Ch 13 Key Terms

Question 1

Hardware/Software that captures packets to decode and analyze their contents

vulnerability scanner

passive scanner

network mapping scanner

protocol analyzer

Answer 1

protocol analyzer

Question 2

used by network admin’s for network monitoring

protocol analyzer

vulnerability scanner

active scanner

passive scanner

Answer 2

protocol analyzer

Question 3

a range of products that look for different vulnerabilities in networks or systems

network mapping scanner

passive scanner

vulnerability scanner

active scanner

Answer 3

vulnerability scanner

Question 4

sends probes to network devices and examines the responses received back to evaluate whether a specific device needs remediation

network mapping scanner

passive scanner

vulnerability scanner

active scanner

Answer 4

active scanner

Question 5

can identify the current software OS’s and applications being used on the network and indicate which devices might have a vulnerability (an example would be an OS that has not been patched)

passive scanner

network mapping scanner

active scanner

vulnerability scanner

Answer 5

passive scanner

Question 6

combines network device discovery tools and network scanners to find open ports or discover shared folders

vulnerability scanner

wireless scanner

network mapping scanner

active scanner

Answer 6

network mapping scanner

Question 7

can discover malicious wireless network activity such as failed login attempts, record these to an event log, and alert an administrator

active scanner

passive scanner

wireless scanner

configuration compliance scanner

Answer 7

wireless scanner

Question 8

used to evaluate and report any compliance issues related to specific inducstry guidelines

active scanner

wireless scanner

configuration compliance scanner

passive scanner

Answer 8

configuration compliance scanner

Question 9

a comprehensive review of how an enterprise follows regulatory guidelines

configuration compliance

vulnerability scanner

passive scanner

compliance audit

Answer 9

compliance audit

Question 10

a computer typically located in an area with limited security and loaded with software and data files that appear to be authentic but are actually imitations of real data files

honeypot

password cracker

honeynet

banner

Answer 10

honeypot

Question 11

purpose is to invite attacks so that the attacker’s methods can be studied and that information can be used to increase network security

wireless cracker

honeypot

honeynet

banner

Answer 11

honeynet

Question 12

a message that a service transmits when another program connects to it

password cracker

wireless cracker

banner grabbing

banner

Answer 12

banner

Question 13

when a program intentionally gathers information such as the type of server software, the last modified date, its version number and other similar information

honeynet

banner

honeypot

banner grabbing

Answer 13

banner grabbing

Question 14

designed to test the security of a WLAN system by attempting to break its protections of WPA or WPA2

honeynet

password cracker

explitation framework

wireless cracker

Answer 14

wireless cracker

Question 15

intended to break the digest of a password to determine its strength

intrusive vulnerability scan

explitation framework

wireless cracker

password cracker

Answer 15

password cracker

Question 16

a security vulnerability scanner that can determine which devices are connected to the network and the services they are running

Netcat

Nmap

penetration testing

intrusive vulnerability scan

Answer 16

Nmap

Question 17

a command-line alternative to Nmap with additional features scanning for vulnerabilities

intrusive scan

Ifconfig

Netcat

non-intrusive scan

Answer 17

Netcat

Question 18

used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools

explitation framework

intrusive vulnerability scan

steganography assessment tools

security assessment tools

Answer 18

explitation framework

Question 19

can be used to determine if the data is hidden well enough to thwart unauthorized users from finding the data

blackbox

steganography assessment tools

intrusive vulnerability scan

penetration testing

Answer 19

steganography assessment tools

Question 20

attempts to actually penetrate the system in order to perform a simulated attack

intrusive vulnerability scan

white box

non-intrusive vulnerability scan

penetration testing

Answer 20

intrusive vulnerability scan

Question 21

designed to exploit any weaknesses in systems that are vulnerable

blackbox

non-intrusive vulnerability scan

penetration testing

white box

Answer 21

penetration testing

Question 22

relies upon the skill, knowledge and cunning of the tester

penetration testing

gray box

black box

active reconnaissance

Answer 22

penetration testing

Question 23

the tester has not prior knowledge of the network infrastructure

green box

white box

black box

gray box

Answer 23

black box

Question 24

the tester has in-depth knowledge of the network and systems being tested

black box

white box

gray box

red box

Answer 24

white box

Question 25

actively probing the system, much like an attacker would do to find information initial exploitation active reconnaissance passive reconnaissance pivot

Answer 25

active reconnaissance

Question 26

the tester uses tools that do not raise any alarms passive reconnaissance intial exploitation non-intrusive vulnerability scan active reconnaissance

Answer 26

passive reconnaissance

Question 27

once the tester has conducted a recon, he uses that information to determine if it provides entry to a secure network intial exploitation pivot passive reconnaissance data retention

Answer 27

intial exploitation

Question 28

once inside the network, the tester moves around inside it to other resources; goal is to achieve privilege escalation passive reconnaissance data retention intial exploitation pivot

Answer 28

pivot

Question 29

how long data must be kept and how it is to be secured initial baseline configuration remediation pivot data retention

Answer 29

data retention

Question 30

an approach, philosophy or strategy regarding data privacy and security initial baseline configuration security posture baseline posture continuous security monitoring

Answer 30

security posture

Question 31

the standard security checklist against which systems are evaluated for security posture security posture initial baseline configuration continuous security monitoring remediation

Answer 31

initial baseline configuration

Question 32

continual observation of systems and networks through vulnerability scanning and pen testing continuous security monitoring security posture initial baseline configuration remediation

Answer 32

continuous security monitoring

Question 33

a plan that will address vulnerabilities and how to fix them before they are exploited by attackers security posture remediation initial baseline configuration continuous security monitoring

Answer 33

remediation

Question 34

overwriting the disk space with zeros or random data wiping swiping erasing degaussing

Answer 34

wiping

Question 35

to permanently destroy the entire drive by reducing or eliminating the magnetic field erasing swiping degaussing wiping

Answer 35

degaussing