Deck 6: Techniques Used by Hackers

Question 1

Testing an organization's security is known as ________ testing.

A)Penetration
B)Location
C)Virus
D)None of the above

Answer 1

A

Question 2

Hacking into phone systems is also known as phreaking.

Answer 2

True

Question 3

Black hat hackers are also known as script kiddies.

Answer 3

False

Question 4

Windows passwords are stored in a hash file in one of the system diretories.

Question 5

Checking an organization's websites is a form of active scanning.

Question 6

Nmap enables you to set ________ such as -sP,-sS,and -oA.

A)Parameters
B)Flags
C)Switches
D)None of the above

Question 7

The most reliable Nmap scan is ____________ scan.

A)ping
B)Connect
C)SYN
D)FIN

Question 8

NetBIOS is an example of a port scanner.

Question 9

Hacking into phone systems is called ___________.

A)Telnetting
B)Dial hacking
C)Phreaking
D)None of the above

Question 10

Some who performs a cyberattack without actually understanding it is a _______.

A)Gray hat hacker
B)White hat hacker
C)Script kiddie
D)None of the above

Question 11

ACK scans and NULL scans work only on UNIX systems.

Question 12

The most popular port scanner in the hacking and security community is ________.

A)Portscan
B)Nmap
C)Servport
D)NetBIOS

Question 13

Ping scanning may be stopped by blocking ICMP packets.

Question 14

Sid2User,UserInfo,and UserDump are examples of password cracking tools.

Question 15

___________ is the process to find out what is on a target system.

A)Enumeration
B)Phishing
C)Mapping
D)Scanning

Question 16

NMAP is a popular hacking tool.

Question 17

With a(n)_________ scan,if the port is closed,the response is an RST.If the port is open,the response is a SYN/ACK.

A)FIN
B)XMAS
C)SYN
D)ACK

Question 18

There are 1,024 well-known ________ that are usually associated with specific services.

A)Ports
B)Processes
C)Applications
D)Programs

Question 19

A SQL statement may begin with the word SELECT.

Question 20

Scanning bulletin boards,making phony phone calls,and visiting websites by a hacker are examples of _________.

A)Active scanning
B)Passive scanning
C)Phreaking
D)Scouring

Question 21

To create a domain admin account,the user must be a member of the __________ group.

A)Domain admins
B)Domain users
C)Backup operators
D)Everyone

Question 22

_________ is a popular tool for cracking Windows passwords.

A)Sid2User
B)Cheops
C)Netcat
D)OphCrack

Question 23

The net command can be included in a ________ that will create a domain admin account.

A)Port
B)Scan
C)Script
D)None of the above

Question 24

Passing structured query language commands to a web application and getting the website to execute it is called SQL script _________.

A)Injection
B)Processing
C)Attacking
D)Execution

Question 25

When an attacker injects client-side scripts into web pages viewed by other users so that those users interact with it,it is an example of _________.

A)Cross-site scripting
B)Phreaking
C)Phishing
D)None of the above