Test your basic knowledge |

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Network scanner.






2. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone






3. Intrusion detection system - it reports attacks against monitored systems/networks






4. Uses inclusive or exclusive lists - inclusive analysis utilizes a list of keywords - exclusive analysis utilizes a list of events that can be ignored






5. Threat requires a vector to cross the vulnerability - stop the ability of the threat to use the vector






6. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.






7. FIN 130 - ACK 131 - FIN 570 - ACK 571






8. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key






9. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted






10. Attaches itself to existing program files and activated when the exe is launched






11. Uniform protection - protected enclaves - information centric - threat vector analysis






12. Protected at rest - protected in transit - secure the key






13. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0






14. destruction of data - leaking confidential information - providing backdoor access






15. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet






16. A system resource that has no legitimate purpose or reason for someone to connect to it - its purpose is to draw in attackers to understand how they break into a system






17. A TCP version of ping - sends custom TCP packets to a host and listens for replies - enables port scanning and spoofing simultaneously






18. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry






19. Take the file and try to compress it. If it compresses - it means there is a pattern and it's more easily crackable


20. Migrate to WPA2 - use strong authentication like PEAP or TTLS - audit network installations - require mutual auth between client and infrastructure equipment






21. Isolates systems when they initially connect to the network - allows systems to be scanned and checked prior to being put on a trusted segment






22. Provides insight into the tactics - motives - and attacker tools






23. Malware - insider threat - natural disaster - terrorism - pandemic






24. Protocol for mapping an IP address to a physical machine address that is recognized on the local network - A table - usually called the ARP cache - is used to maintain a correlation between each MAC and it's corresponding IP address






25. War dialing - war driving - Sniffing - eavesdropping - dumpster diving - social engineering






26. A cracking tool inserted into the OS that allows the attacker to do as they please.






27. Maintains complete TCP connection state and sequencing through 2 connections - address translation built-in by virtue of second connection above






28. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware


29. Confidentiality - integrity - availability






30. Used by IDS for a baseline before analysis - attackers will try to de-normalize traffic to evade detection - IDS will normalize data for understood protocols






31. 20 - FTP data - 21 - FTP - 23 - Telnet - 25 - SNMP - 53 - DNS - 79 - Finger - 80 - HTTP - 110 - POP - 443 - HTTPS






32. Known - unknown - zero day






33. 8 bytes per packet - UDP SRC port - UDP DST Ports - UDP length - UDP Checksum






34. Protects internal/external systems from attack - filters communications based on content - performs NAT - encrypts communications for VPN - logging to aid in intrusion detection






35. Network traffic to the host - typically listens on all interface - uses signature analysis to identify events of interest






36. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures






37. Publish separate mail - web - and DNS servers to the internet - provide appropriate access from internal network to internet - protect internal from external attack - provide defense in depth - protect all aspects of the system






38. Handles transmissions across the physical media like wires - fiber - etc






39. Slow - requires stateful data tracking - inspects all fields - including variable-length fields






40. Used for connecting two physical segments of a network - segments traffic - breaks up collision domains - not generally used because of switches






41. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom






42. It handles the establishment and maintenance of connections between systems






43. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code






44. Allows admins to remotely access a system for troubleshooting. - E.g VNC - GoToMyPc - PC Anywhere






45. It makes sure the data sent from one side to the other is in a format useful to the other side






46. Switches networks make it difficult to monitor traffic in promiscuous mode - topology must be able to support traffic aggregation for monitoring






47. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535






48. Connects the physical part of the network (cables) with the abstract (packets and datastreams)






49. One is for talking - one is for implementing






50. 1. physical 2. data 3. network 4. transport 5. session 6. presentation 7. application