SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Take the file and try to compress it. If it compresses - it means there is a pattern and it's more easily crackable
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
2. open source tool for monitoring - can be used as a NIDS - has quick updates and flexibility for custom rules
Some other UDP based protocols
Snort
The four types of events reported by IDS
Datagram length of a UDP packet
3. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
Trap door
Arbitrary substitution
File integrity checking work
Denial of service
4. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535
Some malware capabilities
3-way handshake
Datagram length of a UDP packet
Some firewall benefits
5. Considered to be a perimeter device
The data link layer
Trojan horse
Router
The five threat vectors
6. A TCP version of ping - sends custom TCP packets to a host and listens for replies - enables port scanning and spoofing simultaneously
The protected enclave to defense in depth
Hping
Some common TCP ports
Defense in depth
7. keeps the same letters - but changes the position within the text - easy to break - can be combined with substitution
Permutation
Checksum in UDP
The difference in stacks
IDS data normalization
8. Parasitic malware - boot record infector - macro - COM/Script program infector - EXE program infector
A netmask
Worms
Types of viruses
Some Pen Test techniques
9. Confidentiality - integrity - availability
A network protocol
The CIA triad
Hubs
Bridge
10. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.
Smurf attack
Some network design objectives
Remote maintenance
The threat vector analysis in defense in depth
11. Attacks systems through known vulnerabilities - automatically scans for more systems to attack - lowers system defenses - installs rootkit or root shell - opens up back doors - self contained malware that can copy itself
A netmask
When implementing protocols - what stack should be used?
File integrity checking work
Worms
12. Trying to ID modems in a telephone exchange that may be susceptible to compromise
War Dialing
Datagram length of a UDP packet
Rotation?
Social engineering
13. Attempt to manipulate or trick a person into providing information or access - bypass network security by exploiting humans - vector is often outside attack by telephone or visitor inside
DDoS attack
Social engineering
What range is a class B network?
Trap door
14. Trivial File Transfer Protocol - method to transfer files from one device to another without needing authentication
Nmap scanning techniques
The Information Centric defense in depth
Stateful firewall
TFTP
15. True positive - false positive - true negative - false negative
SQL Slammer Worm
The presentation layer
To close a TCP session
The four types of events reported by IDS
16. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
Ciphertext
Wardriving
Multi protocol label switching
Some external threat concerns
17. 1.0.0.0 through 127.255.255.255 - subnet mask starts at 255.0.0.0
Group
Smurf attack
The Information Centric defense in depth
What range is a class A network?
18. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone
Some common UDP ports
The conficker worm
A network protocol
MAN
19. A spoofed IP is used to send a SYN to the target. It then responds with a SYN/ACK that never receives the final ACK to complete the handshake. This occupies a portion of the target's pre-established buffer for TCP and can prevent the target from acce
When setting up a virtual circuit
The presentation layer
SYN flood
The protected enclave to defense in depth
20. Confidentiality - symmetric encryption
Some reasons to use TCP over UDP
Rootkit
the application layer
The goals of cryptography
21. Weakness in a system - inherent in a complex system - majority are due to poor coding - gateway by which threats are manifested
Wardriving
Switches
Vulnerabilities
Shallow packet inspection
22. Combines the functionality of a hub and bride into a single device - keeps track of MACs attached to each port
Some common UDP ports
CIDR
To establish a TCP session
Switches
23. A sends a SYN packet to B - B acknowledges with a SYN/ACK - A replies with ACK
Port scan
SQL Slammer Worm
3-way handshake
COM/Script program infector
24. Improper deployment can increase attack risk - if production systems aren't sufficiently protected - they can be vulnerable from a honeypot - legal liability
Plaintext
To close a TCP session
Some disadvantages of honeypots
Rotation?
25. Handles the network address scheme and connectivity of multiple network segments. It handles communication.
The network layer
The different cable categories
WAN
Checksum in UDP
26. Four layers - Network Layer - Internet Layer - Transport Layer - Application layer
What range is a class A network?
