SUBJECTS
|
BROWSE
|
CAREER CENTER
|
POPULAR
|
JOIN
|
LOGIN
Business Skills
|
Soft Skills
|
Basic Literacy
|
Certifications
About
|
Help
|
Privacy
|
Terms
|
Email
Search
Test your basic knowledge |
GIAC
Start Test
Study First
Subjects
:
certifications
,
giac
,
it-skills
Instructions:
Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can
study here
.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.
This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Not a replacement for firewalls - hardening - strong policies - or other DiD methods - low maintenance - inexpensive
IDS not
DDoS attack
HIDS monitor
TFTP
2. Connection oriented - before systems can communicate over an ATM network - they must establish a virtual circuit between each other - this can span across multiple ATM switches that also handle communications for other systems - at the end of the con
ATM work
Multi protocol label switching
Best way to protect wireless networks
A netcat listener
3. 53 - DNS - 67 - BootP - 68 - BootP - 69 - TFTP - 123- NTP - 137-139 NBT - 161 - SNMP - 162 - SNMP - 2049 - NFS
Some common UDP ports
SYN flood
EXE program infector
What threats should be protected against - based on threat levels
4. Confidentiality - integrity - availability
The goals of cryptography
Denial of service
The CIA triad
The four types of events reported by IDS
5. A spoofed IP is used to send a SYN to the target. It then responds with a SYN/ACK that never receives the final ACK to complete the handshake. This occupies a portion of the target's pre-established buffer for TCP and can prevent the target from acce
Datagram length of a UDP packet
The different cable categories
SYN flood
What range is a class A network?
6. 192.0.0.0 through 223.255.255.255 - subnet mask of 255.255.255.0
Bus Topology
WAN
A netmask
What range is a class C network?
7. Allows segmentation of a switch into different networks - regardless of where a system is plugged in - creates separate networks through software not hardware
Warning
: Invalid argument supplied for foreach() in
/var/www/html/basicversity.com/show_quiz.php
on line
183
8. Used for connecting two physical segments of a network - segments traffic - breaks up collision domains - not generally used because of switches
Bridge
Some network design objectives
No State Inspection ACK flag set
ATM work
9. Anonymous FTP - FTP passes through clear text - Bounce attacks with the PORT command - user can cause an FTP to open a connection from the FTP's own commands and bypass a firewall
Some FTP dangers
Some network design objectives
3-way handshake
Stateful firewall
10. destruction of data - leaking confidential information - providing backdoor access
Some malware capabilities
CIDR
When talking about protocols and referencing layers - what stack is used
Some malware propagation techniques
11. -Malicious code might execute destructive overwrite to hard disks -Malicious mas mailing code might expose sensitive information to the internet - web server compromise might expose organization to ridicule - Web server compromise might expose custom
Switches
Some external threat concerns
Internet
NIDS advantages
12. Connects many WANs - MANs - and LANs - provided via ISP
Internet
Total cell size for asynchronous transfer mode (ATM)
Snort
NAC
13. TCP/IP - the IP protoco - The core routing protocol of the internet - - deals with transmission of packets between end points - defines the addressing scheme for the internet
The OSI model
War Dialing
When implementing protocols - what stack should be used?
No State Inspection ACK flag set
14. Relies on executable code insertion and user interaction to spread
the application layer
Parasitic malware
Port scan
Bus Topology
15. An agreement on how different computer will work - protocols define the format and order of messages and what to do upon receipt of the messages - basically the rules of the network
Log monitoring work?
