Which method can be an effective countermeasure against SYN attacks?

decreasing the SYN RECEIVED time-out period

Which of the following is an indication of an actual virus attack as opposed to a likely hardware problem?

unknown files keep appearing on the system

Which registry entry can be used to automatically start a program when Windows boots?

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

Which of the following is a task that a typical firewall can perform?

deny packets based on the protocol

Which of the following symptoms is an indication of possible network intrusions?

repeated failed remote log in attempts

studbud

Certified Ethical Hacker - Part 1

100 termsStudBud Administration6 plays

These are questions you might see when taking quizzes related to a class about ethical hacking. Check out Part 2 for more of the same.

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
Which share allows communication between two processes on the same system?
SYSVOL
ADMIN$
IPC$
2
Which protocols uses management information bases to define the information that a managed system offers?
SMTP
DHCP
ICMP
SNMP
3
Which method can be an effective countermeasure against SYN attacks?
increasing the number of ACK packet retransmissions
increasing the SYN RECEIVED time-out period
decreasing the SYN RECEIVED time-out period
eliminating SYN packet retransmissions
4
Which type of attack is usually the result of bad programming practices?
Source routing
Buffer overflow
ARP poisoning
SQL injection
5
What type of malware spreads automatically using the network?
virus
rootkit
Trojan horse
worm
6
Which of the following is an indication of an actual virus attack as opposed to a likely hardware problem?
unknown files keep appearing on the system
the monitor starts flickering
the mouse hangs or does not respond
the computer beeps at startup with no screen display
7
Which lawful intercept component stores and processes traffic intercepted by the service provider?
Source span port
IAP
Mediation device
Collection function
8
Early Windows OSs used which of the following programs loaded into memory to interact with a network resource or device?
Winsock
Microsoft RPC
NetBIOS
IPX/SPX
9
Which of the following depends on the reaction of naive users rather than software code that actually causes harm?
macro virus
shell virus
virus hoax
10
Signal strength and distance are inversely proportional.
False
True
11
Which of the following is a huge network of compromised systems?
botnet
FSMax
mail bomb
net send flood
12
At one unit distance the signal strength equals x, what is the signal strength the distance is doubled?
x/2
x/4
13
Which registry entry can be used to automatically start a program when Windows boots?
HKLM\Microsoft\Windows\Software\Configuration\Start
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Microsoft\Windows\Software\Configuration\Start
14
Which of the following is NOT one of the three-layered architectures in basic Web applications?
presentation
transport
logic
data
15
Which technology is used to hide data in other data, such as hiding program code in a graphic image?
encryption
tunneling
steganography
16
What feature of TCP do attackers use to perform a half-open SYN scan?
three-way handshake
sequence number
header checksum
17
Ubuntu and Debian Linux use what command to update and manage their RPM packages?
apt-get
dir
yum
18
Which of the following is NOT one of the four phases of the social engineering lifecycle?
Exploitation of relationship
Social validation
Development of relationship
Information gathering
19
Which of the following are software applications that run automated tasks over the Internet?
Zombies
Slaves
Pods
Bots
20
What do you call an information resource or asset that is being protected from attacks?
target asset
main asset
key value
target of evaluation
21
Which type of attack uses the TCP three-way handshake to create incomplete connections?
teardrop
smurf
SYN
22
When using Nslookup, must must you type if you wish to query for a host name outside the domain?
the hostname
the FQDN
the RR
the server name
23
Which of the following monitors key system objects to determine whether an intruder has changed them?
intrusion prevention system
network-based IDS
system integrity verifier
host-based IDS
24
Which Windows tool can be used to enumerate a MIB and get information about share names and paths?
SNMPUTIL
FINGER
SHOWMOUNT
25
Which Web application threat allows attackers to pass malicious code to different systems via a Web application?
XSS vulnerabilities
SQL injection attacks
Command injection flaws
26
Which of the following is a schedule that directs the routine application of patches and updates to systems?
version plan
patch cycle
revision change
upgrade schedule
27
Which script is used to plot the boundary sections of a class C network?
qtrace.pl
Bile.pl
jarf-rev.pl
28
Which of the following is a security weakness in a system that may be exploited by an attack?
vulnerability
hole
flaw
threat
29
Which of the following is a task that a typical firewall can perform?
deny packets based on the protocol
block dial-in users
