WorksheetsChapter 6. Networking Protocols and Threats
Total questions: 30
Worksheet time: 30mins
Name
Class
Date
1.
Which of the following is an example of a nonessential protocol?
a)
DNS
b)
ARP
c)
TCP
d)
TFTP
2.
A person attempts to access a server during a zone transfer to get access to a zone file. What type of server are they trying to manipulate?
a)
Proxy Server
b)
DNS Server
c)
File Server
d)
Web Server
3.
Which one of the following can monitor and protect a DNS server?
a)
Ping the DNS server.
b)
Block port 53 on the firewall.
c)
Purge PTR records daily.
d)
Check DNS records regularly.
4.
Which TCP port does LDAP use?
a)
389
b)
80
c)
443
d)
143
5.
From the list of ports select two that are used for e-mail. (Select the two best answers.)
a)
110
b)
3389
c)
143
d)
389
6.
Which port number does the Domain Name System use?
a)
53
b)
80
c)
110
d)
88
7.
John needs to install a web server that can offer SSL-based encryption. Which of the following ports is required for SSL transactions?
a)
Port 80 inbound
b)
Port 80 outbound
c)
Port 443 inbound
d)
Port 443 outbound
8.
If a person takes control of a session between a server and a client, it is known as what type of attack?
a)
DdoS
b)
Smurf
c)
Session hijacking
d)
Malicious software
9.
Making data appear as if it is coming from somewhere other than its original source is known as what?
a)
Hacking
b)
Phishing
c)
Cracking
d)
Spoofing
10.
Which of the following enables a hacker to float a domain registration for a maximum of five days?
a)
Kiting
b)
DNS poisoning
c)
Domain hijacking
d)
Spoofing
11.
What is the best definition for ARP?
a)
Resolves IP addresses to DNS names
b)
Resolves IP addresses to hostnames
c)
Resolves IP addresses to MAC addresses
d)
Resolves IP addresses to DNS addresses
12.
You have three e-mail servers. What is it called when one server forwards e-mail to another?
a)
SMTP relay
b)
Buffer overflows
c)
POP3
d)
Cookies
13.
A coworker goes to a website but notices that the browser brings her to adifferent website and that the URL has changed. What type of attack is this?
a)
DNS poisoning
b)
Denial of service
c)
Buffer overflow
d)
ARP poisoning
14.
Which of the following misuses the Transmission Control Protocol handshake process?
a)
Man-in-the-middle attack
b)
SYN attack
c)
WPA attack
d)
Replay attack
15.
For a remote tech to log in to a user’s computer in another state, what inbound port must be open on the user’s computer?
a)
21
b)
389
c)
3389
d)
8080
16.
A DDoS attack can be best defined as what?
a)
Privilege escalation
b)
Multiple computers attacking a single server
c)
A computer placed between a sender and receiver to capture data
d)
Overhearing parts of a conversation
17.
When users in your company attempt to access a particular website, the attempts are redirected to a spoofed website. What are two possible reasons for this?
a)
DoS & Domain name Kiting
b)
DNS poisoning & Modified hosts file
c)
Modified hosts file & Domain Name kiting
d)
Domain name kiting & DNS poisoning
18.
What kind of attack is it when the packets sent do not require a synchronization process and are not connection-oriented?
a)
Man-in-the-middle attack
b)
TCP/IP hijacking
c)
UDP attack
d)
ICMP flood
19.
How many of the TCP/IP ports can be attacked?
a)
1024 ports
b)
65535
c)
256
d)
16777216
20.
Which of the following attacks is a type of DoS attack that sends large amounts of UDP echoes to ports 7 and 19?
a)
Teardrop
b)
IP Spoofing
c)
Fraggle
d)
Replay
21.
Don must configure his firewall to support TACACS+. Which port(s) should he open on the firewall?
a)
Port 53
b)
Port 49
c)
Port 161
d)
Port 22
22.
Which of the following ports is used by Kerberos by default?
a)
21
b)
80
c)
88
d)
443
23.
Which of the following is the best option if you are trying to monitor network devices?
a)
SNMP
b)
Telnet
c)
FTPS
d)
Ipsec
24.
What is a secure way to remotely administer Linux systems?
a)
SCP
b)
SSH
c)
SNMP
d)
SFTP
25.
Your web server that conducts online transactions crashed, so you examine the HTTP logs and see that a search string was executed by a single user masquerading as a customer. The crash happened immediately afterward. What type of Network attack occurred?
a)
DdoS
b)
DoS
c)
Mac Spoofing
d)
MITM
26.
Which port number is used by SCP?
a)
22
b)
23
c)
25
d)
443
27.
A malicious insider is accused of stealing confidential data from your organization. What is the best way to identify the insider’s computer?
a)
IP address
b)
Mac address
c)
Computer name
d)
NetBios Name
28.
What is the best way to utilize FTP sessions securely?
a)
FTPS
b)
FTP passive
c)
FTP active
d)
TFTP
29.
Which of the following is the most secure protocol for transferring files?
a)
FTP
b)
SSH
c)
FTPS
d)
Telnet
30.
Which of the following protocols allow for the secure transfer of files? (Select the two best answers.)
a)
SNMP e TFTP
b)
SFTP e SCP
c)
SCP e SNMP
d)
SFTP e TFTP
100 %
