NVST quiz 4 (91- 120)

Which of the following represent the pool of well-known ports?

Which of the following statement is FALSE about ICMP (Internet Control Message Protocol)?

The File Transfer Protocol (FTP) can be accessed by each of the following except ________.

TCP/IP family of protocols includes several components:
i. Transmission Control Protocol (TCP);
ii. User Datagram Protocol (UDP);
iii. Internet Protocol (IP);
iv. Internet Control Message Protocol (ICMP)

Which layer of the OSI model is responsible for code and character-set conversion as well as recognizing data formats?

Which of the following are TRUE about a Script Kiddie?
i. With low-level hacking skills
ii. Use released tools and software to exploit without understanding the underlying vulnerability
iii. Biggest group of attackers and usually rather immature
iv. Use Social Engineering technique

Which of the following measures can be used to defend against Network Mapping?
i. Filter out the underlying message that network mapping tools rely on by using firewalls and the packet filtering router;
ii. Block incoming ICMP message;
iii. Filter ICMP_TIME_EXCEEDED messages leaving your network to stymie an attacker using traceroute;
iv. To prevent an attacker from discovering open ports on your
machine is to close all unused ports

________ is the protocol Microsoft uses to share files, printers, and serial ports, and also to communicate between computers using named pipes.

To prevent an attacker from discovering open ports on your machine is to _______.

Passwords can be intercepted as they move through networks via which of the following?

You are the security administrator for a bank. The users are complaining about the network being slow. However, it is not a particularly busy time of the day. You capture network packets and discover that hundreds of ICMP packets have been sent to the host. What type of attack is likely being executed against your network?

Which of the following is the best option for a network administrator to prevent attacker to figure out users' IDs or password?

Which of the following is NOT the correct countermeasure against SYN flooding?

Which of the following is Not the functionality of BOTs software?

Identify one method to defend against DDoS attack from locally stopping services?

Which type of Buffer Overflow Exploits allows attacker to access the system as an impersonated root user?

Nmap is able to provide the following types of scanning except ______.

Running the following command at the PC with IP address 192.168.1.2. What does it mean? fpipe –l 1000 –r 5000 192.168.1.23
i. It is port redirection;
ii. Setup the PC (192.168.1.2) to listen to port 5000;
iii. PC 192.168.1.2 will pick up traffic entering at port 1000;
iv. The traffic arrives at port 1000 will be redirected to PC 192.168.1.23 at port 5000.

The Transmission Control Protocol/Internet Protocol (TCP/IP) protocal that handles outgoing mail using port 25 is ______.

Which of the following techniques are considered as Malformed Packet DoS Attacks?
i. Land
ii. Ping of Death
iii. Rose
iv. Bonk

Illegal or unauthorized zone transfers are a significant and direct threat to what type of network server?

Which of the following advantages are associated with using a firewall?

What is the best measure to keep zombies off the system?

Which of the following is a probable cause of a hacker creating a back door in a system?

When a threat uses vulnerability to attack a resource, some severe consequences can result in
i. Loss of Confidentiality
ii. Loss of Integrity
iii. Loss of Availability

You suspect one of your servers may have succumbed to a SYN flood attack. Which one of the following tools might you consider using to help confirm your suspicions?

You can start to build defenses for your information system by creating security ____________.

Under Phase of Attacks, DoS (Denial-of-Service) Attack is considered as which phase?

Which of the followingis the process of identifying and reducing risk to a level that is comfortable and then implementing controls to maintain that level?

Which of the following Hacker Class is also known as “Cracker”?