secure against tunneling attempts
stop attacks from social engineering
30
Which of the following attack methods uses a zombie's IP address and impersonates a local host's IP address?
Banner grabbing
HTTP tunneling
Source routing
IP spoofing
31
Which Web application threat uses Web applications to send malicious JavaScript code to end users?
DMZ protocol attacks
Cross-site scripting
Authentication hijacking
Parameter tampering
32
Which scanning technique uses the IP routing function to deduce the state of a port?
Xmas scan
ACK scan
FIN scan
33
Which of the following is a technique to increase web server security?
Enable remote administration
Enable all Windows services
Disable failed logon attempts
Disable directory browsing
34
How does an attacker usually gain access to a system?
through an inside exposure
utilizing a threat vector
by exploiting a vulnerability
by a breach in security
35
Which tool tracks any LAN activity, giving the most detailed information on what users did on the system?
Activity Monitor
Network Monitor
Network Spy
LAN Monitor
36
What is the usually the first phase of an attack?
scanning
reconnaissance
gaining access
covering tracks
37
Which UNIX tool can be used to determine the subnets in use on a network?
Ping
ICMPQuery
ICMPPush
Route
38
To determine whether a system could be vulnerable to an RPC-related issue, which of the following tools can be used?
Nessus
MBSA
WSUS
39
Which of the following symptoms is an indication of possible network intrusions?
repeated failed remote log in attempts
steep decrease in bandwidth consumption
a sudden drop in CPU utilization
less than one percent broadcast packets
40
With the unnamed attack, packet fragments have gaps between them; this is a variation on which attack?
teardrop
smurf
SYN flood
ping of death
41
What does JSON stand for?
JavaScript Online Networking
Jason
JavaScript Object Notation
42
Which set of HTTP extensions allows clients to search the content and properties of files?
NNTP
IPSec
WebDAV
BITS
43
Which intrusion detection technique is also known as misuse detection and is based on creating models of intrusions?
Traffic filtering
Baseline detection
Anomaly detection
Signature recognition
44
Which protocol can be used for banner grabbing?
Telnet
SMTP
ICMP
FTP
45
Which of the following is a best practice to try to prevent session hijacking?
Use clear text for authentication
Use remote access extensively
Use an unencrypted protocol
Limit incoming connections
46
Red Hat and Fedora Linux use what command to update and manage their RPM packages?
get
yum
dir
47
What feature of TCP do attackers use to perform a half-open SYN scan?
three-way handshake
header checksum
sequence number
48
Which social engineering technique is the unauthorized listening to conversations or reading of messages?
Piggybacking
Eavesdropping
Shoulder surfing
Dumpster diving
49
Which scanning method is a basic network scanning technique to determine which range of IP addresses map to live hosts?
network scan
port scan
ping sweep
50
Which type of attack uses the phone system?
war-driving
pharming
phishing
phreaking
51
Which of the following is considered a private IP address?
11.10.10.10
100.19.168.192
172.30.100.160
52
You can't get past a firewall unless
you are invited to come through
at least one rule matches
53
Windows 10, Windows 8, Windows Server 2016, and Windows Server 2012 have most services and features enabled by default.
True
False
54
The MBSA tool can quickly identify missing patches and misconfigurations.
False
True
55
What type of packets are used to perpetrate a fraggle attack?
IP
UDP
ICMP
TCP
56
In which attack method does an attacker use a sniffer to track down a conversation between two users?
Code injection
Network tapping
Man-in-the-middle
IP spoofing
57
At what layer do routers allow the datagram to hop from the source to the destination, one hop at a time?
application
data link
transport
network
58
What does the NetBIOS Auditing Tool send to a target system to get the NetBIOS computer name?
SMB probe
NetBIOS token
UDP query
TCP SYN
59
The use of corrupt packets to crash a TCP/IP stack is an example of what type of attack?
backdoor
phishing
DoS
trojan
60
An owner's confidence that a system will behave according to its specifications is referred to as:
reusability
confidentiality
assurance
61
What does PSK stand for?
Passport Seva key
Pre-shared key
62
In which attack does an attacker deliberately sends an ICMP echo packet of more than the 65,536 bytes?
smurf
unnamed attack
ping of death
teardrop
63
Which three concepts can be arranged in a triangle to depict how products are often developed.
functionality, resuability, availability
security, availability, functionality
security, functionality, ease of use
64
Of which type of virus are Invader, Flip, and Tequila an example?
Intrusive viruses
Shell viruses
Add-on viruses
Multipartite viruses
65
What is a package containing one or more files that address a flaw in a platform?
hotfix
upgrade
rollback
service pack
66
In which type of attack does an attacker typically use a botnet to send a large number of queries to open DNS servers?
DNS flood attack
Distributed DNS attack
