Question 1

Which of the following reveals a system vulnerability and is often documented, either by the manufacturer or by an attacker?

Accepted Answer

An exploit is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerized). This often includes such things as gaining control of a computer system, allowing privilege escalation, or a denial-of-service attack.

Question 2

Which of the following is a specially "hardened" software service or software/hardware product that erects a barrier to inspect and control traffic flow between networks?

Accepted Answer

A firewall is specifically designed to inspect and control traffic flow between networks, acting as a barrier to protect the internal network from unauthorized access.

Question 3

Which of the following is a process of borrowing identity information, such as an IP address, domain name, NetBIOS name, or TCP or UDP port numbers to hide or deflect interest in attack activities?

Accepted Answer

Spoofing involves borrowing identity information, such as an IP address, domain name, NetBIOS name, or TCP or UDP port numbers, to hide or deflect interest in attack activities. It is a technique used to gain unauthorized access to computers by deceiving the system into thinking the attacker is a trusted entity.

Question 4

Which of the following terms is a hardened computer specifically designed to resist and oppose illicit or unwanted attempts at entry, and whose job is to guard the boundary between internal and external networks?

Accepted Answer

A bastion host is a hardened computer designed to resist attacks and protect a network by being a critical point of defense at the boundary between internal and external networks.

Question 5

Which of the following is a weak spot or known place of attack on any common operating system, application, or service?

Accepted Answer

The answer of Which of the following is a weak...

Question 6

In which of the following attacks is the attacker able to intercept traffic from both parties and either pass the traffic unaltered to the other end of the communication link, or the attacker can forge replies from either side?

Accepted Answer

A man-in-the-middle attack involves an attacker intercepting communications between two parties, where they can either passively listen to the exchange or actively alter the communication. This type of attack allows the attacker to intercept and potentially manipulate messages between the two parties without their knowledge.

Question 7

Fundamental protocols-including IP and TCP or UDP-offer no built-in security controls.

Accepted Answer

IP (Internet Protocol), TCP (Transmission Control Protocol), and UDP (User Datagram Protocol) are core protocols of the Internet protocol suite designed for routing and communication. They do not include built-in security features like encryption or authentication, which are instead provided by higher-layer protocols such as TLS (Transport Layer Security).

Question 8

When users from outside the network attach to a service inside the network, they actually attach to the proxy server, which establishes a proxy session into the private side of the network from there.

Accepted Answer

The answer of When users from outside the network attach...

Question 9

Which of the following is an undocumented and illicit point of entry into an operating system or application added by a system's programmers to bypass normal security?

Accepted Answer

A back door is a means of access to a computer system or encrypted data that bypasses the system's customary security mechanisms. It can be intentionally created by programmers for various reasons, including providing a shortcut for system maintenance, but it can also be exploited for malicious purposes if discovered by others.

Question 10

Which of the following is a type of software that opens the door for a compromised machine to display all kinds of unsolicited and unwanted advertising, often of an unsavory nature?

Accepted Answer

Adware is a type of software designed to throw advertisements up on your screen, most often within a web browser. This software can be installed on your machine without a clear indication and can display unsolicited and unwanted advertising, which can sometimes be of an unsavory or intrusive nature.

Question 11

Which of the following terms means restricting who may view or use certain resources, including access to bandwidth or a computer, as well as access to information?

Accepted Answer

Access control is the process of restricting access to resources, including both physical and digital assets, ensuring that only authorized users can access or use them.

Question 12

Which of the following software programs can attempt to communicate with any IP-based system while cycling through all valid TCP and UDP port addresses?

Accepted Answer

Port scanners are designed to probe a server or host for open ports. This is achieved by sending a message to each port, one at a time. The responses received help determine which ports are open and potentially vulnerable to attacks. This functionality is what allows port scanners to attempt communication with any IP-based system by cycling through all valid TCP and UDP port addresses.

Question 13

Strictly speaking, VPNs use tunneling protocols; therefore, they need to encrypt tunneled traffic.

Accepted Answer

While VPNs often use tunneling protocols to encapsulate data packets, encryption is a separate function. A VPN can technically use tunneling without encryption, but this would not be secure.

Question 14

Which type of attack includes SYN Flood, broadcast amplification attacks, and buffer overflow?

Accepted Answer

SYN Flood, broadcast amplification attacks, and buffer overflow are all types of Denial of Service (DoS) attacks, which aim to make a network or service unavailable to its intended users.

Question 15

A stealthy attacker may cover its tracks by deleting log files, or terminating any active direct connections.
Indicate the answer choice that best completes the statement or answers the question.

Accepted Answer

A stealthy attacker often tries to erase evidence of their intrusion by deleting log files and terminating direct connections to avoid detection by security systems or administrators.

Question 16

Which type of device makes access control decisions on the basis of application content rather than by looking at IP addresses or port numbers and can act on a host to deny potentially malicious activity?

Accepted Answer

An Intrusion Prevention System (IPS) makes access control decisions based on application content, rather than solely on IP addresses or port numbers, and can actively deny potentially malicious activity on a host.

Question 17

Which of the following refers to a successful attempt to compromise a system's security?

Accepted Answer

A "break-in" refers to a successful attempt to compromise a system's security, indicating unauthorized access or intrusion.

Question 18

Which of the following types of attacks serves the purpose of masquerading as an authorized user in order to gain access to a system?

Accepted Answer

Session hijacking involves taking over a legitimate user's session to gain unauthorized access to information or services in a computer system, effectively masquerading as the authorized user.

Question 19

Which of the following serves the purpose of finding out what you have and what is vulnerable?

Accepted Answer

Reconnaissance is the act of gathering preliminary data or intelligence on targets of interest to identify system vulnerabilities and determine the best way to exploit them. This phase is crucial for understanding what assets are available and how they might be vulnerable to attack.

Question 20

Proxy server software permits internal network addresses to be "translated" into public network addresses when packets leave inside networks so only public IP addresses are exposed on the public Internet.

Accepted Answer

The answer of Proxy server software permits internal network addresses...

Quiz 12: Securing Tcp/Ip Environments