SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. The practice of sending an ACK inside another packet going to the same destination
The OSI model
TFTP
ACK piggybacking
What's a VLAN
2. Relies on executable code insertion and user interaction to spread
Network stumbler
Rootkit
The five threat vectors
Parasitic malware
3. Connects many WANs - MANs - and LANs - provided via ISP
Group
Internet
The OSI Protocol Stack
EXE program infector
4. A system resource that has no legitimate purpose or reason for someone to connect to it - its purpose is to draw in attackers to understand how they break into a system
Address Resolution Protocol (ARP)
Some NIDS topology limitations
Honeypot
3-way handshake
5. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone
IDS data normalization
IDS not
MAN
HIDS monitor
6. It interacts with the application layer to determine which network services will be required
Best way to protect wireless networks
the application layer
Multi protocol label switching
Bus Topology
7. Prepends to the beginning of the file and gains control when the first instruction of the infected COM file is executed - appending to the end - virus writes its payload to the end and inserts jump instruction as the first instruction - which execute
COM/Script program infector
What range is a class A network?
Boot record infector
Program infector
8. It makes sure the data sent from one side to the other is in a format useful to the other side
A network protocol
Defense in depth
Denial of service
The presentation layer
9. rules indicate criteria in packets that represent events of interest - rules are applied to packets as they are received - alerts are created when matches are found
A netcat listener
Integrity of Data
IDS signature analysis work
Deep packet inspection
10. Bits of code embedded in programs to quickly gain access at a later time
What ways should the crypto key be protected?
Trap door
What range is a class A network?
The data link layer
11. Connection oriented - before systems can communicate over an ATM network - they must establish a virtual circuit between each other - this can span across multiple ATM switches that also handle communications for other systems - at the end of the con
Logic bomb
3-way handshake
ATM work
Race conditions
12. Protocol for mapping an IP address to a physical machine address that is recognized on the local network. A table - usually called the ARP cache - is used to maintain a correlation between each MAC and its corresponding IP address
Checksum in UDP
The three goals of security
Address resolution protocol
What range is a class C network?
13. Network traffic to the host - typically listens on all interface - uses signature analysis to identify events of interest
When setting up a virtual circuit
HIDS monitor
Brute force
Some malware propagation techniques
14. Message in its encrypted form
Ciphertext
Trojan horse
The OSI Protocol Stack
Some reasons to use UDP over TCP
15. It handles the establishment and maintenance of connections between systems
The Information Centric defense in depth
The session layer
OS Command Injection defenses
Some network design objectives
16. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
Some reasons to use UDP over TCP
File Integrity checking work
Buffer overflow
The threat vector analysis in defense in depth
17. OSI
The physical layer stack
Nmap
Honeypot
When talking about protocols and referencing layers - what stack is used
18. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
19. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures
Browsing attack
Logic bomb
NIDS advantages
Trojan horse
20. logic bomb - trojan horse - trap door
The transport layer
What categories do vulnerabilities fall into?
Some common TCP ports
Some types of malicious code
21. Weakness in a system - inherent in a complex system - majority are due to poor coding - gateway by which threats are manifested
Vulnerabilities
The OSI model
ATM work
Worms
22. Intrusion detection system - it reports attacks against monitored systems/networks
Hubs
IDS
3-way handshake
The threat vector analysis in defense in depth
23. destruction of data - leaking confidential information - providing backdoor access
Some NIDS topology limitations
Deep packet inspection
Some malware capabilities
The OSI model
24. When someone has compromised the integrity of data or a program. Allows attackers to create backdoors.
Alteration of code
The four basic approaches to defense in depth
Anomaly analysis work
A network protocol
25. Four layers - Network Layer - Internet Layer - Transport Layer - Application layer
The TCP/IP model
Some common TCP ports
Port scan
DDoS attack
26. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
Some FTP dangers
Permutation
Deep packet inspection
The conficker worm
27. Physical layer - Data link layer - Network Layer - Transport Layer - Session Layer - Presentation Layer - Application Layer
The Uniform Protection to defense in depth
The OSI model
Program infector
Kismet
28. flags anomalous conditions in traffic on the network - requires understanding on what is normal - bases good traffic as a baseline
Shallow packet inspection
Some ways to bypass firewall protections
Anomaly analysis work
No State Inspection ACK flag set
29. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
File Integrity checking work
What range is a class C network?