Reflective DNS attack
Direct DNS attack
67
Which Windows utility randomly generates the key used to encrypt password hashes in the SAM database?
Syskey
LCP
AccountAudit
68
Which protocol is used to resolve a MAC address from a known IP address?
MAC
ARP
DNS
SMB
69
Which of the following should NOT be included in an effective password policy?
Passwords must be changed frequently
User accounts must be blocked if a user makes a number of failed attempts
At least one other person should know a user's password
70
What protocol is used to access directory listings within Active Directory or other directory services?
SNMP
NETPATH
SMB
LDAP
71
Which type of attack is a combination of both the brute force attack and the dictionary attack?
syllable
rainbow
hybrid
passive
72
What type of footprinting uses basic, usually freely available, information about a target such as URLs and DNS table?
Open source
Organizational
Private
73
SMB is used to share files and usually runs on top of NetBIOS, NetBEUI, or which of the following?
Winsock
TCP/IP
CIFS
74
Which UNIX tool can be used to determine the subnets in use on a network?
Route
ICMPquery
Ping
ICMPPush
75
What is used to define the packet structures that are collected through promiscuous monitoring?
fragment reassembly
packet decryption
raw capture
packet decoding
76
Which attack occurs when the attacker is able to browse for directories and files outside the normal application access?
security management
directory traversal/forceful browsing
authentication hijacking
cross-site scripting
77
Which device is a computer or virtual appliance purposely set up as a vulnerable system?
Intrusion prevention system
Honeypot
Intrusion detection system
Firewall
78
What type of information are you likely to find in a zone?
TCP headers
resource records
network protocols
MAC addresses
79
What is the signal strength when the distance equal 4x?
x/8
x/16
80
Which attack method involves encoding portions of the attack with Unicode, UTF-8, or URL encoding?
log tampering
parameter tampering
SQL injection
attack obfuscation
81
Which of the following is NOT a general rule for creating strong passwords?
Use at least one symbol, number, uppercase letter, and lowercase letter
Use at least 8 characters in each password
Do not use the username as the password
Use common words so it is easy to remember
82
What is the Microsoft SQL Port number?
1443
1024
1143
1433
83
Which tool can be used during the scanning phase of an attack?
Rootkit
Flooding
Spoofing
Traceroute
84
Which of the following is a Perl script that uses Google to extract subdomains and DNS names?
Nslookup
DNS Enumerator
SpiderFoot
85
What tool can execute processes on a remote Windows system?
PsExec
Syskey
nc.exe
86
Which of the following is the first of the three preattack phases?
enumeration
footprinting
scanning
87
What is one of the three questions that an ethical hacker's evaluation of a client's information system seek to answer?
What can an intruder do with information found on the target system?
How much will it cost to patch the target system?
Which software must be installed or repaired to secure the system?
88
Which UNIX command lists user information including the username, terminal name, and login time?
Finger
Snmputil
Rpcinfo
89
In what type of exploitation does an attacker steal a valid session ID and use it to get into the system to extract data
Spoofing
Session hijacking
A man-in-the-middle attack
Impersonation
90
Which address is used to transfer data through routers and across multiple networks, including the Internet?
ARP
MAC
IP
IPX
91
What is firewalking?
It is a way to get past a firewall
It is walking across hot embers or stones
92
Which of the following is NOT a category of hacker attack?
Host-based
Operating system
Application-level
93
Which file extension could indicate a file that is harboring a virus and is system device driver on Windows systems?
.LNK
.COM
.SYS
.VXD
94
Which attack works by broadcasting DHCP requests with spoofed MAC addresses?
DHCP flooding
MAC duplicating
MAC flooding
DHCP starvation
95
Which part of a network do most companies limit the protocols that may flow through it?
core switch
extranet
DMZ
intranet
96
What is the correct order of phases of a hijack session?
track the packet, synchronize the connection, inject the packet
desynchronize the connection, track the connection, inject the packet
track the connection, desynchronize the connection, inject the packet
synchronize the connection, track the packet, inject the packet
97
Which of the following protocols does NetBios use to access a network resource?
NetBT
NBT
NetBEUI
TCP/IP
98
What critical component of any OS, that can be can be vulnerable to attacks, is used to store and manage information?
WSUS
file system
SQL database
99
What can an attacker change via the guest account in Windows to escalate to the administrators' group?
RID
ACL
PID
100
In which type of attack might a company's competitor send a malicious person as a candidate for a job opening?
insider attack
phishing attack
third-party attack
piggybacking

Certified Ethical Hacker - Part 1 Flashcards | StudBud