(Part 1/3) Modules 3 – 5: Network Security

1. The IT department is reporting that a company web server is receiving an abnormally high number of web page requests from different locations simultaneously. Which type of security attack is occurring?

• • adware

• • DDoS

• • phishing

• • social engineering

• • spyware

2. What causes a buffer overflow?

• • launching a security countermeasure to mitigate a Trojan horse

• • downloading and installing too many software updates at one time

• attempting to write more data to a memory location than that location can hold

• • sending too much information to two or more interfaces of the same device, thereby causing dropped packets

• • sending repeated connections such as Telnet to a particular device, thus denying other data sources

3. Which objective of secure communications is achieved by encrypting data?

• • authentication

• • availability

• confidentiality

• • integrity

4. What type of malware has the primary objective of spreading across the network?

• • worm

• • virus

• • Trojan horse

• • botnet

5. What commonly motivates cybercriminals to attack networks as compared to hactivists or state-sponsored hackers?

• financial gain

• • fame seeking

• • status among peers

• • political reasons

6. Which type of hacker is motivated to protest against political and social issues?

• hacktivist

• • cybercriminal

• • script kiddie

• • vulnerability broker

7. What is a ping sweep?

• • a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain.

• • a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.

• • a software application that enables the capture of all network packets that are sent across a LAN.

• a network scanning technique that indicates the live hosts in a range of IP addresses.

8. In what type of attack is a cybercriminal attempting to prevent legitimate users from accessing network services?

• • address spoofing

• • MITM

• • session hijacking

• DoS

9. Which requirement of secure communications is ensured by the implementation of MD5 or SHA hash generating algorithms?​

• • nonrepudiation

• • authentication

• integrity

• • confidentiality

10. If an asymmetric algorithm uses a public key to encrypt data, what is used to decrypt it?

• • a digital certificate

• • a different public key

• a private key

• DH