Ethical Hacking

Lakukan tugas rumah & ujian kamu dengan baik sekarang menggunakan Quizwiz!

In a Linux script, which of the lines is important because it identifies the file as a script?

#!/bin/sh

What IP address is used as a loopback address and is not a valid IP address that can be assigned to a network?

127 address

What is the decimal equivalent of the binary number 11000001?

193

What port is typically reserved and utilized by the Secure Hypertext Transfer Protocol to create a secure connection to a Web server?

443

What layer protocols operate as the front end to the lower-layer protocols in the TCP/IP stack?

Application

What IPv4 address class has the IP address 221.1.2.3?

Class C

What network security tool, usually included with Kali Linux, allows a user to ping multiple IP addresses?

FPING

Walking is an automated way to discover pages of a Web site by following links.

False

Protocol used to send messages related to network operations

ICMP

What TCP/IP protocol is used to send messages related to network operations and can be used to troubleshoot network connectivity?

ICMP

A 32-bit number that tracks packets received by a node and allows reassembling large packets that have been broken up into smaller packets

ISN

What 32-bit number tracks packets received by a node and allows the reassembling of large packets that have been broken up into smaller packets?

ISN

In the TCP/IP stack, what layer is concerned with physically moving bits across the network's medium?

Network

What is the logical component of a TCP connection that can be assigned to a process that requires network connectivity?

Port

What type of network attack relies on guessing a TCP header's initial sequence number, or ISN?

Session hijacking

What connection-oriented protocol is utilized by the Transport layer?

TCP

What protocol is the most widely used and allows all computers on a network to communicate and function correctly?

TCP/IP

What does the acronym TCP represent?

Transmission Control Protocol

What layer, in the TCP/IP protocol stack, is responsible for encapsulating data into segments?

Transport Layer

An octal digit can be represented with only three bits because the largest digit in octal is seven.

True

Wget is a *nix system command that can be used to retrieve HTTP, HTTPS, and FTP files over the Internet.

True

Fast but unreliable delivery protocol that operates at the Transport layer

UDP

What TCP/IP protocol is fast, unreliable, and operates at the Transport layer?

UDP

Which of the following sometimes displays a banner that notifies the user of its presence?

adware

Which type of program can mitigate some risks associated with malware?

antivirus

Trojan Programs can install a specific type of program to allow an attacker access to the attacked computer later. What means of access is the attacker utilizing?

backdoor

When a programmer exploits written code that doesn't check for a defined amount of memory space they are executing which of the following attacks?

buffer overflow

In any *NIX system, after saving a script named "script_name," you need to make it executable so that you can run it. Which command will accomplish this task from the command line?

chmod +x script_name

When an individual attempts to discover as much information legally possible about their competition, what information gathering technique are they performing?

competitive intelligence

A protocol where the sender doesn't send any data to the destination node until the destination node acknowledges that it's listening to the sender

connection-oriented protocol

A protocol that does not need to verify whether the receiver is listening or ready to accept the packets

connectionless protocol

Which of the following is a text file generated by a Web server and stored on a user's browser?

cookie

Which type of attack cripples the network and prevents legitimate users from accessing network resources?

denial of service

What social engineering tactic can be utilized to acquire old notes that may contain written passwords or other items that document important information?

dumpster diving

A DDoS attack is launched against a host from a single server or workstation.

false

When a TCP three-way handshake ends, both parties send what type of packet to end the connection?

fin

What is the passive process of finding information on a company's network called?

footprinting

Which type of virus is written as a list of commands that can be set automatically to run as soon as a computer user opens the file?

macro

What tool can be used to read and write data to ports over a network?

netcat

Attack that relies on guessing the ISNs of TCP packets

network session hijacking

A logical component of a TCP connection that can be assigned to a process that requires network connectivity

port

A common language used so computers can communicate with one another

protocol

What type of virus is used to lock a user's system, or cloud accounts until the system's owner complies by paying the attacker a monetary fee?

ransomware

Which of the following is created after an attack and usually hides within the OS tools, so it is almost impossible to detect?

rootkit

Closed ports respond to a NULL scan with what type of packet?

