Question 1

What types of ports do successful Trojan programs commonly use?

Accepted Answer

A good software or hardware firewall would most likely identify traffic that's using unfamiliar ports,but Trojan programs that use common ports,such as TCP port 80 (HTTP)or UDP port 53 (DNS),are more difficult to detect.
The programmer who wrote Backdoor.Slackbot.B controlled a computer by using Internet Relay Chat (IRC),which is on port 6667.

Question 2

____________________ or rootkits are computer programs that give attackers a means of regaining access to the attacked computer later.

Accepted Answer

Backdoors

Question 3

Some security professionals use fear tactics to scare users into complying with security measures. Is this a good tactic?

Accepted Answer

Some security professionals use fear tactics to scare users into complying with security measures.Their approach is to tell users that if they don't take a particular action,their computer systems will be attacked by every malcontent who has access to the Internet.This method is sometimes used to generate business for security testers and is not only unethical,but also against the OSSTMM's Rules of Engagement.The rule states: "The use of fear,uncertainty,and doubt may not be used in the sales or marketing presentations,websites,supporting materials,reports,or discussion of security testing for the purpose of selling or providing security tests.This includes but is not limited to crime,facts,criminal or hacker profiling,and statistics."
Your approach to users or potential customers should be promoting awareness rather than instilling fear.You should point out to users how important it is not to install computer programs-especially those not approved by the company-on their desktops because of the possibility of introducing malware.Users should be aware of potential threats,not terrified by them.

Question 4

IDS stands for ____.

Accepted Answer

A)  Intrusion Detection System
B)  Information Dissemination System
C)  Information Destruction System
D)  Intruder Dispersal System

Question 5

PKI stands for ____.

Accepted Answer

A)  Public Key Infrastructure
B)  Private Key Infrastructure
C)  Protected Key Infrastructure
D)  Primary Key Infrastructure

Question 6

MATCHING
Match each term with the correct statement below.
-executable piece of programming code that should not appear in an e-mail attachment

Accepted Answer

A)  shell
B)  W32/Sobig.F
C)  Luckysploit
D)  Ping of Death
E)  KeyGhostF) MelissaG) Back OrificeH) SlammerI) Mytob

Question 7

MATCHING
Match each term with the correct statement below.
-purported to have shut down more than 13,000 ATMs

Accepted Answer

A)  shell
B)  W32/Sobig.F
C)  Luckysploit
D)  Ping of Death
E)  KeyGhostF) MelissaG) Back OrificeH) SlammerI) Mytob

Question 8

MATCHING
Match each term with the correct statement below.
-2005 hybrid worm with backdoor capabilities spread by mass e-mailing and exploiting Windows vulnerabilities

Accepted Answer

A)  shell
B)  W32/Sobig.F
C)  Luckysploit
D)  Ping of Death
E)  KeyGhostF) MelissaG) Back OrificeH) SlammerI) Mytob

Question 9

What is Back Orifice?

Accepted Answer

The answer of What is Back Orifice?...

Question 10

The virus signature file is maintained by ____ software.

Accepted Answer

A)  antivirus
B)  keylogger
C)  remote control
D)  firewall

Question 11

MATCHING
Match each term with the correct statement below.
-worm that uses UDP port 8998 to contact the attacker's server

Accepted Answer

A)  shell
B)  W32/Sobig.F
C)  Luckysploit
D)  Ping of Death
E)  KeyGhostF) MelissaG) Back OrificeH) SlammerI) Mytob

Question 12

Macro viruses are hard to create.

Accepted Answer

A) True 
 B)False

Question 13

The average home user or small-business owner doesn't typically use Telnet.

Accepted Answer

A) True 
 B)False

Question 14

The two most popular spyware and adware removal programs are ____ and Ad-Aware.

Accepted Answer

A)  Zone Alarm
B)  BlackIce
C)  McAfee Desktop Firewall
D)  SpyBot

Question 15

The most effective approach to protect a network from malware being introduced is to conduct structured training of all employees and management.

Accepted Answer

A) True 
 B)False

Question 16

Software keyloggers behave like ____ and are loaded on a computer.

Accepted Answer

A)  Trojan programs
B)  viruses
C)  shells
D)  firewalls

Question 17

Antivirus software compares ____________________ of known viruses against the files on the computer; if there's a match, the software warns you that the program or file is infected.

Accepted Answer

The answer of Antivirus software compares ____________________ of known viruses...

Question 18

What is the difference between spyware and adware?

Accepted Answer

The answer of What is the difference between spyware and...

Question 19

Describe an example of a macro virus.

Accepted Answer

The answer of Describe an example of a macro virus....

Question 20

____ is concerned with the security of computers or devices that are part of a network infrastructure.

Accepted Answer

A)  Attack security
B)  Cybercrime
C)  Computer security
D)  Network security

Exam 3: Network and Computer Attacks

What types of ports do successful Trojan programs commonly use?

____________________ or rootkits are computer programs that give attackers a means of regaining access to the attacked computer later.

Some security professionals use fear tactics to scare users into complying with security measures. Is this a good tactic?

IDS stands for ____.

PKI stands for ____.

MATCHING Match each term with the correct statement below. -executable piece of programming code that should not appear in an e-mail attachment

MATCHING Match each term with the correct statement below. -purported to have shut down more than 13,000 ATMs

MATCHING Match each term with the correct statement below. -2005 hybrid worm with backdoor capabilities spread by mass e-mailing and exploiting Windows vulnerabilities

What is Back Orifice?

The virus signature file is maintained by ____ software.

MATCHING Match each term with the correct statement below. -worm that uses UDP port 8998 to contact the attacker's server

Macro viruses are hard to create.

The average home user or small-business owner doesn't typically use Telnet.

The two most popular spyware and adware removal programs are ____ and Ad-Aware.

The most effective approach to protect a network from malware being introduced is to conduct structured training of all employees and management.

Software keyloggers behave like ____ and are loaded on a computer.

Antivirus software compares ____________________ of known viruses against the files on the computer; if there's a match, the software warns you that the program or file is infected.

What is the difference between spyware and adware?

Describe an example of a macro virus.

____ is concerned with the security of computers or devices that are part of a network infrastructure.