Exam 3: Network and Computer Attacks

Correct Answer:

Verified

A good software or hardware firewall would most likely identify traffic that's using unfamiliar ports,but Trojan programs that use common ports,such as TCP port 80 (HTTP)or UDP port 53 (DNS),are more difficult to detect.
The programmer who wrote Backdoor.Slackbot.B controlled a computer by using Internet Relay Chat (IRC),which is on port 6667.

Correct Answer:

Verified

Some security professionals use fear tactics to scare users into complying with security measures.Their approach is to tell users that if they don't take a particular action,their computer systems will be attacked by every malcontent who has access to the Internet.This method is sometimes used to generate business for security testers and is not only unethical,but also against the OSSTMM's Rules of Engagement.The rule states: "The use of fear,uncertainty,and doubt may not be used in the sales or marketing presentations,websites,supporting materials,reports,or discussion of security testing for the purpose of selling or providing security tests.This includes but is not limited to crime,facts,criminal or hacker profiling,and statistics."
Your approach to users or potential customers should be promoting awareness rather than instilling fear.You should point out to users how important it is not to install computer programs-especially those not approved by the company-on their desktops because of the possibility of introducing malware.Users should be aware of potential threats,not terrified by them.