The data link layer
The physical layer stack
30. Used by IDS for a baseline before analysis - attackers will try to de-normalize traffic to evade detection - IDS will normalize data for understood protocols
Boot record infector
The threat vector analysis in defense in depth
When setting up a virtual circuit
IDS data normalization
31. Replicates traffic onto all ports - no traffic monitoring - cannot control which ports should or shouldn't receive frames - forming a large collision domain.
Hubs
The Information Centric defense in depth
Overview of TCP
Multi protocol label switching
32. Uniform protection - protected enclaves - information centric - threat vector analysis
The four basic approaches to defense in depth
No State Inspection ACK flag set
War Dialing
The Uniform Protection to defense in depth
33. Going around with equipment to detect wireless networks
Internet
Wardriving
What's an easy way to test encryption?
Some firewall challenges
34. Considered to be a perimeter device
Router
Internet
Bridge
Permutation
35. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted
Trap door
Types of ATM virtual circuits
Network stumbler
A network protocol
36. A sends a SYN packet to B - B acknowledges with a SYN/ACK - A replies with ACK
Shallow packet inspection
3-way handshake
Hping
Firewall
37. Worms and Wireless - modems - tunnel anything through HTTP - social engineering
Risk
Some firewall benefits
Some ways to bypass firewall protections
Firewall
38. Trivial File Transfer Protocol - method to transfer files from one device to another without needing authentication
Port scan
Some honeypot advantages
UDP packet headers
TFTP
39. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
Integrity of Data
No State Inspection ACK flag set
Hubs
Some Pen Test techniques
40. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
the application layer
COM/Script program infector
Bridge
Port scan
41. Isolates systems when they initially connect to the network - allows systems to be scanned and checked prior to being put on a trusted segment
Alteration of code
NAC
Program infector
A netcat listener
42. Anonymous FTP - FTP passes through clear text - Bounce attacks with the PORT command - user can cause an FTP to open a connection from the FTP's own commands and bypass a firewall
LAN
Some FTP dangers
The presentation layer
The threat vector analysis in defense in depth
43. packet filter firewalls rely on TCP flags to determine connection state. Attacker can send ACK packets only to bypass firewall.
The CIA triad
What primary threats should be protected against
No State Inspection ACK flag set
Smurf attack
44. A cracking tool inserted into the OS that allows the attacker to do as they please.
Datagram length of a UDP packet
SYN flood
Rootkit
the application layer
45. Infects MBR - no network spreading potential
Honeyd
Address Resolution Protocol (ARP)
Boot record infector
Some other UDP based protocols
46. FIN 130 - ACK 131 - FIN 570 - ACK 571
What threats should be protected against - based on threat levels
To close a TCP session
Bridge
TFTP
47. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
When implementing protocols - what stack should be used?
Internet
Rootkit
Remote maintenance
48. Netmasks or subnets provide a method for identifying what portion of an address is the network - and what portion is the host
File integrity checking work
Some malware propagation techniques
The physical layer stack
A netmask
49. A hash is produced when applied to a monitored file. The hash always generates the same value unless a change was made. HIDS software checks the hashes of monitored files and if a change is found - analyst is notified. - ie: tripwire
To close a TCP session
Bridge
File Integrity checking work
CIDR
50. CIDR is a shorthand way of specifying which portion of the address is the network - and which portion is the host
The four basic approaches to defense in depth
CIDR
Total cell size for asynchronous transfer mode (ATM)
Some network design objectives
Sorry!:) No result found.
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests