Security+ Practice Test 4
Which of the following statements can be used to describe the characteristics of an on-path attack? (Select all that apply)
1. An on-path attack is also known as MITM attack 2. In an on-path attack, attackers place themselves on the communication route between two devices
A wireless disassociation attack is a type of: (Select 2 answers)
1. Deauthentication attack 2. Denial-of-Service (DoS) attack
SSL stripping is an example of: (Select 2 answers)
1. Downgrade attack 2. On-path attack
NFC is vulnerable to:
1. GPS tracking 2. Capturing keystrokes 3. Sending and receiving commands 4. Delivering and executing malware
Which of the following fall(s) into the category of Layer 2 attacks? (Select all that apply)
1. MAC cloning 2. ARP poisoning 3. MAC flooding 4. MAC spoofing
An attack that relies on altering the burned-in address of a NIC to assume the identity of a different network host is known as: (Select 2 answers)
1. MAC spoofing 2. MAC cloning
Which of the following terms refer to software/hardware driver manipulation techniques? (Select 2 answers)
1. Refactoring 2. Shimming
Which of the following provide randomization during encryption process? (Select 2 answers)
1. Salting 2. Initialization Vector (IV)
RFID is vulnerable to:
1. Spoofing 2. Eavesdropping 3. Data interception 4. Replay attacks 5. Denial-of-Service (DoS) attacks
Which of the following enables the exchange of information between computer programs?
API
An attacker managed to associate his/her MAC address with the IP address of the default gateway. In result, a targeted host is sending network traffic to the attacker's IP address instead of the IP address of the default gateway. Based on the given info, which type of attack is taking place in this scenario?
ARP poisoning
The practice of sending unsolicited messages over Bluetooth is known as:
Bluejacking
Gaining unauthorized access to a Bluetooth device is referred to as:
Bluesnarfing
A wireless jamming attack is a type of:
Denial-of-Service (DoS) attack
A situation in which an application fails to properly release memory allocated to it or continually requests more memory than required is known as:
Memory leak
What is the name of a technology used for contactless payment transactions?
NFC
A technique that allows an attacker to authenticate to a remote server without extracting cleartext password from a digest is called:
Pass the hash
Which of the following wireless technologies enables identification and tracking of tags attached to objects?
RFID
A type of identification badge that can be held within a certain distance of a reader device to authenticate its holder is called:
RFID badge
The practice of modifying an application's code without changing its external behavior is referred to as:
Refactoring
What is the purpose of a DoS attack?
Resource exhaustion
Which of the following alters the external behavior of an application and at the same time does not introduce any changes to the application's code?
Shimming
Media Access Control (MAC) flooding is a network attack that compromises the security of a network switch by overflowing its memory used to store the MAC address table. (True/False)
True
The term "Domain hijacking" refers to a situation in which domain registrants due to unlawful actions of third parties lose control over their domain names. (True/False)
True
The term "Evil twin" refers to a rogue Wireless Access Point (WAP) set up for eavesdropping or stealing sensitive user data. Evil twin replaces the legitimate access point and by advertising its own presence with the same Service Set Identifier (SSID, a.k.a. network name) appears as a legitimate access point to connecting hosts. (True/False)
True
