NEW
Font size
WorksheetsNetwork Security Quiz
Total questions: 40
Worksheet time: 20mins
Which Wireshark filter is used to capture only HTTP traffic
tcp.port == 80
http.filter
port 80
tcp.http
Which OSI layer is primarily targeted by SYN flood attacks
Network layer
Transport layer
Session layer
Application layer
What does the Nmap option `-A` enable
Host discovery only
Aggressive scan including OS, version, scripts
UDP scan
Firewall bypass
Which Nmap scan type uses ACK packets
SYN scan
FIN scan
ACK scan
NULL scan
Which command is used to trace packet path to destination
ping
traceroute
netstat
arp
Traceroute primarily works using
TCP SYN
UDP or ICMP with TTL values
ARP requests
DNS queries
Which protocol uses port 389
DNS
HTTP
LDAP
SMTP
LDAP enumeration is mainly used to gather
Firewall rules
User and group information
Routing tables
Open ports
Which Windows service is abused in SMB relay attacks
DNS
NetBIOS/SMB
FTP
HTTP
SMB relay attack mainly targets
File permissions
Authentication trust
Encryption algorithms
Disk storage
Which tool is commonly used for vulnerability scanning in syllabus
Metasploit
Nessus
Burp Suite
Wireshark
Nessus primarily identifies
Exploits
Vulnerabilities and misconfigurations
Network packets
Malware binaries
What is the main weakness of password-only authentication
Easy to deploy
Susceptible to guessing and brute force
Requires hardware
Expensive
Which attack attempts all possible password combinations
Dictionary attack
Brute force attack
Hybrid attack
Replay attack
Hybrid password attack combines
Sniffing and guessing
Dictionary and brute force
Hashing and encryption
Online and offline attacks
Offline password attacks require
Live network access
Captured password hashes
Firewall bypass
Root privileges
Which file stores Linux user password hashes
/etc/passwd
/etc/shadow
/var/log/auth
/home/user
Keyloggers are categorized as
Network attacks
Passive attacks
DoS attacks
Scanning attacks
Which command is used to display active network connections
ifconfig
netstat
traceroute
arp
Netstat is mainly used for
Packet capture
Connection and port monitoring
Vulnerability scanning
Exploitation
What does DNS spoofing aim to achieve
Denial of service
Redirect traffic to fake destinations
Capture packets
Flood network
Which protocol is targeted in DNS spoofing
TCP
UDP
ICMP
ARP
What is the purpose of MAC spoofing
Increase bandwidth
Impersonate another device
Encrypt traffic
Disable firewall
Which wireless attack captures handshakes for cracking
Evil Twin
Deauthentication
MAC flooding
Jamming
Which encryption algorithm is used by WPA2
RC4
DES
AES
MD5
Which component enforces access control in Android
Application UI
Linux kernel
Google Play
Dalvik compiler
Rooting an Android device primarily allows
Faster apps
Elevated privileges
Better encryption
Secure boot
Which mobile attack uses SMS as delivery vector
Phishing
Smishing
Vishing
Spoofing
Static malware analysis involves
Executing malware
Studying code without execution
Network sniffing
Memory dumping
Dynamic malware analysis involves
Source code review
Executing malware in controlled environment
Hash comparison
Signature creation
Which tool framework is used for exploitation and payload delivery
Wireshark
Metasploit
Nessus
Snort
What is the main function of Snort
Packet capture
IDS/IPS
Firewall
VPN
Which IDS detection method relies on behavior deviation
Signature-based
Anomaly-based
Rule-based
Pattern-based
What is a DMZ primarily used for
User authentication
Isolating public-facing servers
Encryption
Backup storage
Which physical security control prevents unauthorized entry
IDS
Firewall
Biometric access control
Antivirus
Penetration testing methodology generally follows
Scan → Report → Exploit
Plan → Recon → Scan → Exploit → Report
Exploit → Scan → Report
Recon → Exploit → Scan
What does OS fingerprinting identify
Usernames
Operating system type
Passwords
Network topology
Which tool is used for OS fingerprinting
Burp Suite
Nmap
Netcat
Wireshark
What is the purpose of covering tracks
Gain access
Avoid detection
Escalate privileges
Enumerate users
Clearing log files is associated with which hacking phase
Reconnaissance
Scanning
Maintaining access
Covering tracks
