Deck 2: Analyzing Network Reconnaissance

Question 1

Which of the following is not a common use of packet analysis?

A) Troubleshooting network connectivity
B) Detecting ping sessions
C) Examining Application Layer sessions
D) Solving DHCP issues

Answer 1

Detecting ping sessions

Question 2

Capturing and examining data snapshots of network traffic, either in real time or as historical data, is known as _____________ data analysis.

Answer 2

point-in-time

Question 3

The terms "information security" and "network security" are virtually synonymous.

Answer 3

False

Question 4

Which of the following is a type of wireless attack? (Choose all that apply.)

A) Rogue access point
B) Evil twin
C) Intercepting wireless data
D) Wireless DoS attack

Question 5

What was the first packet capture tool?

Question 6

What are the three major parts of the Wireshark user interface? (Choose all that apply.)

A) Packet Bytes pane
B) Packet List pane
C) Packet Details pane
D) Packet Histogram view

Question 7

What data correlation technique attempts to answer the question, "Will this do something harmful if it is allowed to execute?"

Question 8

Which of the following network reconnaissance tools consolidates real-time monitoring and management of security information with analysis and reporting of security events?

A) IDS
B) SIEM
C) packet analyzer
D) NetFlow analyzer

Question 9

Which of the following is not an element of a syslog message?

A) PRI
B) HEADER
C) ACKNOWL
D) MSG

Question 10

A(n) ____________ is a record of any action that occurs on a computer.