CSCI 6250 Quiz Questions - Midterms

What 32-bit number helps track and reassemble fragmented packets?

What version of Windows Server has completely eliminated the option for telnet server?

Whitelisting allows only approved programs to run on a computer.

When writing a script which statement allows you to avoid creating an endless loop in your script?

Network attacks can often begin by gathering information from a company's Web site.

What is the decimal equivalent of the binary number 11000001?

Which type of security is specifically concerned with computers or devices that are part of a network infrastructure?

When creating a packet, which field do security pros set to help initiate a response from the target computer?

What precaution should a security professional take before hacking a company's network under a contract?

What open-source network tool uses plug-ins to run test scripts selectable from its client interface?

What subject area is not one of the 22 domains tested during the CEH exam?

Which type of social engineering attack attempts to discover personal information through the use of email?

Which penetration testing model limits testers to partial knowledge of the network?

Which process reveals all hosts on a network and provides a basic diagram of an organization's network structure?

In an ACK scan, if a port returns an RST packet, what state is the port considered to be in?

What type of port scan is similar to a SYN scan and is risky to use because it relies on the attacked computer's OS?

What federal law makes it illegal to intercept any type of communication, regardless of how it was transmitted?

What layer protocols operate as the front end to the lower-layer protocols in the TCP/IP stack?

What attack combines social engineering and email exploits to target victims?

What type of laws should a penetration tester or student learning hacking techniques be aware of?

What attack crashes a computer with an oversized ICMP packet (over the maximum allowed 65,535 bytes)?

You can search for vulnerabilities in a host computer by using a port-scanning tool.

Which GUI tool manages Windows OS and displays graphical views of multiple system areas?

What attack uses sniffing to intercept data or steal credentials?

What port does the Hypertext Transfer Protocol, or HTTP service use?

Even though the CISSP certification is not geared toward the technical IT professional

What professional security certification requires applicants to demonstrate hands-on abilities to earn their certificate

The latest version of Nessus Server and Client can run on Windows, Mac OS X, FreeBSD, and most Linux distributions.

What port does the Domain Name System, or DNS service use?

What is the HTTP method that retrieves data by URI?

After saving "script_name" on a *NIX system, which command makes it executable to run it from the command line?

What type of virus runs automatically when a user opens a file?

Which Windows interface enables communication between computers over a local area network (LAN)?

To find network shares, testers use port scanning plus what procedure to first identify the target OS?

Many admins block which ICMP Echo message to prevent responses during ping sweeps?

Which utility is used to gather IP and domain information?

What test reviews a company’s security policies and procedures to identify and report vulnerabilities to management?

Which process uses human psychology to gather info from people for launching attacks on computer networks?

What IP address is used as a loopback address and is not a valid IP address that can be assigned to a network?

Which older network service lets admins remotely view system stats, versions, and detailed host info?

What feature implemented in Windows 8.1 prevents the execution of non-trusted boot content, preventing rootkits?

Which post-attack tool hides in the OS and is hard to detect?

Which HTTP method requests that the entity is stored under the Request-URI?

What term best describes a person who hacks computer systems for political or social reasons?

What info-gathering technique legally collects data on competitors?

What assessment identifies all weaknesses in an application or system?

What protocol is the most widely used and allows all computers on a network to communicate and function correctly?

Which TCP/IP layer handles data flow, packet sequencing, and TCP/UDP headers?

What connection-oriented protocol is utilized by the Transport layer?