Is456 Ch.3

Bob is using a port scanner to identify open ports on a server in his environment. He is scanning a web server that uses Hypertext Transfer Protocol (HTTP). Which port should Bob expect to be open to support this service?

80

Brian notices an attack taking place on his network. When he digs deeper, he realizes that the attacker has a physical presence on the local network and is forging Media Access Control (MAC) addresses. Which type of attack is most likely taking place?

Address Resolution Protocol (ARP) poisoning

Which password attack is typically used specifically against password files that contain cryptographic hashes?

Birthday attacks

Which tool can capture the packets transmitted between systems over a network?

Protocol analyzer

Which group is the most likely target of a social engineering attack?

Receptionists and administrative assistants

Users throughout Alison's organization have been receiving unwanted commercial messages over the organization's instant messaging program. What type of attack is taking place?

Spim

What type of malicious software masquerades as legitimate software to entice the user to run it?

Trojan Horse

What type of attack against a web application uses a newly discovered vulnerability that is not patchable?

Zero-day attack

Which one of the following is an example of a disclosure threat?

espionage

Which type of attack involves the creation of some deception in order to trick unsuspecting users?

fabrication

Which term describes an action that can damage or compromise an asset?

threat

Florian recently purchased a set of domain names that are similar to those of legitimate websites and used the newly purchased sites to host malware. Which type of attack is Florian using?

typosquatting

Yuri is a skilled computer security expert who attempts to break into the systems belonging to his clients. He has permission from the clients to perform this testing as part of a paid contract. What type of person is Yuri?

white hat hacker

Which control is not designed to combat malware?

Firewalls

Maria's company recently experienced a major system outage due to the failure of a critical component. During that time period, the company did not register any sales through its online site. Which type of loss did the company experience as a result of lost sales?

Opportunity cost

Tony is working with a law enforcement agency to place a wiretap pursuant to a legitimate court order. The wiretap will monitor communications without making any modifications. What type of wiretap is Tony placing?

Passive wiretap