Security Test for QTANM

What is one of the most common and simplest attacks on a system?

• Denial of service

• Buffer overflow

• Session hacking

• Password cracking

Answer explanation

Denial of Service (DoS) attacks are among the most common and simplest to perform.

Which of the following is not a valid way to define a computer's workload?

• Number of simultaneous users

• Storage capacity

• Maximum voltage

• Speed of network connection

Answer explanation

Workload definitions typically involve factors like number of users, storage capacity, or network speed, not voltage.

What do you call a DoS launched from several machines simultaneously?

• Wide-area attack

• Smurf attack

• SYN flood

• DDoS attack

Answer explanation

A Distributed Denial of Service (DDoS) attack comes from multiple machines.

Leaving a connection half open is referred to as what?

• Smurf attack

• Partial attack

• SYN flood attack

• DDoS attack

Answer explanation

A SYN flood attack involves sending a series of SYN requests to a target server without completing the handshake, leaving connections half open.

What is the basic mechanism behind a DoS attack?

• Computers don't handle TCP packets well

• Computers can only handle a finite load.

• Computers cannot handle large volumes of TCP traffic.

• Computers cannot handle large loads.

Answer explanation

This option aligns with the typical mechanism where systems are overwhelmed.

What is the most significant weakness in a DoS attack from the attacker's viewpoint?

• The attack is often unsuccessful.

• The attack is difficult to execute

• The attack is easy to stop

• The attack must be sustained

Answer explanation

Maintaining a DoS attack requires sustained effort, which is a significant weakness.

What is the most common class of DoS attacks?

• Distributed denial of service.

• Smurf attacks

• SYN floods

• Ping of death

Answer explanation

Among the options listed, DDoS is the most common form of DoS attack today.

What are three methods for protecting against SYN flood attacks?

• SYN cookies, RST cookies, and stack tweaking

• SYN cookies, DoS cookies, and stack tweaking

• DoS cookies, RST cookies, and stack deletion

• DoS cookies, SYN cookies, and stack deletion

Answer explanation

These are methods to mitigate SYN flood attacks by managing and monitoring incomplete sessions.

Which attack mentioned in this chapter causes a network to perform a DoS on one of its own servers?

• SYN flood

• Ping of death

• Smurf attack

• DDoS

Answer explanation

A Smurf attack involves amplifying the volume of requests by using intermediary devices to flood the target with replies.

A defense that depends on a hash encryption being sent back to the requesting client is called what?

• Stack tweaking

• RST cookies

• SYN cookies

• Hash tweaking

Answer explanation

SYN cookies are a method used to prevent SYN floods by sending back a cookie based on a hash of the connection details.