Internet
The threat vector analysis in defense in depth
A network protocol
16. Uses a 1 to 1 substitution of arbitrary numbers - given a one character mapping - you cannot determine the key
Some firewall challenges
Defense in depth
Denial of service
Arbitrary substitution
17. Switches networks make it difficult to monitor traffic in promiscuous mode - topology must be able to support traffic aggregation for monitoring
Proxy or application gateway
No State Inspection ACK flag set
Some NIDS topology limitations
War Dialing
18. It allows the transport layer to detect when the UDP headers or the payload have been modified in transit
What threats should be protected against - based on threat levels
Wardriving
Boot record infector
Checksum in UDP
19. Hash Authentication - asymmetric - non repudiation - digital signature - hash + asymmetry
Program infector
The three goals of security
Snort
Integrity of Data
20. 8 bytes per packet - UDP SRC port - UDP DST Ports - UDP length - UDP Checksum
Plaintext
UDP packet headers
Trojan horse
The four basic approaches to defense in depth
21. Known - unknown - zero day
Best way to protect wireless networks
What categories do vulnerabilities fall into?
Some ways to bypass firewall protections
SQL Slammer Worm
22. Protocol for mapping an IP address to a physical machine address that is recognized on the local network. A table - usually called the ARP cache - is used to maintain a correlation between each MAC and its corresponding IP address
the application layer
Address resolution protocol
Some firewall challenges
Honeypot
23. Allows admins to remotely access a system for troubleshooting. - E.g VNC - GoToMyPc - PC Anywhere
IDS
Some network design objectives
Macro virus
Remote maintenance
24. Prepends to the beginning of the file and gains control when the first instruction of the infected COM file is executed - appending to the end - virus writes its payload to the end and inserts jump instruction as the first instruction - which execute
PAN
No State Inspection ACK flag set
COM/Script program infector
DDoS attack
25. Metropolitan area network - spans across city or town - larger than a LAN - uses fiber for backbone
Snort
MAN
NAC
Some firewall benefits
26. Protects internal/external systems from attack - filters communications based on content - performs NAT - encrypts communications for VPN - logging to aid in intrusion detection
Rotation?
Some firewall benefits
The Information Centric defense in depth
The transport layer
27. Wide Area Network - Larger than MAN or LAN - uses public network - phone lines - and leased lines to tie LAN and MAN over a dispersed area
Wardriving
WAN
What threats should be protected against - based on threat levels
OS Command Injection defenses
28. Small program triggered by an event that provides an action. E.g. scheduled file removal if countdown isn't reset - ie: employee was fired
PAN
SQL Slammer Worm
Logic bomb
ATM work
29. free windows based wireless scanner for 802.1b - detects access point settings - supports GSP integration - identifies networks as encrypted or unencrypted
NIDS challenges
The transport layer
Firewall
Network stumbler
30. Trivial File Transfer Protocol - method to transfer files from one device to another without needing authentication
Address Resolution Protocol (ARP)
Multi protocol label switching
TFTP
The four basic approaches to defense in depth
31. A list of files is defined that should be monitored for a change - HIDS software calculates a one-way hash for each file - if a change is made to the file - the hash is changed
MAN
What range is a class B network?
The four basic approaches to defense in depth
File integrity checking work
32. logic bomb - trojan horse - trap door
Boot record infector
Some types of malicious code
The conficker worm
Anomaly analysis work
33. Bits of code embedded in programs to quickly gain access at a later time
What ways should the crypto key be protected?
Trap door
Router
Buffer overflow
34. Slow - requires stateful data tracking - inspects all fields - including variable-length fields
Stateless packet filter
Deep packet inspection
Buffer overflow
The goals of cryptography
35. It handles the establishment and maintenance of connections between systems
Stateless packet filter
Buffer overflow
The session layer
CIDR
36. Means multiple iterations won't matter. If you encrypt with a key - then re-encrypt - it's the same as using one key.
