Ethical Hacking
In a Linux script, which of the lines is important because it identifies the file as a script?
#!/bin/sh
What IP address is used as a loopback address and is not a valid IP address that can be assigned to a network?
127 address
What is the decimal equivalent of the binary number 11000001?
193
What port is typically reserved and utilized by the Secure Hypertext Transfer Protocol to create a secure connection to a Web server?
443
What layer protocols operate as the front end to the lower-layer protocols in the TCP/IP stack?
Application
What IPv4 address class has the IP address 221.1.2.3?
Class C
What network security tool, usually included with Kali Linux, allows a user to ping multiple IP addresses?
FPING
Walking is an automated way to discover pages of a Web site by following links.
False
Protocol used to send messages related to network operations
ICMP
What TCP/IP protocol is used to send messages related to network operations and can be used to troubleshoot network connectivity?
ICMP
A 32-bit number that tracks packets received by a node and allows reassembling large packets that have been broken up into smaller packets
ISN
What 32-bit number tracks packets received by a node and allows the reassembling of large packets that have been broken up into smaller packets?
ISN
In the TCP/IP stack, what layer is concerned with physically moving bits across the network's medium?
Network
What is the logical component of a TCP connection that can be assigned to a process that requires network connectivity?
Port
What type of network attack relies on guessing a TCP header's initial sequence number, or ISN?
Session hijacking
What connection-oriented protocol is utilized by the Transport layer?
TCP
What protocol is the most widely used and allows all computers on a network to communicate and function correctly?
TCP/IP
What does the acronym TCP represent?
Transmission Control Protocol
What layer, in the TCP/IP protocol stack, is responsible for encapsulating data into segments?
Transport Layer
An octal digit can be represented with only three bits because the largest digit in octal is seven.
True
Wget is a *nix system command that can be used to retrieve HTTP, HTTPS, and FTP files over the Internet.
True
Fast but unreliable delivery protocol that operates at the Transport layer
UDP
What TCP/IP protocol is fast, unreliable, and operates at the Transport layer?
UDP
Which of the following sometimes displays a banner that notifies the user of its presence?
adware
Which type of program can mitigate some risks associated with malware?
antivirus
Trojan Programs can install a specific type of program to allow an attacker access to the attacked computer later. What means of access is the attacker utilizing?
backdoor
When a programmer exploits written code that doesn't check for a defined amount of memory space they are executing which of the following attacks?
buffer overflow
In any *NIX system, after saving a script named "script_name," you need to make it executable so that you can run it. Which command will accomplish this task from the command line?
chmod +x script_name
When an individual attempts to discover as much information legally possible about their competition, what information gathering technique are they performing?
competitive intelligence
A protocol where the sender doesn't send any data to the destination node until the destination node acknowledges that it's listening to the sender
connection-oriented protocol
A protocol that does not need to verify whether the receiver is listening or ready to accept the packets
connectionless protocol
Which of the following is a text file generated by a Web server and stored on a user's browser?
cookie
Which type of attack cripples the network and prevents legitimate users from accessing network resources?
denial of service
What social engineering tactic can be utilized to acquire old notes that may contain written passwords or other items that document important information?
dumpster diving
A DDoS attack is launched against a host from a single server or workstation.
false
When a TCP three-way handshake ends, both parties send what type of packet to end the connection?
fin
What is the passive process of finding information on a company's network called?
footprinting
Which type of virus is written as a list of commands that can be set automatically to run as soon as a computer user opens the file?
macro
What tool can be used to read and write data to ports over a network?
netcat
Attack that relies on guessing the ISNs of TCP packets
network session hijacking
A logical component of a TCP connection that can be assigned to a process that requires network connectivity
port
A common language used so computers can communicate with one another
protocol
What type of virus is used to lock a user's system, or cloud accounts until the system's owner complies by paying the attacker a monetary fee?
ransomware
Which of the following is created after an attack and usually hides within the OS tools, so it is almost impossible to detect?
