tool for monitoring - can be used as a NIDS - has quick updates and flexibility for custom rules
Snort
Defense in depth
Stateful firewall
Logic bomb
34. Take the file and try to compress it. If it compresses - it means there is a pattern and it's more easily crackable
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
35. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.
Smurf attack
Defense in depth
Program infector
Nmap scanning techniques
36. Weakness in a system - inherent in a complex system - majority are due to poor coding - gateway by which threats are manifested
Network stumbler
Vulnerabilities
Trap door
Program infector
37. Switches along the path can be requested to allocate the desired amount of bandwidth. If the circuit has the required bandwidth - the circuit is set up.
Router
Defense in depth
Hubs
When setting up a virtual circuit
38. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
Kismet
Arbitrary substitution
Address resolution protocol
DDoS attack
39. Known - unknown - zero day
The four types of events reported by IDS
Types of viruses
What categories do vulnerabilities fall into?
The different cable categories
40. A hash is produced when applied to a monitored file. The hash always generates the same value unless a change was made. HIDS software checks the hashes of monitored files and if a change is found - analyst is notified. - ie: tripwire
File Integrity checking work
Internet
The physical layer stack
The TCP/IP model
41. risk = threat x vulnerability - impossible to eliminate - security is an exercise in loss reduction
The Uniform Protection to defense in depth
Rotation?
Risk
The OSI model
42. NTP - BootP/DHCP - NFS file systems - SNMP - TFTP
Some other UDP based protocols
Kismet
What categories do vulnerabilities fall into?
A blind FTP
43. Wide Area Network - Larger than MAN or LAN - uses public network - phone lines - and leased lines to tie LAN and MAN over a dispersed area
The transport layer
WAN
The four types of events reported by IDS
Switches
44. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
Integrity of Data
ACK piggybacking
SYN flood
What categories do vulnerabilities fall into?
45. removable media - email attachments - web browsing - social networking - network vulnerabilities - IM applications - p2p
The Uniform Protection to defense in depth
The CIA triad
The threat vector analysis in defense in depth
Some malware propagation techniques
46. local area network - small network confined to small location - all equipment owned by a single entity - vulnerable to inside threats and logic bombs
ACK piggybacking
Nmap
LAN
The network layer
47. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code
The five threat vectors
OS Command Injection defenses
Anomaly analysis work
SQL Slammer Worm
48. Trivial File Transfer Protocol - method to transfer files from one device to another without needing authentication
The four basic approaches to defense in depth
Some common TCP ports
TFTP
Some types of malicious code
49. Very simplistic. All systems are attached to the same cable segment. Rarely used because they're unreliable - low fault tolerance - poor traffic isolation - with limited scalability
File integrity checking work
ACK piggybacking
Bus Topology
When talking about protocols and referencing layers - what stack is used
50. 128.0.0.0 through 191.255.255.255 - with a subnet mask of 255.255.0.0
Port scan
Risk
The difference in stacks
What range is a class B network?
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests