Exam 9: Network Vulnerability Assessment

The CVSS ____ Score is set by the organization using the software.

____ verify that an organization's security policies are prudent (cover the right issues) and are being implemented correctly.

Match each item with a statement below. a.Sam Spade f.NetStumbler b.Wget g.AirSnare c.Nmap "Idle scanning" option h.Aircrack-ng d.Firewalk i.Wireshark e.XProbe2 -A free, client-based network protocol analyzer.

Wired networks are just as vulnerable to sniffing as wireless networks.

____________________, also known as "fuzzing," is a straight-forward technique that looks for vulnerabilities in a program or protocol by feeding random input into the program or the network running the protocol.

The ____ command, available on most popular Web browsers, allows users to see the source code behind the page.

The most realistic type of penetration test is a ____ box test.

A(n) ____ vulnerability scanner listens in on the network and identifies vulnerable versions of both server and client software.

Organizations are safe from sniffer attacks when their computing environment is primarily a switched network environment.

The printf (user_input); command in C has the potential to cause a(n) ____ vulnerability.

Explain the two points administrators should remember if they are wary of using the same tools that attackers use.

Match each item with a statement below. a.Sam Spade f.NetStumbler b.Wget g.AirSnare c.Nmap "Idle scanning" option h.Aircrack-ng d.Firewalk i.Wireshark e.XProbe2 -Monitors the airwaves for any new devices or access points.

Why can the failure to validate how user input is handled result in a cross-site scripting attack?

Describe how the criticality of the affected assets must be taken into account when conducting a risk assessment for a vulnerability.

Protocol analyzers are commonly referred to as ____.

Match each item with a statement below. a.Sam Spade f.NetStumbler b.Wget g.AirSnare c.Nmap "Idle scanning" option h.Aircrack-ng d.Firewalk i.Wireshark e.XProbe2 -Uses incrementing Time-to-Live (TTL) packets to determine the path into a network as well as the default firewall policy.

Match each item with a statement below. a.Sam Spade f.NetStumbler b.Wget g.AirSnare c.Nmap "Idle scanning" option h.Aircrack-ng d.Firewalk i.Wireshark e.XProbe2 -A freeware tool that applies packet sniffing to wireless networks.

A ____ (sometimes called a network protocol analyzer) is a network tool that collects copies of packets from the network and analyzes them or stores the packets for later analysis.

Describe Google hacking and provide an example.

Implementing applications that verify the true communication destination during execution help prevent vulnerabilities associated with ____.