Deck 23: Security Software

Question 1

A list of ports that are in use can be obtained through the ____ utility.

A)NBTSTAT
B)IPCONFIG
C)NETSTAT
D)TCPSTAT

Answer 1

C

Question 2

Cracking a password can take many different routes.

Answer 2

True

Question 3

In order to inform the users of their rights and responsibilities while using computers on an institutions network a(n)____ is made available.

A)Internet Rights Policy
B)Acceptable Use Policy
C)Internet Abuse Policy
D)Standard Rights Policy

Answer 3

B

Question 4

The ____ technique tries all combinations of letters,numbers,and symbols until eventually landing on the correct password.

A)dictionary
B)brute force
C)computed hash
D)linear hash

Question 5

Security policies and procedures should be static.

Question 6

The most common approaches to password ____________________ are guessing,brute force,and dictionary attacks.

Question 7

The command ____ translates certain names into their associated IP addresses or port numbers.

A)netstat -n
B)netstat -r -n
C)netstat -a
D)netstat -a -n

Question 8

A sophisticated denial of service attack that is spread out to many attacking computer systems is called a ____.

A)DDOS
B)DOS
C)DDOD
D)DOD

Question 9

Capturing packets is also referred to as ____.

A)packet stiffing
B)packet sniffing
C)packet hiding
D)packet blocking

Question 10

A(n)____________________ describes the steps needed to execute the policy.

Question 11

____ is a vulnerability scanner that will scan the host system,or any and all computers on the local network or anywhere on the Internet.

A)GFI LANguard
B)NetCat
C)L0phtCrack
D)Brutus

Question 12

Packet sniffing is possible through the use of a special mode of operation in the network adapter called ____________________ mode.

Question 13

A ____ is an alert given when normal,non-malicious traffic happens to match one or more rules for malicious traffic.

A)false negative
B)true negative
C)true positive
D)false positive

Question 14

Promiscuous mode guarantees that the network adapter will capture all the network traffic on the LAN.

Question 15

A(n)____________________ examines traffic and notes suspicious behavior in a log and may also notify a network manager through email,instant message,or some other communication.

Question 16

A(n)____________________ will take action on its own to handle the problem without user intervention,such as interrupting the offending traffic.

Question 17

There are only two ways to help prevent a password from being cracked.

Question 18

One way around the switch-based limitation is to use a managed switch that allows a ____ to be designated.

A)block port
B)pan port
C)management port
D)mirror port

Question 19

When the network adapter is placed into promiscuous mode,it allows all received packets to pass up into the TCP/IP stack.

Question 20

A ____ provides the rules and expectations and the consequences of not following the rules.

A)password policy
B)software policy
C)security policy
D)network policy

Question 21

MATCHING
Match each item with a statement below.
a.Snort
d.Brute force
b.Weak password
e.Intrusion detection
c.Dictionary attack
Uses a list of common passwords to try to crack an unknown password

Question 22

MATCHING
Match each item with a statement below.
a.Snort
d.Brute force
b.Weak password
e.Intrusion detection
c.Dictionary attack
Examines network traffic for known attack signatures

Question 23

Describe host-based intrusion detection.

Question 24

How do you prevent booting from a USB thumb drive?

Question 25

MATCHING
Match each item with a statement below.
a.Snort
d.Brute force
b.Weak password
e.Intrusion detection
c.Dictionary attack
Composed of information commonly known about the individual

Question 26

MATCHING
Match each item with a statement below.
a.Snort
d.Brute force
b.Weak password
e.Intrusion detection
c.Dictionary attack
The technique of examining the network traffic entering a network or a computer and determining if the traffic is malicious in nature

Question 27

Describe the educational,diagnostics,network baseline measurements,and security reasons to capture network traffic.

Question 28

Discuss the process of guessing a password.

Question 29

List and describe what a typical AUP contains.

Question 30

MATCHING
Match each item with a statement below.
a.Snort
d.Brute force
b.Weak password
e.Intrusion detection
c.Dictionary attack
Typically the most time consuming way to crack a password