Deck 3: Network and Computer Attacks

Question 1

IDS stands for ____.

A)Intrusion Detection System
B)Information Dissemination System
C)Information Destruction System
D)Intruder Dispersal System

Answer 1

A

Question 2

The most effective approach to protect a network from malware being introduced is to conduct structured training of all employees and management.

Answer 2

True

Question 3

Malware programs cannot be detected by antivirus programs.

Answer 3

False

Question 4

____ is concerned with the security of computers or devices that are part of a network infrastructure.

A)Attack security
B)Cybercrime
C)Computer security
D)Network security

Question 5

A ____ is a computer program that replicates and propagates itself without having to attach itself to a host.

A)virus
B)Trojan
C)worm
D)shell

Question 6

____ sometimes displays a banner that notifies the user of its presence.

A)Spyware
B)Adware
C)Webware
D)Malware

Question 7

In a ____ attack, a programmer finds a vulnerability in poorly written code that doesn't check for a defined amount of memory space use.

A)buffer overflow
B)DoS
C)DDoS
D)session hijacking

Question 8

Trojan Programs can install a backdoor or ____ on a computer.

A)rootkit
B)shell
C)worm
D)macro virus

Question 9

The two most popular spyware and adware removal programs are ____ and Ad-Aware.

A)Zone Alarm
B)BlackIce
C)McAfee Desktop Firewall
D)SpyBot

Question 10

The virus signature file is maintained by ____ software.

A)antivirus
B)keylogger
C)remote control
D)firewall

Question 11

One of the most insidious attacks against networks and home computers worldwide is ____, which disguise themselves as useful computer programs or applications.

A)macro viruses
B)worms
C)spyware programs
D)Trojan programs

Question 12

A ____ can replicate itself, usually through an executable program attached to an e-mail.

A)shell
B)virus
C)keylogger
D)rootkit

Question 13

Computer crime is the fastest growing type of crime worldwide.

Question 14

____ is a remote control program.

A)Slammer
B)BlackIce
C)Symantec pcAnywhere
D)Zone Alarm

Question 15

A ____ is created after an attack and usually hides itself within the OS tools, so it's almost impossible to detect.

A)toolbox
B)rootkit
C)shell
D)macro virus

Question 16

The average home user or small-business owner doesn't typically use Telnet.

Question 17

Macro viruses are hard to create.

Question 18

A ____ attack prevents legitimate users from accessing network resources.

A)buffer overflow
B)session hijacking
C)social engineering
D)DoS

Question 19

To represent 0 to 63 characters you need only ____ bits.

A)four
B)five
C)six
D)seven

Question 20

____ commands that open and close files can be used in destructive ways.

A)Macro
B)Firewall
C)Keylogger
D)Adware

Question 21

Software keyloggers behave like ____ and are loaded on a computer.

A)Trojan programs
B)viruses
C)shells
D)firewalls

Question 22

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
hardware keylogger

Question 23

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
common Trojan program

Question 24

PKI stands for ____.

A)Public Key Infrastructure
B)Private Key Infrastructure
C)Protected Key Infrastructure
D)Primary Key Infrastructure

Question 25

____________________ is malicious software, such as a virus,worm, or Trojan program, introduced to a network for just that reason.

Question 26

Antivirus software compares ____________________ of known viruses against the files on the computer; if there's a match, the software warns you that the program or file is infected.

Question 27

Which of the following provides the most secure method of securing a company's assets?

A)rotary locks
B)combination locks
C)card access
D)deadbolt locks

Question 28

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
executable piece of programming code that should not appear in an e-mail attachment

Question 29

A(n) ____________________ is a virus encoded as a macro in programs that support a macro programming language, such as Visual Basic for Applications (VBA).

Question 30

____ are devices or computer programs that can be used to capture keystrokes on a computer.

A)Viruses
B)Keyloggers
C)Macro viruses
D)Firewalls

Question 31

In the ____ attack, the attacker simply creates an ICMP packet that's larger than the maximum allowed 65,535 bytes.

A)DoS
B)Ping of Death
C)buffer overflow
D)session hijacking

Question 32

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
worm that uses UDP port 8998 to contact the attacker's server

Question 33

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
type of DoS attack

Question 34

____________________ or rootkits are computer programs that give attackers a means of regaining access to the attacked computer later.

Question 35

____________________ is defined as securing a stand-alone computer that's not part of a network infrastructure.

Question 36

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
2005 hybrid worm with backdoor capabilities spread by mass e-mailing and exploiting Windows vulnerabilities

Question 37

____ enables an attacker to join a TCP session and make both parties think he or she is the other party.

A)A DoS attack
B)The Ping of Death
C)A buffer overflow attack
D)Session hijacking

Question 38

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
most infamous macro virus

Question 39

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
purported to have shut down more than 13,000 ATMs

Question 40

MATCHING
Match each term with the correct statement below.
a.shell
f.Melissa
b.W32/Sobig.F
g.Back Orifice
c.Luckysploit
h.Slammer
d.Ping of Death
i.Mytob
e.KeyGhost
attack side of a sophisticated cybercrime toolkit that spreads when Web surfers visit a hacked Web site hosting the malware

Question 41

Why is "attach" a key word when talking about viruses?

Question 42

What is Back Orifice?

Question 43

How does a buffer overflow attack work?

Question 44

Describe an example of a macro virus.

Question 45

Some security professionals use fear tactics to scare users into complying with security measures. Is this a good tactic?

Question 46

What is spyware?

Question 47

What is the most important recommendation that should be made to a client to help prevent viruses from being introduced into corporate networks?

Question 48

What types of ports do successful Trojan programs commonly use?

Question 49

What is the difference between spyware and adware?

Question 50

What is a DDoS attack?