12-3

Question 1

___________ have built in firewalls capable of blocking certain ports

Answer 1

windows and Linux

Question 2

Another phase of assessing systems security is protection. This means you need to ensure that all reasonable ____________ are being employed. this includes tools such as IDS.

Answer 2

protective software and devices

Question 3

IDS are the only way to know of impending _________

Answer 3

attacks

Question 4

___________ not only mask your internal IP address but most proxy servers allow you to discover what websites users visit and put on filters.

Answer 4

proxy serves

Question 5

when assessing the protection of the network, check to see whether the following items are present

Answer 5

firewall
AV protection
Anti Spyware
IDS
Proxy Server or NAT
Data transmission encryption

Question 6

Physical security needs to be considered. Servers may be locked and secured at the end of the day but most computers are left ___________ at work.

Answer 6

unsecured

Question 7

Backups should be stored in a fireproof safe, and old backups should be ______________

Answer 7

destroyed.

Question 8

this room should be kept locked, in the most fireresistent room in the bldg. access should be restricted. access control and tacking should be in place.

Answer 8

server rooms

Question 9

these should have an engraved ID mark. routinely inventory them. normally not physically possible to secure in place.

Answer 9

workstations

Question 10

this is a process of scanning the well knows ports __________ or all ports _______ to see which ports are open.

Answer 10

1024 // 65535

Question 11

this is a process whereby the attacker tries to find out what is on the target network.

Answer 11

enumerating

Question 12

this is the use of some tool to seek out known vulnerabilities or the attacker might try to manually assess vulnerability.

Answer 12

vulnerability assessment

Question 13

this scanner is not necessarily the most widely used, but it’s easy to use. its methodical but slow. you select an host IP you want to scan. this will search for open ports

Answer 13

Netcop scanner

Question 14

a port scanner that provides additional information. it will give you open ports as well as other vital information

Answer 14

netbrute

Question 15

widely used scanning utilities. available as a free download. simple and informative.

Answer 15

Cerberus