SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. 1 and 2 - Voice/Low speed data - 3 - Voice/Data 10Mb - 4 - Voice/Data 16Mb - 5 - 5e - Voice/Data 100Mb to 1Gb - 6 - Standard for gigabit
Integrity of Data
IDS
The different cable categories
File integrity checking work
2. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
TFTP
The conficker worm
The physical layer stack
The four basic approaches to defense in depth
3. An attempt to gain access by bombarding it with guesses until the password is found.
the application layer
Types of viruses
SYN flood
Brute force
4. Identify critical assets and provide layered protection - data is accessed by applications - applications reside on hosts - hosts operate on networks
Deep packet inspection
Ciphertext
The Information Centric defense in depth
Switches
5. When someone has compromised the integrity of data or a program. Allows attackers to create backdoors.
The network layer
Alteration of code
Kismet
Plaintext
6. Migrate to WPA2 - use strong authentication like PEAP or TTLS - audit network installations - require mutual auth between client and infrastructure equipment
Honeyd
Worms
Best way to protect wireless networks
File Integrity checking work
7. Unencrypted message in its original form
MAN
Plaintext
Integrity of Data
The four types of events reported by IDS
8. Application layer attacks may get through - dialup - VPN - extranet connections may bypass firewalls
Best way to protect wireless networks
Some NIDS topology limitations
What's a VLAN
Some firewall challenges
9. Handles transmissions across the physical media like wires - fiber - etc
Firewall
The physical layer stack
The Uniform Protection to defense in depth
The four basic approaches to defense in depth
10. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
IDS signature analysis work
What range is a class C network?
Datagram length of a UDP packet
Port scan
11. open source tool for monitoring - can be used as a NIDS - has quick updates and flexibility for custom rules
Worms
Snort
Some reasons to use UDP over TCP
Honeyd
12. A TCP version of ping - sends custom TCP packets to a host and listens for replies - enables port scanning and spoofing simultaneously
IDS data normalization
The threat vector analysis in defense in depth
Switches
Hping
13. Relies on executable code insertion and user interaction to spread
Race conditions
Internet
What ways should the crypto key be protected?
Parasitic malware
14. Provides insight into the tactics - motives - and attacker tools
Integrity of Data
PAN
Some honeypot advantages
A blind FTP
15. packet filter firewalls rely on TCP flags to determine connection state. Attacker can send ACK packets only to bypass firewall.
Brute force
No State Inspection ACK flag set
the application layer
Rotation?
16. Handles the network address scheme and connectivity of multiple network segments. It handles communication.
The network layer
Some NIDS topology limitations
Hping
Vulnerabilities
17. OSI
Firewall
What categories do vulnerabilities fall into?
When talking about protocols and referencing layers - what stack is used
Alteration of code
18. removable media - email attachments - web browsing - social networking - network vulnerabilities - IM applications - p2p
What range is a class C network?
Some firewall challenges
Some malware propagation techniques
PAN
19. The practice of sending an ACK inside another packet going to the same destination
IDS
ACK piggybacking
Best way to protect wireless networks
Total cell size for asynchronous transfer mode (ATM)
20. Simplest form of a research honeypot - useful in identifying nature of TCP scans - allows attacker to complete 3-way handshake - listens on a defined port - logs incoming requests for analysis
Bus Topology
A netcat listener
The transport layer
Honeypot
21. 1. physical 2. data 3. network 4. transport 5. session 6. presentation 7. application
The four basic approaches to defense in depth
The five threat vectors
The OSI Protocol Stack
Rotation?
22. Used for connecting two physical segments of a network - segments traffic - breaks up collision domains - not generally used because of switches
Bridge
Some disadvantages of honeypots
The network layer
Trojan horse
23. Isolates systems when they initially connect to the network - allows systems to be scanned and checked prior to being put on a trusted segment
Some common TCP ports
Firewall
NAC
Nmap scanning techniques
24. UDP based infection - infected through vulnerability in SQL server - caused DoS on saturated networks
The OSI model
Browsing attack
SQL Slammer Worm
EXE program infector
25. fast - with little fidelity - examines header information and limited payload data
Shallow packet inspection
SYN flood
Address Resolution Protocol (ARP)
IDS data normalization
26. War dialing - war driving - Sniffing - eavesdropping - dumpster diving - social engineering
When setting up a virtual circuit
Some Pen Test techniques
Some firewall challenges
Some network design objectives
27. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures
Proxy or application gateway
Trap door
What range is a class B network?
