ch 6 Networking Protocols and Threats

Question 1

PORT ranges

Answer 1

Port Range Category Type Description
0–1023 Well-Known Ports This range defines commonly used
protocols; for example, HTTP uses port
80. They are designated by the IANA
(Internet Assigned Numbers Authority),
which is operated by the ICANN (Internet
Corporation for Assigned Names and
Numbers).
1024–49,151 Registered Ports Ports used by vendors for proprietary
applications. These must be registered
with the IANA. For example, Microsoft
registered port 3389 for use with the
Remote Desktop Protocol (RDP), aka
Microsoft Terminal Server.
49,152–65,535 Dynamic and Private Ports These ports can be used by applications but
cannot be registered by vendors.

Question 2

Denial-of-service (DoS)

Answer 2

attacks that attempt to make computer resources unavailable.

Question 3

Smurf attack:

Answer 3

attacking computer broadcasts
the ICMP echo requests to every computer on its network or subnetwork.
In addition, in the header of the ICMP echo requests will be a
spoofed IP address. That IP address is the target of the Smurf attack.

Question 4

Fraggle:

Answer 4

UPD port 7 (Echo) and port 19

Question 5

tear drop attack

Answer 5

Sends mangled IP fragments with overlapping and oversized
payloads to the target machine. This can crash and reboot various operating systems
due to a bug in their TCP/IP fragmentation reassembly code

Question 6

fork bomb

Answer 6

Works by quickly creating a large number of processes to saturate
the available processing space in the computer’s operating system

Question 7

distributed denial-of-service (DDoS)

Answer 7

attack is when a group of compromised

systems attacks a single target, causing a DoS to occur at that host.

Question 8

watering hole attack

Answer 8

This targeted attack is when an attacker profiles the
websites that the intended victim accesses. The attacker then scans those websites
for possible vulnerabilities.

Question 9

null attack

Answer 9

type of exploit that makes unauthenticated Net-

BIOS connections to a target computer.

Question 10

Pharming

Answer 10

is when an attacker redirects one website’s traffic to another website that
is bogus and possibly malicious