Sec+ - Networking & Server Attacks

What type of attack is being performed when multiple computers overwhelm a system with fake requests?

An attack that broadcasts a request to computers but changes the IP from which the request came to the victim's IP?

Which SQL statement represents a SQL injection attempt to determine the names of different fields in a database?

XSS is like a phishing attack but without needing to trick the user into visiting a malicious website.

An attacker purchases & uses a URL that is similar in spelling & looks like a well-known web site, what type of attack?

What two locations can be a target for DNS poisoning? (Choose all that apply.)

Traditional network security devices can block traditional network attacks, but not web application attacks.

What type of attack intercepts communication between parties to steal or manipulate the data?

What type of web server application attacks introduce new input to exploit a vulnerability?

What are the two types of cross-site attacks? (Choose all that apply.)

What type of privileges to access hardware and software resources are granted to users or devices?

A user w/o admin privileges was able to perform a task limited to only admins. What type of exploit has occurred?

JavaScript cannot create separate stand-alone applications.

An attack that takes advantage of the procedures for initiating a session is known as what type of attack?

What specific ways can a session token be transmitted? (Choose all that apply.)

An attacker promotes themselves as reputable third-party advertisers to distribute their malware through the Web ads.

The malicious content of an XSS URL is confined to material posted on a website

What type of additional attack does ARP spoofing rely on?

SYN flood attacks broadcast request to multiple PCs but change the IP from which the request came to the victim's PC.

What attack occurs when a domain pointer that links a domain name to a web server is changed by a threat actor?

The host table concept grew into a hierarchical name system for matching computer names and #s using this service:

Where are MAC addresses stored for future reference?

Choose the SQL injection statement example below that could be used to find specific users:

A DNS amplification attack floods an unsuspecting victim by redirecting valid responses to it.

What language below is used to view and manipulate data that is stored in a relational database?

Which of the following are considered to be interception attacks? (Choose all that apply.)

In an integer overflow attack, the value of a variable is changed to something > the range that the programmer intended.

What technology expands the normal capabilities of a web browser for a specific webpage?

Which type of attack below is similar to a passive man-in-the-middle attack?

An attack in which the attacker attempts to impersonate the user by using his or her session token is known as:

How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?

When an attack is designed to prevent authorized users from accessing a system, it is called what kind of attack?

A buffer overflow attack is when a process attempts to store data in RAM beyond the boundaries of a fixed-length buffer.

What protocol can be used by a host on a network to find the MAC address of another device based on an IP address?

The exchange of information among DNS servers regarding configured zones is known as:

Securing web applications is easier than protecting other systems.

An attack is being executed if an attacker substituted an invalid MAC for the gw so no users can access external nets?

The return address is the only element that can be altered in a buffer overflow attack.