SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. 20 - FTP data - 21 - FTP - 23 - Telnet - 25 - SNMP - 53 - DNS - 79 - Finger - 80 - HTTP - 110 - POP - 443 - HTTPS
The three goals of security
Some common TCP ports
Some network design objectives
IDS
2. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code
What range is a class B network?
Honeypot
Browsing attack
The five threat vectors
3. Means multiple iterations won't matter. If you encrypt with a key - then re-encrypt - it's the same as using one key.
Group
LAN
SQL Slammer Worm
TFTP
4. Resource exhaustion like DDoS or fork attack - unexpected input value the machine does not know how to process
What range is a class B network?
NAC
Defense in depth
Denial of service
5. Not a replacement for firewalls - hardening - strong policies - or other DiD methods - low maintenance - inexpensive
When talking about protocols and referencing layers - what stack is used
Honeyd
Some NIDS topology limitations
IDS not
6. flags anomalous conditions in traffic on the network - requires understanding on what is normal - bases good traffic as a baseline
Some NIDS topology limitations
Some malware capabilities
Anomaly analysis work
CIDR
7. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
To establish a TCP session
Program infector
Hubs
Arbitrary substitution
8. Handles transmissions across the physical media like wires - fiber - etc
Some reasons to use TCP over UDP
The TCP/IP model
The physical layer stack
COM/Script program infector
9. A low end firewall that can quickly be deployed using existing hardware. They examine packets themselves with no content.
Some other UDP based protocols
Stateless packet filter
The data link layer
LAN
10. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
Nmap
A network protocol
Some malware propagation techniques
Some other UDP based protocols
11. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone
What range is a class A network?
The network layer
MAN
Wardriving
12. 1 and 2 - Voice/Low speed data - 3 - Voice/Data 10Mb - 4 - Voice/Data 16Mb - 5 - 5e - Voice/Data 100Mb to 1Gb - 6 - Standard for gigabit
The different cable categories
Race conditions
Switches
CIDR
13. It interacts with data and prepares it to be transmitted across the network. It ensures reliable connectivity from end-to-end
The transport layer
UDP packet headers
Deep packet inspection
Permutation
14. NTP - BootP/DHCP - NFS file systems - SNMP - TFTP
NIDS challenges
Types of viruses
Wardriving
Some other UDP based protocols
15. ATM supports two types of virtual circuits: permanent virtual circuits and switches virtual circuit - PVC is set up in advance - usually manually - SVC is established automatically through a signaling protocol and can be created on the fly - establis
Rotation?
Datagram length of a UDP packet
Plaintext
Types of ATM virtual circuits
16. Syn - Syn/Ack - Ack
Wardriving
LAN
Risk
To establish a TCP session
17. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
A netcat listener
The OSI model
OS Command Injection defenses
DDoS attack
18. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Some FTP dangers
When setting up a virtual circuit
Kismet
The Information Centric defense in depth
19. Confidentiality - integrity - availability
The three goals of security
Some external threat concerns
Worms
The transport layer
20. Isolates systems when they initially connect to the network - allows systems to be scanned and checked prior to being put on a trusted segment
NAC
The Information Centric defense in depth
Buffer overflow
Remote maintenance
21. OSI
Some Pen Test techniques
Types of viruses
DDoS attack
When talking about protocols and referencing layers - what stack is used
22. Attaches itself to existing program files and activated when the exe is launched
Race conditions
To establish a TCP session
Honeyd
Program infector
23. An appliance that controls access between public internet and a companies private network - or between a PC NIC and the rest of the PC.
Firewall
Deep packet inspection
MAN
Types of viruses
24. It interacts with the application layer to determine which network services will be required
Deep packet inspection
the application layer
Logic bomb
The TCP/IP model
25. Used for connecting two physical segments of a network - segments traffic - breaks up collision domains - not generally used because of switches
CIDR
Best way to protect wireless networks
The presentation layer
Bridge
26. logic bomb - trojan horse - trap door
Some FTP dangers
Smurf attack
Some types of malicious code
NIDS challenges
27. 1.0.0.0 through 127.255.255.255 - subnet mask starts at 255.0.0.0
What range is a class A network?
