SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A TCP version of ping - sends custom TCP packets to a host and listens for replies - enables port scanning and spoofing simultaneously
Hping
IDS data normalization
What range is a class B network?
Wardriving
2. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
PAN
Parasitic malware
When implementing protocols - what stack should be used?
The Information Centric defense in depth
3. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
DDoS attack
Smurf attack
EXE program infector
Best way to protect wireless networks
4. True positive - false positive - true negative - false negative
The four types of events reported by IDS
IDS data normalization
Kismet
IDS signature analysis work
5. Very simplistic. All systems are attached to the same cable segment. Rarely used because they're unreliable - low fault tolerance - poor traffic isolation - with limited scalability
What's an easy way to test encryption?
Bridge
What range is a class C network?
Bus Topology
6. CIDR is a shorthand way of specifying which portion of the address is the network - and which portion is the host
The four types of events reported by IDS
Some honeypot advantages
CIDR
The goals of cryptography
7. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted
Network stumbler
Bus Topology
The CIA triad
Nmap scanning techniques
8. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
Port scan
Anomaly analysis work
Some Pen Test techniques
The four basic approaches to defense in depth
9. Infects MBR - no network spreading potential
CIDR
The four types of events reported by IDS
Boot record infector
Network stumbler
10. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
SYN flood
Worms
Integrity of Data
TFTP
11. Uses flow control to handle network congestion - can send larger amounts of data per packet - has guaranteed delivery of transmitted data - better protection against spoofing - reduces need for error checking at higher OSI layers
The four types of events reported by IDS
What range is a class B network?
Some reasons to use TCP over UDP
Remote maintenance
12. Wide Area Network - Larger than MAN or LAN - uses public network - phone lines - and leased lines to tie LAN and MAN over a dispersed area
Group
WAN
When talking about protocols and referencing layers - what stack is used
Some reasons to use TCP over UDP
13. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
The transport layer
Trojan horse
Boot record infector
What range is a class C network?
14. Most common approach - firewall - VPN - intrusion detection - AV - disk encryption - all parts of the organization receive equal protection - particularly vulnerable to malicious inside attacks
Buffer overflow
Honeyd
The Uniform Protection to defense in depth
The OSI model
15. Application layer attacks may get through - dialup - VPN - extranet connections may bypass firewalls
The different cable categories
Arbitrary substitution
File integrity checking work
Some firewall challenges
16. Unified data carrying service - replacing from replay and ATM
The different cable categories
The data link layer
Permutation
Multi protocol label switching
17. 1. physical 2. data 3. network 4. transport 5. session 6. presentation 7. application
Hping
The network layer
To establish a TCP session
The OSI Protocol Stack
18. Physical layer - Data link layer - Network Layer - Transport Layer - Session Layer - Presentation Layer - Application Layer
Bus Topology
The OSI model
OS Command Injection defenses
Some firewall benefits
19. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures
NIDS advantages
Internet
HIDS monitor
The threat vector analysis in defense in depth
20. Confidentiality - symmetric encryption
Address Resolution Protocol (ARP)
WAN
The goals of cryptography
Deep packet inspection
21. Attacks systems through known vulnerabilities - automatically scans for more systems to attack - lowers system defenses - installs rootkit or root shell - opens up back doors - self contained malware that can copy itself
What's a VLAN
Risk
What threats should be protected against - based on threat levels
Worms
22. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
Some external threat concerns
NIDS challenges
Snort
Firewall
23. Improper deployment can increase attack risk - if production systems aren't sufficiently protected - they can be vulnerable from a honeypot - legal liability
Some disadvantages of honeypots
What ways should the crypto key be protected?
Snort
NAC
24. 1.0.0.0 through 127.255.255.255 - subnet mask starts at 255.0.0.0
The OSI Protocol Stack
Buffer overflow
What range is a class A network?
DDoS attack
25. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code
The five threat vectors
Hping
Browsing attack
Some external threat concerns
26. packet filter firewalls rely on TCP flags to determine connection state. Attacker can send ACK packets only to bypass firewall.
