NVST quiz 1 (1-30)

For DoS (Denial-of-Service) Attack, Resource Exhaustion can be achieved by:
i. Spawning processes to fill the process table
ii. Filling up the whole file system
iii. Packet floods
iv. Malformed packet attacks

Which application analyses surfer's shopping habits, interests and inserts Pop-up advertisement?

Which of the following is not one of the IP address ranges reserved for private use by RFC 1918?

Which method is NOT used as maintaining access attacks?

The purpose of port scanning is systematically scan for range of ____.

Which of the following event file is used to stores security-related events like failed logon attempts, policy changes, and attempts to access files without proper permission in Windows system?

Which information directory protocol is the standard for file transfer over the Internet?

The following are payloads provided by Metasploit to foist on the target machine except _____.

What type of attack attempts to use every possible key until the correct key is found?

Which of the followings are the common techniques used by sophisticated hacker for covering track and hiding in a compromised system?
i. Hiding evidence by altering event logs;
ii. Creating difficult to find files and directories;
iii. Hiding evidence on the network: Covert Channels;
iv. Deleting log files.

The TCP/IP adheres roughly to the following protocol layers except _________.

Which of the following is the correct sequence for OSI (Open Systems Interconnection) seven layers?

The following are methods employed to uncover system vulnerabilities except ______.

Which of the following information cannot generally be found from the target’s Internet Registrar?

Which of the following troubleshooting utilities is common to all operating systems and is used for testing connectivity of two hosts on a network?

Identify which category of Denial-of-Service attack if the attack is Smurf.

What is hybrid password cracking?

Ethereal is a software tool used to ______ between client and server machine.

An attacker can gain access to very sensitive information about an organisation through the following except _________.

Which of the following is the correct sequence of phases of hacker’s attack?

A situation in which a program or process attempts to store more data in a temporary data storage area than it was intended to hold is known as a what?

Which of the following protocols should be disabled on a critical network device such as a router?

What is the information can be gathered by an attacker by typing the
following command using Netcat? C:> nc www.sp.edu.sg 80 HEAD / HTTP/1.0

Which of the following statements are TRUE about Computer Misuse Act (Cap 50A)?
i. Any police officer may arrest without warrant any person reasonably suspected of committing an offence under this Act
ii. Any person who knowingly causes a computer to perform any function for the purpose of securing access without authority to any program or data held in any computer shall be guilty of an offence
iii. Any person who causes a computer to perform any function for the purpose of securing access to any program or data held in any computer with intent to commit an offence to which this section applies shall be guilty of an offence.
iv. Any person who does any act which he knows will cause an unauthorised modification of the contents of any computer shall be guilty of an offence

Which of the followings are TRUE about Smurf Attack?
i. Smurf attack also known as directed broadcast attack
ii. Smurf attacks rely on a directed broadcast to create a flood of traffic for a victim
iii. A perpetrator sends a large amount of ICMP echo (ping) traffic at IP broadcast addresses, all of it having a spoofed source address of a victim

Which of the following protocols is responsible for addressing hosts in a TCP/IP-based network?

Which of the following is Not the correct defense method against User-Mode Rootkits?

If the attack is SYN flood, which of the following category of Denial-of-Service attack it belong to?

Which of the following NOT common activity for Scanning?

A type of software that repairs security flaws in an application is called a(n) ________.