General Quiz

What kind of attack aims to prevent legitimate users from accessing network services?

• Man-in-the-middle (MITM) attack

• Denial of Service (DoS)

• Session hijacking

• Address spoofing

Which of the following attacks involves a threat actor using a rogue DHCP server to assign false IP configurations?

• DNS poisoning

• DHCP spoofing

• ARP poisoning

• MAC address flooding

Which of the following can be an indicator of a DNS tunneling attack?

• Large numbers of ICMP echo requests

• Suspiciously long DNS queries

• Repeated login failures

• High number of SYN packets

What type of threat actor typically reports discovered vulnerabilities to vendors in exchange for rewards or prizes?

• Hacktivist

• Vulnerability broker

• Script kiddie

• State-sponsored attacker

Which attack is characterized by sending many half-open TCP connections to overwhelm a target system?

• SQL injection

• SYN flooding

• Phishing

• Cross-site scripting (XSS)

DNS tunneling is a technique used to encapsulate non-DNS traffic inside DNS queries.

• True

• False

A worm requires user interaction to spread across systems.

• True

• False

Cisco SPAN allows traffic to be mirrored from a switch port to another port for analysis.

• True

• False

A Reconnaissance attack

• Exploits the TCP three-way handshake to overwhelm a server.

• Collects information about network devices and open ports.

• Redirects user traffic to a fake server by altering DNS records.

SYN flooding

• Exploits the TCP three-way handshake to overwhelm a server.

• Collects information about network devices and open ports.

• Redirects user traffic to a fake server by altering DNS records.