stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
NEW Networking Module 10 Flashcards | StudBud
Explore
/
NEW Networking Module 10
NEW Networking Module 10
35 terms
·
StudBud Administration
·
513 plays
Imported from external platform
Flashcards
35 cards
F
Practice quiz
P
Host live
L
Questions
35
Answers
1
Which command can be used on a Windows system to create a hash of a file?
md5
Get-FileHash
shasum
Compute-FileHash
2
Concept of giving employees & contractors only enough access & privileges to do their jobs is known by what term?
principle of least privilege
minimal access/minimal exposure
least-risk privilege profile
limited liability access
3
What type of an attack forces clients off a wireless network, creating a form of Wi-Fi DoS?
ARP poisoning attack
man-in-the-middle attack
channel hopping attack
deauthentication attack
4
On a Linux based system, what command can you use to create a hash of a file using SHA-256?
md5sum
shasum -a 256
sha1sum
sha256sum
5
If someone is offered a free gift or service in exchange for private information or access to a computer system.
phishing
baiting
quid pro quo
tailgating
6
What type of door access control is a physical or electronic lock that requires a code in order to open the door?
encrypted lock
biometric lock
cipher lock
key fob lock
7
It is ideal to use the same password for multiple different applications, provided the password is complex enough.
False
True
8
If multiple honeypots are connected to form a larger network, what term is used to describe the network?
honeynet
lurenet
combolure
honeycomb
9
The term malware is derived from a combination of the words malicious and software.
False
True
10
Unexplained increase in file size & unusual error messages w/o apparent cause are both potential symptoms of a virus.
True
False
11
What statement regarding denial-of-service (DoS) attacks is accurate?
No longer major concern due to increased throughput available on networks.
Occurs when a MAC address is impersonated on the network.
Prevents legitimate users from accessing normal network resources.
Is generally a result of a disgruntled employee.
12
Different types of organizations have similar levels of network security risks.
True
False
13
Which of the following scenarios represents a phishing attempt?
E-mail was sent to manager at your comp. that appeared to be from the CTO.
Person posing as employee tried to access secured area at your org.
An employee has received a malware-infected file in their e-mail.
Gift offered to employee w/ access to secured info in exchange for details.
14
What penetration testing tool combines known scanning and exploit techniques to explore potentially new attack routes?
nmap
metasploit
Sub7
Nessus
15
Which utility performs sophisticated vulnerability scans, & can identify unencrypted data such as credit card numbers?
Metasploit
L0phtcrack
Nessus
Nmap
16
What statement regarding the different versions of the SHA hashing algorithm is accurate?
SHA-2 and SHA-3 both support the same hash lengths.
SHA-2 only supports a 256-bit hash.
SHA-0 is the most secure version of SHA.
SHA-1 supports a 128-bit hash function.
17
The original version of the Secure Hash Algorithm was developed by MIT.
False
True
18
Person posing as employee strikes a conversation w/ legitimate employee as they walk into a secured area.
quid pro quo
tailgating
baiting
phishing
19
A hacker, in the original sense of the word, is someone with technical skill and malicious intent.
True
False
20
A variant of BYOD, what does CYOD allow employees or students to do?
Choose a device from a limited number of options.
Use whatever devices they wish to bring.
Supply their choice of cloud application or storage.
Supply their own software on a computer or mobile device.
21
Which of the following statements correctly describes the malware characteristic of polymorphism?
Designed to activate on particular date remaining harmless until that time
Disguises itself as legit program or replaces a legitimate program's code
Utilizes encryption to prevent detection
Can change its characteristics every time it is transferred to a new system
22
Utilized by "Great Firewall", what attack can prevent user access to web pages/redirect them to illegitimate web pages?
rogue DHCP server
MAC address spoofing
DNS poisoning
denial-of-service attack
23
How often should you require users to change their passwords?
every 60 days
every 30 days
every 90 days
every 120 days
24
A drop ceiling could be used by an intruder to gain access to a secured room.
True
False
25
The day after Patch Tuesday is informally dubbed Exploit Wednesday.
False
True
26
An attack that relies on redirected and captured secure transmissions as they occur is known as what type of attack?
man-in-the-middle attack
buffer overflow
banner-grabbing attack
session hijacking attack
27
An RFID label on a box is an example of what type of physical security detection method?
tamper detection
video surveillance via CCTV
motion detection technology
asset tracking tagging
28
Where would restrictions regarding what users can and cannot do while accessing a network's resources be found?
acceptable use policy document
terms of service document
license restrictions document
non-disclosure agreement document
29
Over a long-distance connection, using SSH keys is more secure than using passwords.
True
False
30
A virus that remains dormant until a specific condition is met is known as what type of malware?
encrypted virus
worm
logic bomb
boot sector virus
31
What is the Nmap utility used for?
Used to identify unsecured sensitive data on network such as credit cards.
Automated vulnerability and penetration testing framework.
Software firewall that can be used to secure a vulnerable host.
Port scanning utility that can identify open ports on a host.
32
VMware's AirWatch and Cisco's Meraki Systems Manager are both examples of what type of software?
software defined network software
virtual device management software
cloud network management software
mobile device management software
33
In a red team-blue team exercise, what is the purpose of the blue team?
Is tasked with attacking the network.
Must observe the actions of the red team.
Consists of regulators that ensure no illegal activity is undertaken.
Is charged with the defense of the network.
34
In the typical social engineering attack cycle, what occurs at Phase 3?
Attacker exploits an action undertaken by victim in order to gain access.
Attacker builds trust with the target & attempts to gain more information.
Attacker executes exit strategy that doen't leave evidence or suspicion.
Attacker researches the desired target for clues as to vulnerabilities.
35
Which of the following statements describes a worm?
Process that runs automatically, w/o requiring person to start/stop it.
Program that locks user's data/computer system until a ransom is paid.
Runs independently of other software & travels between PCs/across networks.
Disguises itself as something useful but actually harms your system.
