CHAPTER 14 NETWORK THREATS AND MIGRATION

Question 1

What is IP spoofing?P481

Answer 1

It is the process of changing a source IP address so that one computer appears to be a different computer.

Question 2

What is brute force attack?P482

Answer 2

It is a form of password cracking.

Question 3

Setting an account lockout policy is the simplest migration technique to defeat what?P482

Answer 3

Brute force attacks

Question 4

Some one who attempts to take over a user’s session with a secure server after the user has been authenticated does that?P482

Answer 4

Session hijacking

Question 5

An attacker sets the session ID ahead of time by sending a link to the victim with Id presets is doing what?P482

Answer 5

Session fixation

Question 6

An attacker that uses a sniffer to steal a session cookie from the user is doing what?P482

Answer 6

Session sidejacking

Question 7

An attacker uses the user’s computer to run code on the site that may allow him to obtain the cookie does what?p482

Answer 7

Cross site scripting

Question 8

What protocol can you use to prevent a VLAN from using a hopping attack?P482

Answer 8

Trunking protocol

Question 9

VLANs are a layer 3 subdivisions of the ports in a single switch?P482T/F

Answer 9

False layer 2

Question 10

Authentication issues can lead to improper access like what?p483

Answer 10

Stolen data and a whole host of other problems

Question 11

What are examples of AAA servers that verify the identity of ,grant access to, and track actions of users?P483

Answer 11

TACACS+(terminal access controller access control systm plus) , RADIUS ( remote access dial up user service.

Question 12

Name some of the best known virus threats to your computer’s security/p484

Answer 12

Chernobyl, michelangelo, melissa,I love you, and love you

Question 13

There are several different kinds of viruses but the most popular ones are?P484

Answer 13

File viruses macro viruses, and boot sector viruses.

Question 14

What is the term that describes any software that harms a computer ,deletes, or takes actions the user did not authorize?P485

Answer 14

Malicious software or malware

Question 15

What is basically a script of commonly enacted commands used to automatically carry out tasks with out requiring a user to initiate them?P486

Answer 15

Macro

Question 16

What virus works their way int the master boot record that’s essentially the ground zero sector on your hard disk where applications aren’t supposed to live?P486

Answer 16

Boot sector

Question 17

What is one that infects both the boot sector and files on your computer ,making such virus particularly dangerous and exasperatingly difficult to remove?P486

Answer 17

Multipartite virus

Question 18

Antivirus software uses ——- —- that identify known malware ,and must be updated frequently?P487

Answer 18

Definition files

Question 19

Does secure shell transmit credentials in clear text?P489Y/N

Answer 19

No

Question 20

Spying in information systems can also be accomplished by what?P489

Answer 20

Capturing and analyzing leaking emanations of things like ryadio or electrical signals ,sounds, and vibrations.

Question 21

What does malicious users mean?P489

Answer 21

The damaging activity on your network can come from both inside and outside the network.

Question 22

Services that are not required to be running on a system should be what?P488

Answer 22

disabled