Kismet
Stateful firewall
No State Inspection ACK flag set
Some Pen Test techniques
27. It makes sure the data sent from one side to the other is in a format useful to the other side
Hubs
The presentation layer
Some Pen Test techniques
SQL Slammer Worm
28. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
29. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Some external threat concerns
Nmap scanning techniques
Kismet
Buffer overflow
30. Message in its encrypted form
Risk
Rootkit
Trojan horse
Ciphertext
31. Prepends to the beginning of the file and gains control when the first instruction of the infected COM file is executed - appending to the end - virus writes its payload to the end and inserts jump instruction as the first instruction - which execute
IDS data normalization
Arbitrary substitution
Some common TCP ports
COM/Script program infector
32. Unencrypted message in its original form
The four types of events reported by IDS
Best way to protect wireless networks
Plaintext
File Integrity checking work
33. Strips OS commands and characters from input - avoid making system calls from within the app * especially based on user input
Plaintext
OS Command Injection defenses
Address Resolution Protocol (ARP)
Stateful firewall
34. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
Arbitrary substitution
IDS signature analysis work
Denial of service
Address Resolution Protocol (ARP)
35. 53 bytes - 48 bytes for data - 5 bytes for the header
Multi protocol label switching
Risk
Total cell size for asynchronous transfer mode (ATM)
Group
36. Worms and Wireless - modems - tunnel anything through HTTP - social engineering
When talking about protocols and referencing layers - what stack is used
Some ways to bypass firewall protections
To establish a TCP session
Wardriving
37. Switches along the path can be requested to allocate the desired amount of bandwidth. If the circuit has the required bandwidth - the circuit is set up.
Worms
Router
When setting up a virtual circuit
Shallow packet inspection
38. 1 and 2 - Voice/Low speed data - 3 - Voice/Data 10Mb - 4 - Voice/Data 16Mb - 5 - 5e - Voice/Data 100Mb to 1Gb - 6 - Standard for gigabit
The different cable categories
The network layer
File integrity checking work
Hubs
39. local area network - small network confined to small location - all equipment owned by a single entity - vulnerable to inside threats and logic bombs
Some network design objectives
LAN
Some malware propagation techniques
Race conditions
40. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
IDS signature analysis work
The Information Centric defense in depth
Worms
The conficker worm
41. Handles the network address scheme and connectivity of multiple network segments. It handles communication.
The network layer
To establish a TCP session
IDS signature analysis work
What range is a class C network?
42. Isolates systems when they initially connect to the network - allows systems to be scanned and checked prior to being put on a trusted segment
The CIA triad
Vulnerabilities
Social engineering
NAC
43. Personal area network - phone tethering - bluetooth - etc
PAN
Some network design objectives
Firewall
What range is a class B network?
44. Most commonly used transport protocol today - ensures reliable packet delivery - has error handling built in
A blind FTP
Honeyd
Overview of TCP
LAN
45. Simplest form of a research honeypot - useful in identifying nature of TCP scans - allows attacker to complete 3-way handshake - listens on a defined port - logs incoming requests for analysis
A netcat listener
Some network design objectives
OS Command Injection defenses
Macro virus
46. Four layers - Network Layer - Internet Layer - Transport Layer - Application layer
What's an easy way to test encryption?
Vulnerabilities
The TCP/IP model
What's a VLAN
47. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
What range is a class C network?
IDS signature analysis work
Ciphertext
A network protocol
48. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
When setting up a virtual circuit
The session layer
Some reasons to use UDP over TCP
Ack Piggybacking
49. It allows the transport layer to detect when the UDP headers or the payload have been modified in transit
The four basic approaches to defense in depth
Checksum in UDP
Trap door
Some firewall benefits
50. Used by IDS for a baseline before analysis - attackers will try to de-normalize traffic to evade detection - IDS will normalize data for understood protocols
IDS data normalization
Bus Topology
Port scan
The difference in stacks
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests