Prelim Exam MIT

Which of the following can distribute itself without using a host file?

The system administrator of the company has resigned. When the administrator's user ID is deleted, the system suddenly begins deleting files. What type of malicious code is this?

Which of the following provides the strongest form of authentication?

Which type of attack can easily break a user's password if the user uses simple and meaningful things such as pet names or birthdays for their passwords?

Which types of attachments should be filtered from e-mails to minimize the danger of viruses?

With regard to viruses and hoaxes, which of the following is TRUE? (Choose the best answer)

What type set to go off following a preset time interval, the program can record system keystrokes in a text file and e-mail it to the author, and will also delete system logs every five days or whenever a backup is performed?

Which of the following is the best defense against man in the middle attacks?

Which of the following network mapping tools uses ICMP (Internet Control Message Protocol)?

Which of the following is most common method of accomplishing DDoS (Distributed Denial of Service) attacks?

In which of the following does someone use an application to capture and manipulate packets as they are passing through your network?

What is a piece of malicious code that has no productive purpose but can replicate itself and exist only to damage computer systems or create further vulnerabilities called?

Which of the following occurs when a string of data is sent to a buffer that is larger than the buffer was designed to handle?

Which of the following provides a WLAN (Wireless Local Area Network) with the level of security associated with a LAN (Local Area Network)?

How many ports in TCP/IP (Transmission Control Protocol/Internet Protocol) are vulnerable to being scanned, exploited, or attached?

Which of the following determines which operating system is installed on a system by analyzing its response to certain network traffic?

You work as the security administrator at wwwspcf.com. You want to configure the SPCF network to allow only HTTP (Hypertext Transfer Protocol) traffic for outbound Internet connections. You also want to set permissions to allow only certain users to browse the web. Which of the following should you use?

Which of the following represents the best method for securing a web browser?

On a firewall, which ports must be open in order to allow FTP (File Transfer Protocol) traffic?

Which of the following attacks uses ICMP (Internet Control Message Protocol) and improperly formatted MTUs (Maximum Transmission Unit) to crash a target computer?

What should the minimum length of a password be to deter dictionary password cracks?

Which of the following is the major difference between a worm and a Trojan horse?

Which of the following is the most important step that should be taken in response to a security breach?

What would a user's best plan of action be on receiving an e-mail message warning of a virus that may have accidentally been sent in the past, and suggesting that the user to delete a specific file if it appears on the user's computer?

You work as a security administrator at www.spcf.edu.ph. On examining the server's list of protocols that are bound and active on each network interface card, you notice a relatively large number of protocols. What should you do to ensure network security?

You are the security administrator at HAU. You detect intruders accessing your internal network. The source IP (Internet Protocol) addresses originate from trusted networks. What type of attack are you experiencing?

What is the process of forging an IP (Internet Protocol) address to impersonate another machine called?

Malicious port scanning determines the

Which of the following ports does a DNS (Domain Name Service) server require?

Which of the following attacks exploits the session initiation between the Transport Control Program (TCP) client and server in a network?

Which of the following attacks attempts to crack passwords?

Which of the following is the most costly method of an authentication?

Which of the following can be used to track a user's browsing habits on the Internet?

What is the first step in implementing a firewall?

Which of the following can be deterred against by increasing the keyspace and complexity of a password?

What do intruders use most often to gain unauthorized-access to a system? A process where an attacker attempts to acquire information about your network and system by talking to people in the organization.

Which of the following is an effective method of preventing computer viruses from spreading?

Which of the attacks can involve the misdirection of the domain name resolution and Internet traffic?

What is an application that appears to perform a useful function but instead contains some sort of malicious code called?

Which of the following provides the best protection against an intercepted password?