SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Personal area network - phone tethering - bluetooth - etc
What range is a class C network?
What ways should the crypto key be protected?
PAN
Deep packet inspection
2. A spoofed IP is used to send a SYN to the target. It then responds with a SYN/ACK that never receives the final ACK to complete the handshake. This occupies a portion of the target's pre-established buffer for TCP and can prevent the target from acce
SYN flood
The conficker worm
COM/Script program infector
IDS signature analysis work
3. local area network - small network confined to small location - all equipment owned by a single entity - vulnerable to inside threats and logic bombs
Remote maintenance
LAN
ATM work
Some reasons to use TCP over UDP
4. Switches along the path can be requested to allocate the desired amount of bandwidth. If the circuit has the required bandwidth - the circuit is set up.
The four basic approaches to defense in depth
When setting up a virtual circuit
NAC
The OSI model
5. Combines the functionality of a hub and bride into a single device - keeps track of MACs attached to each port
WAN
Switches
Smurf attack
Integrity of Data
6. destruction of data - leaking confidential information - providing backdoor access
The Information Centric defense in depth
What threats should be protected against - based on threat levels
Macro virus
Some malware capabilities
7. Uses inclusive or exclusive lists - inclusive analysis utilizes a list of keywords - exclusive analysis utilizes a list of events that can be ignored
Log monitoring work?
Bus Topology
Vulnerabilities
the application layer
8. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
9. Full open - half open (stealth scan) - UDP - Ping
IDS
Program infector
Remote maintenance
Nmap scanning techniques
10. NTP - BootP/DHCP - NFS file systems - SNMP - TFTP
Types of viruses
Some other UDP based protocols
ACK piggybacking
A blind FTP
11. Network scanner.
NIDS challenges
Some network design objectives
Nmap
COM/Script program infector
12. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted
Smurf attack
Network stumbler
EXE program infector
Logic bomb
13. Provides insight into the tactics - motives - and attacker tools
Some honeypot advantages
Switches
Kismet
Some common UDP ports
14. An attempt to gain access by bombarding it with guesses until the password is found.
Nmap
Brute force
Asynchronous Transfer Mode
Social engineering
15. Small program triggered by an event that provides an action. E.g. scheduled file removal if countdown isn't reset - ie: employee was fired
Boot record infector
Bridge
the application layer
Logic bomb
16. An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.
Overview of TCP
DDoS attack
Some disadvantages of honeypots
Total cell size for asynchronous transfer mode (ATM)
17. A TCP version of ping - sends custom TCP packets to a host and listens for replies - enables port scanning and spoofing simultaneously
Browsing attack
Hping
The transport layer
File Integrity checking work
18. size is whatever the length of the UDP portion of the packet. Could be as large as 65 -535
ACK piggybacking
Datagram length of a UDP packet
NAC
Browsing attack
19. The Practice of sending an ACK inside another packet going to the same destination
Ack Piggybacking
NAC
Alteration of code
Honeyd
20. Common backdoor to open a port - port scan scans for open ports on remote host - scans 0 - 65 -535 twice. TCP and UDP
Port scan
What ways should the crypto key be protected?
Asynchronous Transfer Mode
To establish a TCP session
21. 1.0.0.0 through 127.255.255.255 - subnet mask starts at 255.0.0.0
Snort
Some network design objectives
What range is a class A network?
Switches
22. Work groups that require additional protection are segmented from the rest of the internal organization - restricting access to critical segments - system of VPNs - internal firewall - VLANs and ACLs
IDS not
The protected enclave to defense in depth
Brute force
The five threat vectors
23. UDP based infection - infected through vulnerability in SQL server - caused DoS on saturated networks
EXE program infector
The four basic approaches to defense in depth
When setting up a virtual circuit
SQL Slammer Worm
24. Physical layer - Data link layer - Network Layer - Transport Layer - Session Layer - Presentation Layer - Application Layer
The TCP/IP model
Ack Piggybacking
The OSI model
The session layer
25. Infected millions through various methods - vulnerability in the MS Server Service - brute force admin password through network shares - infect removable devices with a malicious autorun script
NAC
The conficker worm
A netcat listener
Nmap scanning techniques
26. It interacts with data and prepares it to be transmitted across the network. It ensures reliable connectivity from end-to-end
Some other UDP based protocols
Some disadvantages of honeypots
SQL Slammer Worm
The transport layer
27. Intrusion detection system - it reports attacks against monitored systems/networks
What ways should the crypto key be protected?
