Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

YEAR 2 > CMP 210 - Penetration Testing > Flashcards

CMP 210 - Penetration Testing Flashcards

1
Q

What is the purpose of Footprinting?

A

To gather information essential to an attack and enable an attacker to complete a profile of an organisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Name a physical method of Footprinting

A

Dumpster Diving
Freedom of Information Act
Social Engineering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Name online based techniques of Footprinting

A

Browsing Anonymously using proxies
DNS Recon
Finding the mail server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Name web based tools of Footprinting

A

Advanced Google Search
Shodan - Google but for IP address activity
GreyNoise - Finds people who are trying to scan the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the 4 step Methodology of Penetration Testing

A

Footprinting
Scanning
Enumeration
System Hacking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are some things we attempt to discover about our target?

A

Is our targets computer on?
What is the OS?
What is the version of the OS?
Is there a firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which is connection oriented, TCP or UDP?

A

TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which is a connectionless protocol, TCP or UDP?

A

UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

When it comes to protocols, which is most like a letter and which is most like a phone?

TCP - ?
UDP -?

A

TCP - Phone
UDP - Letter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

List 2 application protocols

A

HTTPs
SSH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What protocol is the ping utility apart of?

A

ICMP

Internet Control Message Protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How does pinging a target verify a host is active?

A

Sends an ICMP echo request packet to the host.

If the host is active, it responds by echoing the packet back.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What layer in the OSI Model is the ping utility conducted at?

A

Layer 3 - Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does OSI stand for

A

Open Systems Interconnection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the OSI Model

A

A model which represents how network communications work.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the 7 layers in the OSI model?

A

PDNTSPA

  1. Physical Layer
  2. Data Link Layer
  3. Network Layer
  4. Transport Layer
  5. Session Layer
  6. Presentation Layer
  7. Application Layer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is another name for a ping scan?

A

ICMP sweep

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What type of scans are often blocked by firewalls.

A

Ping Scans

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the main restriction with ARP scans?

A

Can only perform then on your local network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which layer in the OSI Model are ARP scans conducted at?

A

Layer 2 - Data Link

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Define how you know if a port is open

A

If the machine has a networked service running

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is a network service

A

connects users in working offices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is on port 80

A

HTTP (HyperText Transfer Protocl)

24
Q

What is on port 21

A

FTP (File Transfer Protocl)

25
What is on Port 23
SMTP (Simple Mail Transfer Protocol)
26
What is on Port 53.
DNS (Domain Name System) *UDP*
27
What is on Port 135 / 445
"Windows Networking"
28
What does the U / URG Flag mean?
Urgent
29
What does the A / ACK Flag mean?
Acknowledgement number valid
30
What does the P / PSH Flag mean?
Push
31
What does the R/RST Flag mean?
Reset Connection Flag
32
What does the S/SYN qFlag mean?
Synchronize sequence number flag
33
What is the 3 Way Connection Procedure in terms of TCP
SYN SYN/ACK ACK
34
What does the F/FIN Flag mean?
End of data flag.
35
How are ISNs used? (Initial Sequence Numbers)
Sequence number will be a large random number Acknowledgement will be the large number + 1
36
Is acknowledgement is required for a data transfer process to continue in TCP?
Yes
37
Is acknowledgement is required for a data transfer process to continue in UDP?
no
38
What is TCP windowing and why does it exist?
There is a receipt for every piece of data transfer, so sending packets individually leads to low throughput. Therefore windowing sends numerous packets each time instead of one. It is part of the TCP header.
39
Can you change TCP window size during a data transfer?
Yes they are variable
40
What does a window size of 3 mean?
Sending 3 packets at once, 1 ACK back.
41
Describe the TCP process of closing a connection
FIN FIN/ACK ACK
42
What is the 3 purposes of port scanning?
Look for open ports, and hence running services Look for closed ports Look for firewalled ports Gives us more information about what we are dealing with.
43
What are the 3 easiest/most common scans?
TCP Connect Scan SYN Connect Scan Fin Connect Scan
44
Describe the TCP Connect Scan
SYN SYN/ACK ACK
45
Describe the SYN Connect Scan
SYN SYN/ACK
46
Describe the Fin Connect Scan
FIN
47
If the port is closed on a TCP connect scan, what is the response?
SYN RST
48
If the port is open on a TCP connect scan, what is the response?
SYN SYN ACK ACK
49
If the port is open on a SYN scan, what is the response?
SYN SYN ACK
50
If the port is closed on a SYN scan, what is the response?
SYN RST
51
If the port is closed on a FIN scan, what is the response?
FIN RST
51
If the port is open on a FIN scan, what is the response?
FIN No response
52
When scanning a port, if nothing comes back, what does that mean?
Firewall is in place.
53
If the port is open on a UDP port scan, what is the response?
No response
54
If the port is closed on a UDP port scan, what is the response?
"Unreachable" (ICMP)

YEAR 2 (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions