Day 4 review Sec+

A hacker attempts to access a server during a zone transfer to get access to the zone records. What type of server are they trying to manipulate/exploit?

• DNS server

• Proxy server

• File server

• Web server

Answer explanation

DNS servers are the only types of servers listed that do zone transfers. The purpose of accessing the zone file is to find out what hosts are on the network.

What is the function of ARP?

• Resolves IP addresses to DNS names

• Resolves IP addresses to hostnames

• Resolves IP addresses to MAC addresses

• Resolves IP addresses to DNS addresses

Answer explanation

The Address Resolution Protocol, or ARP, resolves IP addresses to MAC addresses. DNS resolves from IP addresses to hostnames, and vice versa. RARP is Reverse ARP; it resolves MAC addresses to IP addresses.

Which of the following is a common symptom of adware?

• Infected files

• Computer shuts down

• Applications freeze

• Pop-up windows

Answer explanation

Pop-up windows are common to spyware. The rest of the answers are more common symptoms of viruses.

What are the two ways in which you can stop employees from using USB flash drives? (Select the best answers.)

• Utilize RBAC.

• Disable USB devices in the BIOS.

• Enable MAC filtering.

• Enable IP filtering.

Answer explanation

By disabling all USB devices in the BIOS, users cannot use their flash drive.

Which malicious attack executes when certain conditions are met?

• Virus

• Worm

• Bluejacking

• Logic Bomb

Answer explanation

A logic bomb is a malicious attack that executes at a specific time. Viruses normally execute when a user inadvertently runs them. Worms can selfreplicate at will. And bluejacking deals with Bluetooth devices.

Tim believes that his computer has a worm. What is the best tool to remove the worm?

• Antivirus software

• Firewall

• IDS

• IPS

Answer explanation

Antivirus software is the best option when removing a worm. It may be necessary to boot into Safe Mode to remove this worm when using antivirus software.

Which of the following defines the difference between a Trojan horse and a worm? (Select the best answer.)

• The two are the same.

• Worms are sent via e-mail; Trojan horses are not.

• Worms self-replicate but Trojan horses do not.

• Trojan horses are malicious attacks; worms are not.

Answer explanation

The primary difference between a Trojan horse and a worm is that worms will self-replicate without any user intervention; Trojan horses do not self replicate.

Which of the following would fall into the category of “something you are”?

• Password

• Pin

• Fingerprints

• Smart cards

Answer explanation

Fingerprints are an example of something a person is. The process of measuring that characteristic is known as biometrics.

Which of the following is NOT a common criteria when authenticating users?

• Something you do

• Something you are

• Something you know

• Something you like

Answer explanation

Common criteria when authenticating users includes something you do, something you are, something you know, something you have, and some where you are. A person’s likes and dislikes are not common criteria; although, they may be asked as secondary questions when logging in to a system.

Using the principle of IAAA, which of the following is the final step a user needs to take before that user can access domain resources?

• Verification

• Validation

• Authorization

• Authentication

Answer explanation

Before a user can gain access to domain resources, the final step is to be authorized to those resources. Previously the user should have provided identification to be authenticated.