Chapter 5 - Networking And Server Attacks

Question 1

2 types of networking-based attacks

Answer 1

1) interception attacks

2) poisoning attacks

Question 2

3 of the most common interception attacks

Answer 2

1) Man-in-the-Middle (MITM)
2) Man-in-the-Browser (MITB)
3) Replay

Question 3

Man-in-the-Middle (MITM)

Answer 3

An attack that intercepts legitimate communication and forges a fictitious response to the sender.

Question 4

Man-in-the-Browser

Answer 4

An attack that intercepts communication between a browser and the underlying computer.

Question 5

Replay attack

Answer 5

An attack that makes a copy of the transmission before sending it to the recipient.

Question 6

ARP poisoning

Answer 6

An attack that corrupts the ARP cache.

Question 7

MAC spoofing

Answer 7

Imitating another computer by means of changing the MAC address.

Question 8

DNS poinsoning

Answer 8

An attack that substitutes DNS addresses so that the computer is automatically redirected to an attackers device.

Question 9

Some types of server attacks

Answer 9

1) Denial of service
2) Web server application attacks
3) Hijacking
4) Overflow attacks
5) Advertising attacks
6) Exploiting browser vulnerabilities

Question 10

Denial of service (DoS)

Answer 10

An attack that attempts to prevent a system from performing its normal functions by overwhelming the system with requests.

Question 11

Distributed denial of service (DDoS)

Answer 11

An attack that uses many computers to perform a DoS attack.

Question 12

2 types of web server application attacks

Answer 12

1) cross-site attacks

2) injection attacks

Question 13

2 types of cross-site attacks

Answer 13

1) cross-site scripting (XSS)

2) cross-site request forgery (XSRF)

Question 14

Cross-site scripting (XSS)

Answer 14

An attack that objects scripts into a web application server to direct attacks at client.

Question 15

Cross-site request forgery (XSRF)

Answer 15

An attack that uses the users web browser settings to impersonate that user.

Question 16

Injection attack

Answer 16

An attack that introduces new input to exploit a vulnerability.

Question 17

Session hijacking

Answer 17

An attack in which an attacker attempts to impersonate the user by using the users session token.

Question 18

Domain hijacking

Answer 18

An attack that occurs when a domain pointer that links a domain name to a specific web server is changed.

Question 19

Clickjacking

Answer 19

Hijacking a mouse click.

Question 20

Buffer overflow attack

Answer 20

An attack that occurs when a process attempts to store data in RAM beyond the boundaries of a fixed-length storage buffer.

Question 21

Integer overflow attack

Answer 21

An attack that occurs when an attacker changes the value of a variable to something outside the range that the programmer had intended by using an integer overflow.