Exam 3: Application and Networking-Based Attacks

Match the following terms to the appropriate definitions. -​Another name for locally shared object (LSO)

What are zero-day attacks?​

Match the following terms to the appropriate definitions. -​Part of the TCP/IP protocol for determining the MAC address based on the IP address.

How can an attacker substitute a DNS address so that a computer is automatically redirected to another device?

Match the following terms to the appropriate definitions. -An attack that corrupts the ARP cache​

Match the following terms to the appropriate definitions. -Injecting and executing commands to execute on a server​

How does ARP poisoning take advantage of the use of ARP?​

Match the following terms to the appropriate definitions. -​A form of verification used when accessing a secure web application

Select below the string of characters that can be used to traverse up one directory level from the root directory:

Match the following terms to the appropriate definitions. -​An attack that uses the Internet Control Message Protocol (ICMP) to flood a victim with packets.

What language below is for the transport and storage of data, with the focus on what the data is?

A(n) ____________________ cookie is stored in Random Access Memory (RAM), instead of on the hard drive, and only lasts for the duration of visiting the Web site.

XSS attacks occur when an attacker takes advantage of web applications that accept user input without validating it and then present it back to the user.​

A TCP/IP communication begins with a control message, known as a ________________, to initialize the connection.​ Match the following terms to the appropriate definitions.​ a.​Address Resolution Protocol (ARP) b.ARP Poisoning​ c.​Buffer overflow attack d.Command injection​ e.​Cross-site scripting (XSS)

Ethernet LAN networks utilize the physical _________________ address to send packets.​

Explain the HTTP header referrer attack.

What portion of the HTTP packet consists of fields that contain information about the characteristics of the data being transmitted?

When TCP/IP was developed, the host table concept was expanded into a hierarchical name system for matching computer names and numbers using this service:

A user has become compromised as a result of visiting a specific web page, without clicking on any kind of content. What type of attack has occurred?

Although traditional network security devices can block traditional network attacks, they cannot always block Web application attacks.