Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

YEAR 2 > CMP 210 - Penetration Testing > Flashcards

CMP 210 - Penetration Testing Flashcards

1
Q

What is the purpose of Footprinting?

A

To gather information essential to an attack and enable an attacker to complete a profile of an organisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Name a physical method of Footprinting

A

Dumpster Diving
Freedom of Information Act
Social Engineering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Name online based techniques of Footprinting

A

Browsing Anonymously using proxies
DNS Recon
Finding the mail server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Name web based tools of Footprinting

A

Advanced Google Search
Shodan - Google but for IP address activity
GreyNoise - Finds people who are trying to scan the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the 4 step Methodology of Penetration Testing

A

Footprinting
Scanning
Enumeration
System Hacking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are some things we attempt to discover about our target?

A

Is our targets computer on?
What is the OS?
What is the version of the OS?
Is there a firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which is connection oriented, TCP or UDP?

A

TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which is a connectionless protocol, TCP or UDP?

A

UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When it comes to protocols, which is most like a letter and which is most like a phone?

TCP - ?
UDP -?

A

TCP - Phone
UDP - Letter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

List 2 application protocols

A

HTTPs
SSH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What protocol is the ping utility apart of?

A

ICMP

Internet Control Message Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How does pinging a target verify a host is active?

A

Sends an ICMP echo request packet to the host.

If the host is active, it responds by echoing the packet back.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What layer in the OSI Model is the ping utility conducted at?

A

Layer 3 - Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does OSI stand for

A

Open Systems Interconnection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the OSI Model

A

A model which represents how network communications work.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the 7 layers in the OSI model?

A

PDNTSPA

  1. Physical Layer
  2. Data Link Layer
  3. Network Layer
  4. Transport Layer
  5. Session Layer
  6. Presentation Layer
  7. Application Layer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is another name for a ping scan?

A

ICMP sweep

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What type of scans are often blocked by firewalls.

A

Ping Scans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the main restriction with ARP scans?

A

Can only perform then on your local network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which layer in the OSI Model are ARP scans conducted at?

A

Layer 2 - Data Link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Define how you know if a port is open

A

If the machine has a networked service running

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is a network service

A

connects users in working offices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is on port 80

A

HTTP (HyperText Transfer Protocl)

24
Q

What is on port 21

A

FTP (File Transfer Protocl)

25
Q

What is on Port 23

A

SMTP (Simple Mail Transfer Protocol)

26
Q

What is on Port 53.

A

DNS (Domain Name System) UDP

27
Q

What is on Port 135 / 445

A

“Windows Networking”

28
Q

What does the U / URG Flag mean?

A

Urgent

29
Q

What does the A / ACK Flag mean?

A

Acknowledgement number valid

30
Q

What does the P / PSH Flag mean?

A

Push

31
Q

What does the R/RST Flag mean?

A

Reset Connection Flag

32
Q

What does the S/SYN qFlag mean?

A

Synchronize sequence number flag

33
Q

What is the 3 Way Connection Procedure in terms of TCP

A

SYN
SYN/ACK
ACK

34
Q

What does the F/FIN Flag mean?

A

End of data flag.

35
Q

How are ISNs used? (Initial Sequence Numbers)

A

Sequence number will be a large random number
Acknowledgement will be the large number + 1

36
Q

Is acknowledgement is required for a data transfer process to continue in TCP?

A

Yes

37
Q

Is acknowledgement is required for a data transfer process to continue in UDP?

A

no

38
Q

What is TCP windowing and why does it exist?

A

There is a receipt for every piece of data transfer, so sending packets individually leads to low throughput.

Therefore windowing sends numerous packets each time instead of one.

It is part of the TCP header.

39
Q

Can you change TCP window size during a data transfer?

A

Yes they are variable

40
Q

What does a window size of 3 mean?

A

Sending 3 packets at once, 1 ACK back.

41
Q

Describe the TCP process of closing a connection

A

FIN
FIN/ACK
ACK

42
Q

What is the 3 purposes of port scanning?

A

Look for open ports, and hence running services
Look for closed ports
Look for firewalled ports

Gives us more information about what we are dealing with.

43
Q

What are the 3 easiest/most common scans?

A

TCP Connect Scan
SYN Connect Scan
Fin Connect Scan

44
Q

Describe the TCP Connect Scan

A

SYN
SYN/ACK
ACK

45
Q

Describe the SYN Connect Scan

A

SYN
SYN/ACK

46
Q

Describe the Fin Connect Scan

A

FIN

47
Q

If the port is closed on a TCP connect scan, what is the response?

A

SYN

RST

48
Q

If the port is open on a TCP connect scan, what is the response?

A

SYN

SYN ACK

ACK

49
Q

If the port is open on a SYN scan, what is the response?

A

SYN

SYN ACK

50
Q

If the port is closed on a SYN scan, what is the response?

A

SYN

RST

51
Q

If the port is closed on a FIN scan, what is the response?

A

FIN

RST

51
Q

If the port is open on a FIN scan, what is the response?

A

FIN

No response

52
Q

When scanning a port, if nothing comes back, what does that mean?

A

Firewall is in place.

53
Q

If the port is open on a UDP port scan, what is the response?

A

No response

54
Q

If the port is closed on a UDP port scan, what is the response?

A

“Unreachable” (ICMP)

YEAR 2 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions