SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. destruction of data - leaking confidential information - providing backdoor access
Log monitoring work?
Some malware capabilities
Firewall
What range is a class B network?
2. Replicates traffic onto all ports - no traffic monitoring - cannot control which ports should or shouldn't receive frames - forming a large collision domain.
Hubs
Bridge
Checksum in UDP
The different cable categories
3. Unified data carrying service - replacing from replay and ATM
What's an easy way to test encryption?
When implementing protocols - what stack should be used?
To close a TCP session
Multi protocol label switching
4. Good for multimedia - can use small single packets - multicasting is required - speed is the highest priority
War Dialing
Honeypot
Some reasons to use UDP over TCP
Asynchronous Transfer Mode
5. Slow - requires stateful data tracking - inspects all fields - including variable-length fields
Integrity of Data
TFTP
Deep packet inspection
The session layer
6. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
The presentation layer
Integrity of Data
What range is a class B network?
The network layer
7. CIDR is a shorthand way of specifying which portion of the address is the network - and which portion is the host
Integrity of Data
CIDR
Some types of malicious code
Some network design objectives
8. Attacks systems through known vulnerabilities - automatically scans for more systems to attack - lowers system defenses - installs rootkit or root shell - opens up back doors - self contained malware that can copy itself
Worms
Overview of TCP
Some reasons to use UDP over TCP
A network protocol
9. Confidentiality - integrity - availability
The CIA triad
ACK piggybacking
War Dialing
Rotation?
10. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone
HIDS monitor
MAN
Overview of TCP
Denial of service
11. FIN 130 - ACK 131 - FIN 570 - ACK 571
Total cell size for asynchronous transfer mode (ATM)
To close a TCP session
The goals of cryptography
The Uniform Protection to defense in depth
12. The Practice of sending an ACK inside another packet going to the same destination
The four types of events reported by IDS
Ack Piggybacking
The four basic approaches to defense in depth
The OSI model
13. 8 bytes per packet - UDP SRC port - UDP DST Ports - UDP length - UDP Checksum
File Integrity checking work
Smurf attack
UDP packet headers
Some common TCP ports
14. It makes sure the data sent from one side to the other is in a format useful to the other side
Honeypot
Parasitic malware
The presentation layer
Wardriving
15. It allows the transport layer to detect when the UDP headers or the payload have been modified in transit
ACK piggybacking
Bridge
Overview of TCP
Checksum in UDP
16. Stateful firewalls maintain state of traffic flows
Parasitic malware
Stateful firewall
NIDS challenges
Asynchronous Transfer Mode
17. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535
Firewall
What range is a class C network?
EXE program infector
Datagram length of a UDP packet
18. Work groups that require additional protection are segmented from the rest of the internal organization - restricting access to critical segments - system of VPNs - internal firewall - VLANs and ACLs
Types of viruses
The three goals of security
The protected enclave to defense in depth
A blind FTP
19. Wide Area Network - Larger than MAN or LAN - uses public network - phone lines - and leased lines to tie LAN and MAN over a dispersed area
Total cell size for asynchronous transfer mode (ATM)
Logic bomb
WAN
No State Inspection ACK flag set
20. UDP based infection - infected through vulnerability in SQL server - caused DoS on saturated networks
ATM work
SQL Slammer Worm
The protected enclave to defense in depth
War Dialing
21. Most commonly used transport protocol today - ensures reliable packet delivery - has error handling built in
WAN
Overview of TCP
Network stumbler
Boot record infector
22. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
Some ways to bypass firewall protections
Rootkit
The OSI Protocol Stack
Arbitrary substitution
23. deployment challenges including topology and access limitations - analyzing encrypted traffic - quantity vs. quality of signatures - performance limitations with extensive analysis techniques - very costly for proper management
NIDS challenges
The four types of events reported by IDS
Some disadvantages of honeypots
Some reasons to use UDP over TCP
24. Message in its encrypted form
HIDS monitor
WAN
MAN
Ciphertext
25. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
Anomaly analysis work
Some FTP dangers
The data link layer
A network protocol
26. OSI
IDS
When talking about protocols and referencing layers - what stack is used
Log monitoring work?
