Exam 4: Operating Systems and Applications

What is the best definition of a covert channel?

Onan wants to install a biometric reader to control access to a server room. He knows there will only be about 5 people that will ever need access. In regards to storage of the user account credentials, which of the following systems will be the easiest and most efficient to install?

One of the disadvantages of symmetric key encryption is key management. For instance, if there are 10 people that wish to exchange data with each other, but maintain confidentiality at the same time, how many keys must be issued?

An attacker sends email to a domain toward an invalid address intentionally. A bounce back is sent and the attacker uses the header to determine internal mail relays. How is a header read to determine the path the bounce took?

A common technique when compromising Linux hosts is to make sure that if it is used as a sniffer, the command __________ is replaced with a modified version that will not show the ________ flag in its Output. (fill in the blanks)

The act of stealing information from a victims magnetic strip is called:

Which of the following is the static string that is encrypted with the DES key in LM?

In order to speed up the process of breaking a password that is pretty strong, Barney decides to use DNA. What is the best description of this technique?

It is possible to run critical services on a Linux machine in such as way that the root directory for that service seems to be different than the root of the actually system. The purpose is to prevent access to any files outside of that directory structure. What is this technique called?

Bill seems to be connected to every marketing project that has had information leaked to the same competitor. Someone notices on a myspace page some photographs of Bill socializing with some executives of that competitor. Bill is sent on vacation for a week, and a supervisor access Bill's email and notices repeated emails with silly documents attached like jokes, random lists, or cooking recipe's. He asks you if this seems suspicious and wonders if these are coded messages. You tell him it is even easier than that, and suspect which of the following techniques?

As a technique, rootkits hide processes and the resources that start them. What is the primary objective of a rootkit?

Which of the following is not a valid mobile phone technology?

Marco wants to encode data into a music file. Since it is text, he isn't sure this can be done. After searching the internet he comes across a promising tool. What tool did he find?

Ernest finds a laptop that seems to have an encrypted drive. He knows the owner of the laptop works for a company that requires 15 character strong passwords. With a good quality password cracker how long will it take Ernest to brute force this password?

Some versions of Windows Servers use a feature called "syskey" to enhance the protection of the database where user account hashes are stored. What level of encryption does syskey use in Windows 2000?

Which of the following is the best description of a "weak key"?

Sara has managed to get access to the passwd file in the Linux system. Which of the following entries shows a user that is in the root permissions group? Rkuby:x:1001:1001:Ron Kuby:/home/rkuby:/bin/bash dhcp:x:1002:1002::/home/dns:/bin/bash monticore:x:1003:0::/home/monticore:/bin/bash awright:x:1004:500:Amber Wright:/home/awright:/bin/bash

What is a hash?

A mechanism that RFID devices use to be rendered inoperative is called:

An attacker writes a script similar to the one given. What is he trying to accomplish? FOR /F "token=1, 2*" %i in passlist.txt do net use \\target\IPC$ %i /u: %j