rootkit
Closed ports respond to a NULL scan with what type of packet?
rst
Which of the following describes a flexible program that automates a task that takes too much time to perform manually?
script
Which of the following describes a text file containing multiple commands that would usually be entered manually at the command prompt?
script
Which technique can be used to read PINs entered at ATMs or at other areas when a pin code is entered?
shoulder surfing
A computer hacker may use a phishing e-mail to lure a user into following a malicious link. What type of technique is being used by the computer hacker?
social engineering
Occupies one bit of the TCP segment and can be set to 0 (off) or 1 (on)
tcp flag
A TCP/IP process that is used to establish a connection before data is sent
three-way handshake
In a buffer overflow attack, an attacker finds a vulnerability in poorly written code that doesn't check for a defined amount of memory space use.
true
Which utility is used to gather IP and domain information?
whois
In the TCP/IP stack, the Transport layer includes network services and client software.
False
What type of malicious procedure involves using sniffing tools to capture network communications to intercept confidential information or gather credentials that can be used to extend the attack?
eavesdropping
An open port allows access to specific applications and cannot be vulnerable to attack.
false
In a NULL scan, all packet flags are turned on.
false
The HTTP CONNECT method starts a remote application-layer loopback of the request message.
false
What type of general commands allow a security tester to pull information from a Web server using a web browser?
http
What type of hardware devices and computer programs can be used to obtain passwords by capturing key strokes on a targeted computer system?
keyloggers
To see additional parameters that can be used with the Netcat command, what should you type at the command prompt?
nc -h
What open source port-scanning tool is considered to be the standard port-scanning tool for security professionals?
nmap
Which type of social engineering attack attempts to discover personal information through the use of email?
phishing
What tactic is being used when an attacker trailing closely behind an employee enters a restricted area without any security credentials by utilizing their proximity to another employee with security clearance?
piggybacking
To verify if all the IP addresses of a network are being used by computers that are up and running, you can use a port scanner to perform what procedure on a range of IP addresses?
ping
What type of attack causes the victim's computer to crash or freeze when the attacker delivers an ICMP packet that is larger than the maximum allowed 65,535 bytes?
ping of death
When using a port-scanner, what procedure can be conducted to identify which IP addresses belong to active hosts?
ping sweep
Which term best describes a hash or code pattern that antivirus software companies use to compare known viruses to every file on a computer?
signatures
Which process utilizes the knowledge of human nature to get information from people to use for executing an attack on a computer network?
social engineering
When an attacker chooses to combine social engineering with exploiting vulnerabilities carried out by e-mail, what type of attack is being performed?
spear phishing
If an attacker wishes to collect confidential financial data, passwords, PINs and any personal data stored on your computer which of the following programs would they choose to use?
spyware
In a normal TCP session, the sender sends a packet to another computer with which of the following flags set?
syn flag
What type of malicious computer programs present themselves as useful computer programs or applications?
trojan
Attackers typically use ACK scans to get past a firewall or other filtering devices.
true
Network attacks can often begin by gathering information from a company's Web site.
true
Port scanning is a method of finding out which services a host computer offers.
true
You can search for vulnerabilities in a host computer by using a port-scanning tool.
true
What type of malicious program cannot stand on its own and can replicate itself through an executable program attached to an e-mail?
virus
What 1-pixel x 1-pixel image file is referenced in an tag, and usually works with a cookie to collect information
web bug
When writing a script which statement allows you to avoid creating an endless loop in your script?
while
A malicious computer program that replicates and propagates itself without having to attach to a host is called which of the following?
worm
What utility can be used to intercept detailed information from a company's Web site?
zed attack proxy
When a computer hacker uses multiple compromised computers to carry out a DDOS attack, the compromised computers are usually referred to as which of the following?
zombies
Which process enables you to see all the host computers on a network and basically give you a diagram of an organization's network?
zone transfers