The network layer
27. Take the file and try to compress it. If it compresses - it means there is a pattern and it's more easily crackable
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
28. flags anomalous conditions in traffic on the network - requires understanding on what is normal - bases good traffic as a baseline
Some common UDP ports
Total cell size for asynchronous transfer mode (ATM)
Port scan
Anomaly analysis work
29. Known - unknown - zero day
What categories do vulnerabilities fall into?
Datagram length of a UDP packet
Trojan horse
IDS signature analysis work
30. 1 and 2 - Voice/Low speed data - 3 - Voice/Data 10Mb - 4 - Voice/Data 16Mb - 5 - 5e - Voice/Data 100Mb to 1Gb - 6 - Standard for gigabit
The different cable categories
Trojan horse
The session layer
MAN
31. Connects many WANs - MANs - and LANs - provided via ISP
Bridge
Port scan
Alteration of code
Internet
32. True positive - false positive - true negative - false negative
Hubs
Ciphertext
The four types of events reported by IDS
Remote maintenance
33. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
Port scan
The session layer
Risk
Race conditions
34. Confidentiality - integrity - availability
The three goals of security
The CIA triad
Nmap scanning techniques
Some firewall benefits
35. Uses flow control to handle network congestion - can send larger amounts of data per packet - has guaranteed delivery of transmitted data - better protection against spoofing - reduces need for error checking at higher OSI layers
Trap door
A blind FTP
Some reasons to use TCP over UDP
The OSI model
36. Intrusion detection system - it reports attacks against monitored systems/networks
The transport layer
When implementing protocols - what stack should be used?
Plaintext
IDS
37. Switches along the path can be requested to allocate the desired amount of bandwidth. If the circuit has the required bandwidth - the circuit is set up.
To establish a TCP session
When setting up a virtual circuit
File integrity checking work
The presentation layer
38. Malware - insider threat - natural disaster - terrorism - pandemic
Honeypot
What primary threats should be protected against
Remote maintenance
The transport layer
39. Protected at rest - protected in transit - secure the key
Kismet
The session layer
CIDR
What ways should the crypto key be protected?
40. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
When talking about protocols and referencing layers - what stack is used
Some malware capabilities
Some external threat concerns
What ways should the crypto key be protected?
41. Not frequently seen on LANs because of expense - because of its traffic predictability and high bandwidth support - it's good for video streaming - encapsulates common protocols - uses virtual path identifiers to create end to end connectivity - has
Macro virus
Asynchronous Transfer Mode
Logic bomb
Types of viruses
42. Anonymous FTP - FTP passes through clear text - Bounce attacks with the PORT command - user can cause an FTP to open a connection from the FTP's own commands and bypass a firewall
What ways should the crypto key be protected?
No State Inspection ACK flag set
Honeypot
Some FTP dangers
43. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code
Switches
Hubs
The five threat vectors
CIDR
44. Four layers - Network Layer - Internet Layer - Transport Layer - Application layer
The TCP/IP model
The goals of cryptography
Router
No State Inspection ACK flag set
45. Network scanner.
Some types of malicious code
DDoS attack
Some honeypot advantages
Nmap
46. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Kismet
Buffer overflow
Integrity of Data
Some disadvantages of honeypots
47. Unencrypted message in its original form
What range is a class A network?
Brute force
Plaintext
The Information Centric defense in depth
48. Identify critical assets and provide layered protection - data is accessed by applications - applications reside on hosts - hosts operate on networks
Checksum in UDP
The Information Centric defense in depth
Bus Topology
Stateful firewall
49. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
Some disadvantages of honeypots
DDoS attack
Network stumbler
When implementing protocols - what stack should be used?
50. Confidentiality - symmetric encryption
The goals of cryptography
What's a VLAN
Ciphertext
A blind FTP