Some honeypot advantages
Honeypot
Proxy or application gateway
28. It handles the establishment and maintenance of connections between systems
Some types of malicious code
IDS data normalization
Logic bomb
The session layer
29. keeps the same letters - but changes the position within the text - easy to break - can be combined with substitution
Multi protocol label switching
Risk
Permutation
Alteration of code
30. Network scanner.
The threat vector analysis in defense in depth
Denial of service
Nmap
What range is a class C network?
31. Protocol for mapping an IP address to a physical machine address that is recognized on the local network. A table - usually called the ARP cache - is used to maintain a correlation between each MAC and its corresponding IP address
What range is a class C network?
Checksum in UDP
Address resolution protocol
Hping
32. Confidentiality - integrity - availability
A blind FTP
Some Pen Test techniques
The CIA triad
Some disadvantages of honeypots
33. A hash is produced when applied to a monitored file. The hash always generates the same value unless a change was made. HIDS software checks the hashes of monitored files and if a change is found - analyst is notified. - ie: tripwire
File Integrity checking work
Honeyd
Bridge
The difference in stacks
34. Parasitic malware - boot record infector - macro - COM/Script program infector - EXE program infector
Firewall
Rotation?
Types of viruses
Nmap
35. Bits of code embedded in programs to quickly gain access at a later time
To establish a TCP session
Trap door
The data link layer
Router
36. 128.0.0.0 through 191.255.255.255 - with a subnet mask of 255.255.0.0
MAN
Some network design objectives
LAN
What range is a class B network?
37. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures
File Integrity checking work
NIDS advantages
Checksum in UDP
Some disadvantages of honeypots
38. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
Some disadvantages of honeypots
OS Command Injection defenses
When implementing protocols - what stack should be used?
Bus Topology
39. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
40. Used by IDS for a baseline before analysis - attackers will try to de-normalize traffic to evade detection - IDS will normalize data for understood protocols
COM/Script program infector
Social engineering
IDS data normalization
Hubs
41. Trivial File Transfer Protocol - method to transfer files from one device to another without needing authentication
IDS not
Port scan
Stateless packet filter
TFTP
42. Physical layer - Data link layer - Network Layer - Transport Layer - Session Layer - Presentation Layer - Application Layer
Hping
The presentation layer
The OSI model
What categories do vulnerabilities fall into?
43. local area network - small network confined to small location - all equipment owned by a single entity - vulnerable to inside threats and logic bombs
LAN
Some Pen Test techniques
Plaintext
Some disadvantages of honeypots
44. deployment challenges including topology and access limitations - analyzing encrypted traffic - quantity vs. quality of signatures - performance limitations with extensive analysis techniques - very costly for proper management
What's a VLAN
To close a TCP session
NIDS challenges
The three goals of security
45. Connection oriented - before systems can communicate over an ATM network - they must establish a virtual circuit between each other - this can span across multiple ATM switches that also handle communications for other systems - at the end of the con
Worms
IDS data normalization
3-way handshake
ATM work
46. A cracking tool inserted into the OS that allows the attacker to do as they please.
The presentation layer
To close a TCP session
What threats should be protected against - based on threat levels
Rootkit
47. Anonymous FTP - FTP passes through clear text - Bounce attacks with the PORT command - user can cause an FTP to open a connection from the FTP's own commands and bypass a firewall
Some FTP dangers
The five threat vectors
Asynchronous Transfer Mode
Denial of service
48. Protocol for mapping an IP address to a physical machine address that is recognized on the local network - A table - usually called the ARP cache - is used to maintain a correlation between each MAC and it's corresponding IP address
Some FTP dangers
The protected enclave to defense in depth
Address Resolution Protocol (ARP)
Social engineering
49. removable media - email attachments - web browsing - social networking - network vulnerabilities - IM applications - p2p
PAN
Integrity of Data
Some malware propagation techniques
Address Resolution Protocol (ARP)
50. Replicates traffic onto all ports - no traffic monitoring - cannot control which ports should or shouldn't receive frames - forming a large collision domain.
Hubs
Deep packet inspection
The physical layer stack
Some common UDP ports