Wardriving
Hubs
The TCP/IP model
27. Attaches itself to existing program files and activated when the exe is launched
DDoS attack
Bus Topology
Program infector
The transport layer
28. Malware - insider threat - natural disaster - terrorism - pandemic
The conficker worm
LAN
IDS
What primary threats should be protected against
29. Program disguised as something helpful - only to perform actions the user did not intend. Opening ports - installing other programs - etc.
War Dialing
Nmap scanning techniques
Anomaly analysis work
Trojan horse
30. Known - unknown - zero day
Internet
LAN
A netmask
What categories do vulnerabilities fall into?
31. Most common approach - firewall - VPN - intrusion detection - AV - disk encryption - all parts of the organization receive equal protection - particularly vulnerable to malicious inside attacks
The five threat vectors
The Uniform Protection to defense in depth
Some network design objectives
Checksum in UDP
32. Stateful firewalls maintain state of traffic flows
Hping
Bridge
Stateful firewall
Anomaly analysis work
33. removable media - email attachments - web browsing - social networking - network vulnerabilities - IM applications - p2p
Best way to protect wireless networks
Shallow packet inspection
Risk
Some malware propagation techniques
34. ATM supports two types of virtual circuits: permanent virtual circuits and switches virtual circuit - PVC is set up in advance - usually manually - SVC is established automatically through a signaling protocol and can be created on the fly - establis
Some firewall benefits
What ways should the crypto key be protected?
WAN
Types of ATM virtual circuits
35. 53 - DNS - 67 - BootP - 68 - BootP - 69 - TFTP - 123- NTP - 137-139 NBT - 161 - SNMP - 162 - SNMP - 2049 - NFS
Some common UDP ports
Address Resolution Protocol (ARP)
Hubs
Some firewall challenges
36. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
Rotation?
Defense in depth
The presentation layer
DDoS attack
37. Relies on executable code insertion and user interaction to spread
Parasitic malware
Switches
IDS signature analysis work
MAN
38. Syn - Syn/Ack - Ack
To establish a TCP session
The CIA triad
Kismet
Some common UDP ports
39. deployment challenges including topology and access limitations - analyzing encrypted traffic - quantity vs. quality of signatures - performance limitations with extensive analysis techniques - very costly for proper management
What range is a class A network?
NIDS challenges
Permutation
SYN flood
40. When someone has compromised the integrity of data or a program. Allows attackers to create backdoors.
Some ways to bypass firewall protections
Browsing attack
the application layer
Alteration of code
41. It makes sure the data sent from one side to the other is in a format useful to the other side
Some NIDS topology limitations
Defense in depth
What primary threats should be protected against
The presentation layer
42. The practice of sending an ACK inside another packet going to the same destination
PAN
ACK piggybacking
the application layer
The OSI model
43. 8 bytes per packet - UDP SRC port - UDP DST Ports - UDP length - UDP Checksum
PAN
Anomaly analysis work
UDP packet headers
What categories do vulnerabilities fall into?
44. Connects many WANs - MANs - and LANs - provided via ISP
Group
Datagram length of a UDP packet
Internet
Risk
45. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
3-way handshake
Internet
Some firewall benefits
Port scan
46. Application layer attacks may get through - dialup - VPN - extranet connections may bypass firewalls
Log monitoring work?
Ciphertext
Some firewall challenges
Checksum in UDP
47. Not frequently seen on LANs because of expense - because of its traffic predictability and high bandwidth support - it's good for video streaming - encapsulates common protocols - uses virtual path identifiers to create end to end connectivity - has
Best way to protect wireless networks
Asynchronous Transfer Mode
Some NIDS topology limitations
Some firewall benefits
48. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
Smurf attack
HIDS monitor
When implementing protocols - what stack should be used?
Some external threat concerns
49. Poor programming without error checking can allow commands to be run in an input field. This can point to a command further in the buffer that will execute the attacker's payload.
Buffer overflow
EXE program infector
Some honeypot advantages
The data link layer
50. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Kismet
The Information Centric defense in depth
Overview of TCP
The presentation layer
Sorry!:) No result found.
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests