SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Network scanner.
Multi protocol label switching
Nmap
Arbitrary substitution
Router
2. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
3. Infects the EXE and make them operate slightly different - when infected - exe header sizes are altered to point to the appended viral code
The protected enclave to defense in depth
EXE program infector
Race conditions
A netcat listener
4. 8 bytes per packet - UDP SRC port - UDP DST Ports - UDP length - UDP Checksum
Asynchronous Transfer Mode
The goals of cryptography
UDP packet headers
The threat vector analysis in defense in depth
5. Trying to ID modems in a telephone exchange that may be susceptible to compromise
What categories do vulnerabilities fall into?
War Dialing
Some external threat concerns
The TCP/IP model
6. 53 - DNS - 67 - BootP - 68 - BootP - 69 - TFTP - 123- NTP - 137-139 NBT - 161 - SNMP - 162 - SNMP - 2049 - NFS
Some common UDP ports
LAN
COM/Script program infector
Kismet
7. Protected at rest - protected in transit - secure the key
Denial of service
The protected enclave to defense in depth
Some FTP dangers
What ways should the crypto key be protected?
8. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
Worms
Some external threat concerns
NIDS advantages
Deep packet inspection
9. Used for connecting two physical segments of a network - segments traffic - breaks up collision domains - not generally used because of switches
IDS not
Bridge
Rootkit
Stateful firewall
10. OSI
Integrity of Data
When talking about protocols and referencing layers - what stack is used
IDS signature analysis work
Log monitoring work?
11. A cracking tool inserted into the OS that allows the attacker to do as they please.
MAN
Rootkit
IDS signature analysis work
Some network design objectives
12. Physical layer - Data link layer - Network Layer - Transport Layer - Session Layer - Presentation Layer - Application Layer
What threats should be protected against - based on threat levels
NIDS challenges
Stateful firewall
The OSI model
13. Simple attack done by simply browsing available information that's allowed on a local network.
A network protocol
No State Inspection ACK flag set
The Uniform Protection to defense in depth
Browsing attack
14. Most commonly used transport protocol today - ensures reliable packet delivery - has error handling built in
Kismet
What primary threats should be protected against
Overview of TCP
Race conditions
15. removable media - email attachments - web browsing - social networking - network vulnerabilities - IM applications - p2p
The Uniform Protection to defense in depth
Some reasons to use TCP over UDP
Some malware propagation techniques
The physical layer stack
16. packet filter firewalls rely on TCP flags to determine connection state. Attacker can send ACK packets only to bypass firewall.
Stateless packet filter
What's a VLAN
No State Inspection ACK flag set
Some Pen Test techniques
17. Allows admins to remotely access a system for troubleshooting. - E.g VNC - GoToMyPc - PC Anywhere
Trap door
Firewall
The OSI Protocol Stack
Remote maintenance
18. Simplest form of a research honeypot - useful in identifying nature of TCP scans - allows attacker to complete 3-way handshake - listens on a defined port - logs incoming requests for analysis
Remote maintenance
Overview of TCP
A netcat listener
Boot record infector
19. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
COM/Script program infector
Parasitic malware
Arbitrary substitution
Ciphertext
20. Program disguised as something helpful - only to perform actions the user did not intend. Opening ports - installing other programs - etc.
Ack Piggybacking
Group
Trojan horse
Internet
21. Small program triggered by an event that provides an action. E.g. scheduled file removal if countdown isn't reset - ie: employee was fired
File Integrity checking work
CIDR
HIDS monitor
Logic bomb
22. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
Some reasons to use UDP over TCP
IDS
Honeypot
What categories do vulnerabilities fall into?
23. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.
Smurf attack
When talking about protocols and referencing layers - what stack is used
Some Pen Test techniques
Defense in depth
24. Most common approach - firewall - VPN - intrusion detection - AV - disk encryption - all parts of the organization receive equal protection - particularly vulnerable to malicious inside attacks
Integrity of Data
Log monitoring work?
Defense in depth
The Uniform Protection to defense in depth
25. flags anomalous conditions in traffic on the network - requires understanding on what is normal - bases good traffic as a baseline
SQL Slammer Worm
Anomaly analysis work
Snort
Some Pen Test techniques
26. Uses a 1 to 1 substitution of characters - rotate the alphabet by 'n' number of characters - rot+X means rotate the letters X characters
Some NIDS topology limitations
Rotation?
The three goals of security
Trap door
27. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
Multi protocol label switching
Kismet
EXE program infector
Port scan
28. 1. physical 2. data 3. network 4. transport 5. session 6. presentation 7. application
Integrity of Data
NIDS challenges
The OSI Protocol Stack
The physical layer stack
29. fast - with little fidelity - examines header information and limited payload data
Nmap
Shallow packet inspection
Multi protocol label switching
IDS
30. A sends a SYN packet to B - B acknowledges with a SYN/ACK - A replies with ACK
What threats should be protected against - based on threat levels
Smurf attack
Arbitrary substitution
3-way handshake
31. destruction of data - leaking confidential information - providing backdoor access
Some malware capabilities
The CIA triad
Buffer overflow
Address Resolution Protocol (ARP)
32. local area network - small network confined to small location - all equipment owned by a single entity - vulnerable to inside threats and logic bombs
Some ways to bypass firewall protections
LAN
To establish a TCP session
PAN
33. Switches along the path can be requested to allocate the desired amount of bandwidth. If the circuit has the required bandwidth - the circuit is set up.
Some malware capabilities
When setting up a virtual circuit
Logic bomb
Datagram length of a UDP packet
34. An attempt to gain access by bombarding it with guesses until the password is found.
Brute force
The protected enclave to defense in depth
Parasitic malware
Program infector
35. Improper deployment can increase attack risk - if production systems aren't sufficiently protected - they can be vulnerable from a honeypot - legal liability
Some external threat concerns
Address Resolution Protocol (ARP)
Some disadvantages of honeypots
Logic bomb
36. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
Port scan
Trap door
The three goals of security
DDoS attack
37. Very simplistic. All systems are attached to the same cable segment. Rarely used because they're unreliable - low fault tolerance - poor traffic isolation - with limited scalability
Multi protocol label switching
Bus Topology
Stateless packet filter
The Information Centric defense in depth
38. logic bomb - trojan horse - trap door
When implementing protocols - what stack should be used?
3-way handshake
The difference in stacks
Some types of malicious code
39. Not a replacement for firewalls - hardening - strong policies - or other DiD methods - low maintenance - inexpensive
IDS not
SQL Slammer Worm
What's a VLAN
IDS data normalization
40. Handles the network address scheme and connectivity of multiple network segments. It handles communication.
COM/Script program infector
Multi protocol label switching
Firewall
The network layer
41. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Some FTP dangers
Switches
Log monitoring work?
Kismet
42. An FTP that allows downloads only if the user knows the exact name of the file they're looking for
Internet
A blind FTP
Trap door
Kismet
43. It interacts with data and prepares it to be transmitted across the network. It ensures reliable connectivity from end-to-end
TFTP
Some external threat concerns
The transport layer
What ways should the crypto key be protected?
44. A system resource that has no legitimate purpose or reason for someone to connect to it - its purpose is to draw in attackers to understand how they break into a system
A network protocol
PAN
Honeypot
the application layer
45. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
The conficker worm
Parasitic malware
Asynchronous Transfer Mode
What range is a class C network?
46. Strips OS commands and characters from input - avoid making system calls from within the app * especially based on user input
OS Command Injection defenses
SYN flood
COM/Script program infector
IDS
47. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
Trojan horse
Logic bomb
What range is a class C network?
the application layer
48. Uses flow control to handle network congestion - can send larger amounts of data per packet - has guaranteed delivery of transmitted data - better protection against spoofing - reduces need for error checking at higher OSI layers
DDoS attack
The threat vector analysis in defense in depth
Some reasons to use TCP over UDP
Proxy or application gateway
49. Confidentiality - integrity - availability
Ciphertext
Honeypot
The CIA triad
The goals of cryptography
50. Parasitic malware - boot record infector - macro - COM/Script program infector - EXE program infector
What primary threats should be protected against
What's a VLAN
NIDS challenges
Types of viruses
Sorry!:) No result found.
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests