Question 1

A direct attack occurs when an attacker tries to flood a victim with a stream of packets directly from the attacker's computer.

Accepted Answer

A direct attack is when an attacker sends a flood of packets directly from their computer to the victim's computer, overwhelming it and causing it to crash or become unavailable. This type of attack is also known as a flood attack or a denial-of-service (DoS) attack.

Question 2

ICMP can be best described as the second part of a three-way TCP handshake sent in response to a SYN.

Accepted Answer

ICMP (Internet Control Message Protocol) is a protocol used for sending error messages and operational information about network conditions. It is not directly related to the TCP handshake process, so the statement is false.

Question 3

A DoS attack makes a server or network unavailable by flooding it with attack packets.

Accepted Answer

A DoS (Denial-of-Service) attack can overwhelm a server or network with a flood of attack packets, making it unavailable to legitimate users.

Question 4

In regards to network security, ________ means preventing unauthorized users from gaining information about the network structure, data flowing across the network, network protocols used, or packet header values.
A) confidentiality
B) integrity
C) availability
D) authentication

Accepted Answer

Confidentiality is the concept of keeping information private and preventing unauthorized access to sensitive data or information. In the context of network security, it means protecting the network and its data from unauthorized access by implementing measures such as encryption, access controls, and secure communication protocols. This helps prevent attackers from gaining access to the network structure, data flowing across the network, network protocols used, or packet header values.

Question 5

"Breadth of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is possible.

Accepted Answer

"Breadth of the perimeter" actually refers to the number of potential entry points or vulnerabilities within a network perimeter. It is not used to convey that creating a 100% secure network is possible, as it is practically impossible to eliminate all potential security threats.

Question 6

DoS network attacks are fairly uncommon.

Accepted Answer

DoS network attacks are unfortunately very common in today's digital landscape. They can cause significant disruptions and damage to individuals and businesses.

Question 7

SYN-ACK can be best described as the second part of a three-way TCP handshake sent in response to a SYN.

Accepted Answer

SYN-ACK is indeed the second part of a three-way TCP handshake sent in response to a SYN. After the sender (client) sends a SYN packet to the receiver (server), the receiver responds with a SYN-ACK packet to acknowledge the SYN and initiate a connection. The third part of the handshake is a final ACK packet from the sender to confirm the connection establishment.

Question 8

Ensuring network ________ means that authorized users have access to information, services, and network resources.
A) confidentiality
B) integrity
C) availability
D) authentication

Accepted Answer

Availability refers to ensuring that authorized users have access to information, services, and network resources. Confidentiality refers to keeping information private and protected from unauthorized access. Integrity refers to the accuracy and consistency of data, and authentication refers to verifying the identities of users attempting to access network resources.

Question 9

The ultimate goal of a DoS attack is to ________.
A) cause harm
B) frustrate users
C) practice hacking
D) None of the above

Accepted Answer

The ultimate goal of a DoS (Denial of Service) attack is to cause harm by making a computer or network resource unavailable to its intended users, disrupting services and operations.

Question 10

Similar to a direct attack, an indirect attack occurs when an attacker spoofs his/her IP address.

Accepted Answer

An indirect attack can involve IP address spoofing, among other techniques, to mask the identity of the attacker and make it more difficult to trace the source of the attack.

Question 11

A ________ attack is when a webserver is flooded with application layer web requests.
A) SYN flood
B) Ping flood
C) HTTP flood
D) None of the above

Accepted Answer

An HTTP flood is a type of DDoS attack in which the attacker floods a web server with a massive amount of HTTP requests. The intention is to overwhelm the server and make it unavailable to legitimate users. This is achieved by exploiting vulnerabilities in the application layer of the web server. A SYN flood and Ping flood are types of network layer DDoS attacks that target the transport layer of the TCP/IP protocol stack.

Question 12

Ensuring appropriate network ________ means preventing attackers from altering the capabilities or operation of the network.
A) confidentiality
B) integrity
C) availability
D) functionality

Accepted Answer

The answer of Ensuring appropriate network ________ means preventing attackers...

Question 13

In regards to network security, ________ is the policy-driven control of access to systems, data, and dialogues.
A) confidentiality
B) integrity
C) access control
D) availability

Accepted Answer

Access control is the policy-driven control of access to systems, data, and dialogues, allowing authorized users to access the resources they need while keeping unauthorized users out. Confidentiality, integrity, and availability are all important components of network security, but they do not directly relate to the control of access to systems and data.

Question 14

A ________ attack is when a victim is flooded with SYN packets in an attempt to make many half-open TCP connections.
A) SYN flood
B) Ping flood
C) HTTP flood
D) None of the above

Accepted Answer

A SYN flood attack is a type of denial of service attack where the attacker sends repeated SYN packets to a victim's machine in an attempt to overwhelm its ability to respond to legitimate traffic. This flood of SYN packets can result in many half-open TCP connections, which can consume the victim's resources and make their system unavailable to legitimate users.

Question 15

________ is the process of obscuring an attackers source IP address.
A) Backscatter
B) Spoofing
C) IP Flood
D) None of the above

Accepted Answer

Spoofing is the process of impersonating someone else's IP address, so an attacker can obscure their true origin. This technique is commonly used in DDoS attacks to make it difficult to trace the source.

Question 16

"Death of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is impossible.

Accepted Answer

The phrase "Death of the perimeter" refers to the idea that traditional perimeter security measures, such as firewalls and intrusion detection systems, are no longer enough to protect a network from external threats. With the rise of cloud computing, remote workers, and mobile devices, there are simply too many ways for attackers to bypass the perimeter and gain unauthorized access to a network. Therefore, network administrators recognize that creating a completely secure network is impossible, and instead focus on mitigating risks and minimizing damage in the event of a breach.

Question 17

A ________ attack is when a victim is flooded with ICMP packets that appear to be normal supervisory traffic.
A) SYN flood
B) Ping flood
C) HTTP flood
D) None of the above

Accepted Answer

This is a description of a Ping flood, which involves sending a large number of ICMP Echo Request packets to a target system in order to overwhelm it and cause it to crash or become unresponsive. The packets often appear to be legitimate network traffic, which makes it difficult for the victim to distinguish between normal activity and the attack. SYN flood attacks specifically target TCP connections, while HTTP floods focus on overwhelming web servers with bogus requests.

Question 18

________ are compromised hosts running malware controlled by the hacker.
A) DDoS
B) ICMP
C) Bots
D) None of the above

Accepted Answer

Bots, or botnets, are networks of compromised computers that are under the control of a remote attacker. These bots can be used for a variety of purposes, including launching DDoS attacks, stealing personal information, and spreading malware. Therefore, bots are the best answer to this question.

Question 19

An indirect attack occurs when an attacker tries to flood a victim with a stream of packets directly from the attacker's computer.

Accepted Answer

An indirect attack occurs when an attacker uses an intermediary device or network to flood a victim with packets, making it difficult to trace the source of the attack.

Question 20

DoS attacks can cause harm by ________.
A) stopping a critical service
B) slowly degrading services over a period of time
C) Both A and B
D) Neither A nor B

Accepted Answer

A DoS attack can cause harm in multiple ways, including completely stopping a critical service and slowly degrading services over a period of time. Therefore, both options A and B are correct.

Quiz 4: Secure Networks

A direct attack occurs when an attacker tries to flood a victim with a stream of packets directly from the attacker's computer.

ICMP can be best described as the second part of a three-way TCP handshake sent in response to a SYN.

A DoS attack makes a server or network unavailable by flooding it with attack packets.

In regards to network security, ________ means preventing unauthorized users from gaining information about the network structure, data flowing across the network, network protocols used, or packet header values.

"Breadth of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is possible.

DoS network attacks are fairly uncommon.

SYN-ACK can be best described as the second part of a three-way TCP handshake sent in response to a SYN.

Ensuring network ________ means that authorized users have access to information, services, and network resources.

The ultimate goal of a DoS attack is to ________.

Similar to a direct attack, an indirect attack occurs when an attacker spoofs his/her IP address.

A ________ attack is when a webserver is flooded with application layer web requests.

Ensuring appropriate network ________ means preventing attackers from altering the capabilities or operation of the network.

In regards to network security, ________ is the policy-driven control of access to systems, data, and dialogues.

A ________ attack is when a victim is flooded with SYN packets in an attempt to make many half-open TCP connections.

________ is the process of obscuring an attackers source IP address.

"Death of the perimeter" is a phrase used by network administrators to convey that creating a 100% secure network is impossible.

A ________ attack is when a victim is flooded with ICMP packets that appear to be normal supervisory traffic.

________ are compromised hosts running malware controlled by the hacker.

An indirect attack occurs when an attacker tries to flood a victim with a stream of packets directly from the attacker's computer.

DoS attacks can cause harm by ________.