IDS
Defense in depth
WAN
28. Confidentiality - integrity - availability
A netmask
What threats should be protected against - based on threat levels
The three goals of security
The CIA triad
29. Strips OS commands and characters from input - avoid making system calls from within the app * especially based on user input
Ciphertext
Multi protocol label switching
Asynchronous Transfer Mode
OS Command Injection defenses
30. Confidentiality - integrity - availability
The three goals of security
The four basic approaches to defense in depth
The data link layer
The goals of cryptography
31. Protocol for mapping an IP address to a physical machine address that is recognized on the local network - A table - usually called the ARP cache - is used to maintain a correlation between each MAC and it's corresponding IP address
the application layer
Some external threat concerns
Address Resolution Protocol (ARP)
NIDS challenges
32. flags anomalous conditions in traffic on the network - requires understanding on what is normal - bases good traffic as a baseline
Some honeypot advantages
WAN
Anomaly analysis work
Worms
33. Switches networks make it difficult to monitor traffic in promiscuous mode - topology must be able to support traffic aggregation for monitoring
Some common UDP ports
A network protocol
Some NIDS topology limitations
Trap door
34. It makes sure the data sent from one side to the other is in a format useful to the other side
Honeyd
The presentation layer
NIDS challenges
What's a VLAN
35. Uses a 1 to 1 substitution of characters - rotate the alphabet by 'n' number of characters - rot+X means rotate the letters X characters
Logic bomb
To establish a TCP session
Rotation?
IDS data normalization
36. Four layers - Network Layer - Internet Layer - Transport Layer - Application layer
the application layer
Some ways to bypass firewall protections
The TCP/IP model
Some common UDP ports
37. Protects internal/external systems from attack - filters communications based on content - performs NAT - encrypts communications for VPN - logging to aid in intrusion detection
Overview of TCP
Some honeypot advantages
Some firewall benefits
Bridge
38. Outside attack from network - Outsider attack from telephone - Insider attack from local network - insider attack from local system - attack from malicious code
The five threat vectors
Some firewall challenges
Macro virus
Brute force
39. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
Integrity of Data
Stateful firewall
The different cable categories
The four types of events reported by IDS
40. Free linux WLAN analysis tool - completely passive - cannot be detected - supports advanced GPS integration and mapping features - used for wardriving - WLAN vulerability assessment
Stateless packet filter
Risk
Snort
Kismet
41. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
Some honeypot advantages
What range is a class C network?
Some ways to bypass firewall protections
A network protocol
42. Not a replacement for firewalls - hardening - strong policies - or other DiD methods - low maintenance - inexpensive
ATM work
IDS not
The five threat vectors
When talking about protocols and referencing layers - what stack is used
43. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
A network protocol
The CIA triad
Race conditions
What threats should be protected against - based on threat levels
44. 20 - FTP data - 21 - FTP - 23 - Telnet - 25 - SNMP - 53 - DNS - 79 - Finger - 80 - HTTP - 110 - POP - 443 - HTTPS
To close a TCP session
Browsing attack
Worms
Some common TCP ports
45. Provides insight into traffic on the network - help detect problems with network operations - provides auditing for other security measures
Switches
NAC
Vulnerabilities
NIDS advantages
46. Maintains complete TCP connection state and sequencing through 2 connections - address translation built-in by virtue of second connection above
Defense in depth
NAC
Proxy or application gateway
Rootkit
47. Attacks systems through known vulnerabilities - automatically scans for more systems to attack - lowers system defenses - installs rootkit or root shell - opens up back doors - self contained malware that can copy itself
Permutation
Internet
Some reasons to use TCP over UDP
Worms
48. Message in its encrypted form
What range is a class B network?
Ciphertext
When implementing protocols - what stack should be used?
Asynchronous Transfer Mode
49. Uniform protection - protected enclaves - information centric - threat vector analysis
Brute force
The four basic approaches to defense in depth
Nmap scanning techniques
The session layer
50. Relies on executable code insertion and user interaction to spread
Browsing attack
Parasitic malware
No State Inspection ACK flag set
Network stumbler