NVST TEST 5

Which of the following is FALSE about User Datagram Protocol (UDP)?

Each machine with a TCP/IP stack has ______ TCP ports and ______ UDP ports.

Which of the following is an advantage of using virtual machines?

Which of the following statements is FALSE about the key terms used in the risk management process?

Each of the following is intended to protect information except __________.

A port scanner has reported that your web server running with a supporting SQL database is listening on TCP ports 80, 443, 21, and 1433. Which of these ports is unnecessary and should be closed to prevent hacking attempts?

Which of the following is not a feature or capability of a port scanner?

IP resides at which layer of the OSI model?

*An attacker with low skill level is called?

An attacker normally takes inventory of which type of ports on the system?

Attacker can ask the server to send all information it has about a given domain through requesting a ________ from the name server.

*Each of the following protocols can be used to encrypt transmissions over the Internet except _________.

The following are useful data elements from the Registrar of Whois Search except _______.

A host has an IP address of 128.78.3.2. The network is subnetted by borrowing the first 3 bits of host address bits. What is the subnet mask for 128.78.3.2?

*The following are commonly used techniques for reconnaissance except ________.

_______ is the interception of network data not intended for the machine that is intercepting the traffic.

A person wishing to prevent users from accessing a web server and the information on it would try a ____ attack.

The qualities and characteristics of the network traffic generated by Nmap's ping scan are called its _________.

*What does an attacker do in Reconnaissance Phase?
i. An attacker seeks to gather as much information as possible about a target of evaluation prior to launching an attack
ii. The core of Reconnaissance attack is intrusive information gathering techniques
iii. System is breached or accessed in order to retrieve information

Which of the following IP address class is reserved for future use?

*What is the name of the unique physical address that is assigned to every network interface card?

*Which of the following is not a well known TCP port number?

Attackers known as ____________ like to think of themselves as an elite group who are performing a valuable service in identifying security weaknesses.

A(n) __________ is a weakness that allows a threat agent to bypass security.

You connected your company to the Internet, and security is a concern. What should you install?