NIDS advantages
28. Uniform protection - protected enclaves - information centric - threat vector analysis
The four basic approaches to defense in depth
What categories do vulnerabilities fall into?
Social engineering
Nmap scanning techniques
29. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone
ACK piggybacking
IDS data normalization
MAN
Some common UDP ports
30. Attaches itself to existing program files and activated when the exe is launched
Some honeypot advantages
Program infector
COM/Script program infector
What range is a class B network?
31. Publish separate mail - web - and DNS servers to the internet - provide appropriate access from internal network to internet - protect internal from external attack - provide defense in depth - protect all aspects of the system
Some firewall benefits
Remote maintenance
Some network design objectives
Some FTP dangers
32. Full open - half open (stealth scan) - UDP - Ping
NIDS challenges
Firewall
Nmap scanning techniques
Some malware propagation techniques
33. Physical layer - Data link layer - Network Layer - Transport Layer - Session Layer - Presentation Layer - Application Layer
Some FTP dangers
Address Resolution Protocol (ARP)
A blind FTP
The OSI model
34. Protects internal/external systems from attack - filters communications based on content - performs NAT - encrypts communications for VPN - logging to aid in intrusion detection
Some firewall benefits
Some common UDP ports
Stateful firewall
Honeyd
35. Protocol for mapping an IP address to a physical machine address that is recognized on the local network. A table - usually called the ARP cache - is used to maintain a correlation between each MAC and its corresponding IP address
Some firewall benefits
Address resolution protocol
Worms
What's an easy way to test encryption?
36. risk = threat x vulnerability - impossible to eliminate - security is an exercise in loss reduction
The four types of events reported by IDS
NAC
Risk
What ways should the crypto key be protected?
37. local area network - small network confined to small location - all equipment owned by a single entity - vulnerable to inside threats and logic bombs
What range is a class C network?
LAN
Port scan
Log monitoring work?
38. It makes sure the data sent from one side to the other is in a format useful to the other side
Address Resolution Protocol (ARP)
Macro virus
The presentation layer
Rootkit
39. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
Network stumbler
Some reasons to use UDP over TCP
Remote maintenance
Switches
40. Very simplistic. All systems are attached to the same cable segment. Rarely used because they're unreliable - low fault tolerance - poor traffic isolation - with limited scalability
Address resolution protocol
Bus Topology
NIDS challenges
Some types of malicious code
41. Malware - insider threat - natural disaster - terrorism - pandemic
Denial of service
War Dialing
LAN
What primary threats should be protected against
42. True positive - false positive - true negative - false negative
Some types of malicious code
Best way to protect wireless networks
The presentation layer
The four types of events reported by IDS
43. Work groups that require additional protection are segmented from the rest of the internal organization - restricting access to critical segments - system of VPNs - internal firewall - VLANs and ACLs
Brute force
The five threat vectors
Remote maintenance
The protected enclave to defense in depth
44. Personal area network - phone tethering - bluetooth - etc
Stateful firewall
Some network design objectives
PAN
Network stumbler
45. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code
The three goals of security
The five threat vectors
Some common TCP ports
A blind FTP
46. Intellectual property - business goals - validated data - historical
What threats should be protected against - based on threat levels
Vulnerabilities
The protected enclave to defense in depth
Proxy or application gateway
47. Weakness in a system - inherent in a complex system - majority are due to poor coding - gateway by which threats are manifested
Shallow packet inspection
Rotation?
Vulnerabilities
Stateless packet filter
48. Attacks systems through known vulnerabilities - automatically scans for more systems to attack - lowers system defenses - installs rootkit or root shell - opens up back doors - self contained malware that can copy itself
Worms
Some reasons to use TCP over UDP
SYN flood
Vulnerabilities
49. Stateful firewalls maintain state of traffic flows
the application layer
Stateful firewall
Macro virus
IDS signature analysis work
50. Unified data carrying service - replacing from replay and ATM
Program infector
Boot record infector
NIDS challenges
Multi protocol label switching