Test your basic knowledge |

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Handles transmissions across the physical media like wires - fiber - etc






2. Syn - Syn/Ack - Ack






3. Confidentiality - integrity - availability






4. Protocol for mapping an IP address to a physical machine address that is recognized on the local network. A table - usually called the ARP cache - is used to maintain a correlation between each MAC and its corresponding IP address






5. The practice of sending an ACK inside another packet going to the same destination






6. Known - unknown - zero day






7. Simple attack done by simply browsing available information that's allowed on a local network.






8. Network scanner.






9. Not a replacement for firewalls - hardening - strong policies - or other DiD methods - low maintenance - inexpensive






10. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key






11. OSI






12. Application layer attacks may get through - dialup - VPN - extranet connections may bypass firewalls






13. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535






14. Netmasks or subnets provide a method for identifying what portion of an address is the network - and what portion is the host






15. An attacker spoofs the victim's IP and sends an ICMP ECHO request to the broadcast address of a network. When every system responds - a DoS occurs.






16. UDP based infection - infected through vulnerability in SQL server - caused DoS on saturated networks






17. Means multiple iterations won't matter. If you encrypt with a key - then re-encrypt - it's the same as using one key.






18. A hash is produced when applied to a monitored file. The hash always generates the same value unless a change was made. HIDS software checks the hashes of monitored files and if a change is found - analyst is notified. - ie: tripwire






19. Network traffic to the host - typically listens on all interface - uses signature analysis to identify events of interest






20. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry






21. Parasitic malware - boot record infector - macro - COM/Script program infector - EXE program infector






22. packet filter firewalls rely on TCP flags to determine connection state. Attacker can send ACK packets only to bypass firewall.






23. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.






24. Protocol for mapping an IP address to a physical machine address that is recognized on the local network - A table - usually called the ARP cache - is used to maintain a correlation between each MAC and it's corresponding IP address






25. Maintains complete TCP connection state and sequencing through 2 connections - address translation built-in by virtue of second connection above






26. risk = threat x vulnerability - impossible to eliminate - security is an exercise in loss reduction






27. destruction of data - leaking confidential information - providing backdoor access






28. Switches along the path can be requested to allocate the desired amount of bandwidth. If the circuit has the required bandwidth - the circuit is set up.






29. An appliance that controls access between public internet and a companies private network - or between a PC NIC and the rest of the PC.






30. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script






31. Prepends to the beginning of the file and gains control when the first instruction of the infected COM file is executed - appending to the end - virus writes its payload to the end and inserts jump instruction as the first instruction - which execute






32. An FTP that allows downloads only if the user knows the exact name of the file they're looking for






33. A list of files is defined that should be monitored for a change - HIDS software calculates a one-way hash for each file - if a change is made to the file - the hash is changed






34. Unencrypted message in its original form






35. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP






36. Publish separate mail - web - and DNS servers to the internet - provide appropriate access from internal network to internet - protect internal from external attack - provide defense in depth - protect all aspects of the system






37. Worms and Wireless - modems - tunnel anything through HTTP - social engineering






38. NTP - BootP/DHCP - NFS file systems - SNMP - TFTP






39. Trying to ID modems in a telephone exchange that may be susceptible to compromise






40. Connects the physical part of the network (cables) with the abstract (packets and datastreams)






41. Most common approach - firewall - VPN - intrusion detection - AV - disk encryption - all parts of the organization receive equal protection - particularly vulnerable to malicious inside attacks






42. deployment challenges including topology and access limitations - analyzing encrypted traffic - quantity vs. quality of signatures - performance limitations with extensive analysis techniques - very costly for proper management






43. Intellectual property - business goals - validated data - historical






44. Relies on executable code insertion and user interaction to spread






45. keeps the same letters - but changes the position within the text - easy to break - can be combined with substitution






46. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment






47. Take the file and try to compress it. If it compresses - it means there is a pattern and it's more easily crackable

Warning: Invalid argument supplied for foreach() in /var/www/html/basicversity.com/show_quiz.php on line 183


48. logic bomb - trojan horse - trap door






49. When someone has compromised the integrity of data or a program. Allows attackers to create backdoors.






50. Protected at rest - protected in transit - secure the key