rst

Which of the following describes a flexible program that automates a task that takes too much time to perform manually?

script

Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?

script

Which technique can be used to read PINs entered at ATMs or at other areas when a pin code is entered?

shoulder surfing

A computer hacker may use a phishing e-mail to lure a user into following a malicious link. What type of technique is being used by the computer hacker?

social engineering

Occupies one bit of the TCP segment and can be set to 0 (off) or 1 (on)

tcp flag

A TCP/IP process that is used to establish a connection before data is sent

three-way handshake

In a buffer overflow attack, an attacker finds a vulnerability in poorly written code that doesn't check for a defined amount of memory space use.

true

Which utility is used to gather IP and domain information?

whois

In the TCP/IP stack, the Transport layer includes network services and client software.

False

What type of malicious procedure involves using sniffing tools to capture network communications to intercept confidential information or gather credentials that can be used to extend the attack?

eavesdropping

An open port allows access to specific applications and cannot be vulnerable to attack.

false

In a NULL scan, all packet flags are turned on.

false

The HTTP CONNECT method starts a remote application-layer loopback of the request message.

false

What type of general commands allow a security tester to pull information from a Web server using a web browser?

http

What type of hardware devices and computer programs can be used to obtain passwords by capturing key strokes on a targeted computer system?

keyloggers

To see additional parameters that can be used with the Netcat command, what should you type at the command prompt?

nc -h

What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?

nmap

Which type of social engineering attack attempts to discover personal information through the use of email?

phishing

What tactic is being used when an attacker trailing closely behind an employee enters a restricted area without any security credentials by utilizing their proximity to another employee with security clearance?

piggybacking

To verify if all the IP addresses of a network are being used by computers that are up and running, you can use a port scanner to perform what procedure on a range of IP addresses?

ping

What type of attack causes the victim's computer to crash or freeze when the attacker delivers an ICMP packet that is larger than the maximum allowed 65,535 bytes?

ping of death

When using a port-scanner, what procedure can be conducted to identify which IP addresses belong to active hosts?

ping sweep

Which term best describes a hash or code pattern that antivirus software companies use to compare known viruses to every file on a computer?

signatures

Which process utilizes the knowledge of human nature to get information from people to use for executing an attack on a computer network?

social engineering

When an attacker chooses to combine social engineering with exploiting vulnerabilities carried out by e-mail, what type of attack is being performed?

spear phishing

If an attacker wishes to collect confidential financial data, passwords, PINs and any personal data stored on your computer which of the following programs would they choose to use?

spyware

In a normal TCP session, the sender sends a packet to another computer with which of the following flags set?

syn flag

What type of malicious computer programs present themselves as useful computer programs or applications?

trojan

Attackers typically use ACK scans to get past a firewall or other filtering devices.

true

Network attacks can often begin by gathering information from a company's Web site.

true

Port scanning is a method of finding out which services a host computer offers.

true

You can search for vulnerabilities in a host computer by using a port-scanning tool.

true

What type of malicious program cannot stand on its own and can replicate itself through an executable program attached to an e-mail?

virus

What 1-pixel x 1-pixel image file is referenced in an tag, and usually works with a cookie to collect information

web bug

When writing a script which statement allows you to avoid creating an endless loop in your script?

while

A malicious computer program that replicates and propagates itself without having to attach to a host is called which of the following?

worm

What utility can be used to intercept detailed information from a company's Web site?

zed attack proxy

When a computer hacker uses multiple compromised computers to carry out a DDOS attack, the compromised computers are usually referred to as which of the following?

zombies

Which process enables you to see all the host computers on a network and basically give you a diagram of an organization's network?

zone transfers


Set pelajaran terkait

Business Finance chapter 2 homework

View Set

adult two final exam practice questions

View Set

Test 3- Traumatic Brain Injury Practice Questions

View Set

Financial Accounting Chapter 6 Part 2

View Set

Chapter 14 Monetary Policy and Fed macroeconomics

View Set

(QUIZ) Module 1 Taking A Computer Apart and Putting it Back Together

View Set

Chapter 12: Cost of Capital LearnSmart

View Set