Some honeypot advantages
Permutation
Denial of service
Group
37. open source tool for monitoring - can be used as a NIDS - has quick updates and flexibility for custom rules
Some firewall challenges
Overview of TCP
Snort
Internet
38. Confidentiality - integrity - availability
Kismet
NIDS challenges
The three goals of security
The Uniform Protection to defense in depth
39. True positive - false positive - true negative - false negative
ACK piggybacking
Kismet
the application layer
The four types of events reported by IDS
40. ATM supports two types of virtual circuits: permanent virtual circuits and switches virtual circuit - PVC is set up in advance - usually manually - SVC is established automatically through a signaling protocol and can be created on the fly - establis
The TCP/IP model
TFTP
Checksum in UDP
Types of ATM virtual circuits
41. fast - with little fidelity - examines header information and limited payload data
Shallow packet inspection
No State Inspection ACK flag set
Brute force
Stateful firewall
42. It interacts with the application layer to determine which network services will be required
The session layer
Parasitic malware
the application layer
Anomaly analysis work
43. rules indicate criteria in packets that represent events of interest - rules are applied to packets as they are received - alerts are created when matches are found
Stateless packet filter
Shallow packet inspection
Worms
IDS signature analysis work
44. Uses inclusive or exclusive lists - inclusive analysis utilizes a list of keywords - exclusive analysis utilizes a list of events that can be ignored
Log monitoring work?
Wardriving
Race conditions
Some malware propagation techniques
45. Uses a 1 to 1 substitution of characters - rotate the alphabet by 'n' number of characters - rot+X means rotate the letters X characters
What categories do vulnerabilities fall into?
Some common TCP ports
Rotation?
Browsing attack
46. War dialing - war driving - Sniffing - eavesdropping - dumpster diving - social engineering
The network layer
The CIA triad
Some Pen Test techniques
Hubs
47. Going around with equipment to detect wireless networks
The four types of events reported by IDS
Wardriving
Some ways to bypass firewall protections
NIDS challenges
48. An appliance that controls access between public internet and a companies private network - or between a PC NIC and the rest of the PC.
Overview of TCP
Snort
Trojan horse
Firewall
49. Personal area network - phone tethering - bluetooth - etc
The CIA triad
PAN
Types of ATM virtual circuits
Some ways to bypass firewall protections
50. Handles the network address scheme and connectivity of multiple network segments. It handles communication.
Parasitic malware
Honeyd
The network layer
Some ways to bypass firewall protections
Sorry!:) No result found.
Can you answer 50 questions in 15 minutes?
Let me suggest you:
Browse all subjects
Browse all tests
Most popular tests
Major Subjects
Tests & Exams
AP
CLEP
DSST
GRE
SAT
GMAT
Certifications
CISSP go to https://www.isc2.org/
PMP
ITIL
RHCE
MCTS
More...
IT Skills
Android Programming
Data Modeling
Objective C Programming
Basic Python Programming
Adobe Illustrator
More...
Business Skills
Advertising Techniques
Business Accounting Basics
Business Strategy
Human Resource Management
Marketing Basics
More...
Soft Skills
Body Language
People Skills
Public Speaking
Persuasion
Job Hunting And Resumes
More...
Vocabulary
GRE Vocab
SAT Vocab
TOEFL Essential Vocab
Basic English Words For All
Global Words You Should Know
Business English
More...
Languages
AP German Vocab
AP Latin Vocab
SAT Subject Test: French
Italian Survival
Norwegian Survival
More...
Engineering
Audio Engineering
Computer Science Engineering
Aerospace Engineering
Chemical Engineering
Structural Engineering
More...
Health Sciences
Basic Nursing Skills
Health Science Language Fundamentals
Veterinary Technology Medical Language
Cardiology
Clinical Surgery
More...
English
Grammar Fundamentals
Literary And Rhetorical Vocab
Elements Of Style Vocab
Introduction To English Major
Complete Advanced Sentences
Literature
Homonyms
More...
Math
Algebra Formulas
Basic Arithmetic: Measurements
Metric Conversions
Geometric Properties
Important Math Facts
Number Sense Vocab
Business Math
More...
Other Major Subjects
Science
Economics
History
Law
Performing-arts
Cooking
Logic & Reasoning
Trivia
Browse all subjects
Browse all tests
Most popular tests