common attacks

Question 1

What is a denial of service attack?

Answer 1

An attack that prevents the system from receiving, processing, or responding to legitimate traffic or requests for resources and objects

Question 2

What is a DDoS attack?

Answer 2

distributed denial of service - An attacker recruits zombie systems ahead of time to simultaneously release a flood of traffic at a specific target.

Question 3

what is a bot

Answer 3

a machine that is infected used in attacks

Question 4

what is a botnet

Answer 4

a group of bots

Question 5

What is an on-path attack?

Answer 5

Formerly known as man-in-the-middle, on path attacks are when your traffic is redirected through a malicious party before being sent to it’s destination

Question 6

arp spoofing

Answer 6

an on path attack that changed stored mac address to the attacking devices mac address
this cause all traffic to flow through the attacking device

Question 7

DNS poisoning

Answer 7

changes the DNS records on a system to point to false servers where the data is recorded

Question 8

VLAN hopping

Answer 8

• You only have access to your VLAN
• Good security best practice
• “Hop” to another VLAN - this shouldn’t happen
• Two primary methods
• Switch spoofing and double tagging

Question 9

What is Switch Spoofing?

Answer 9

takes advantage of an incorrectly configured trunk port, enabling attackers to send traffic on any vlan from that port.

Question 10

What is Double-Tagging?

Answer 10

A method by which the attacker tries to reach a different VLAN using the vulnerabilities in the trunk port configuration by first making note of the native VLAN configured on the trunk link connected to the switch ports

Question 11

what is spoofing

Answer 11

pretending to be something you arnt

Question 12

how to disable a rogue dhcp

Answer 12

enable dhcp snooping on your switch

Question 13

Explain the implications of a wireless evil twin?

Answer 13

An on path, wireless attack that basically uses the evil twin as a proxy for traffic viewing everything that happening / phishing for information.

Question 14

what is malware

Answer 14

bad software used to harm you or your data

Question 15

What is password hashing?

Answer 15

generating hashes for different passphrases and comparing them to the hash of the password you’re trying to crack for a match. knowing the hash means knowing the password.

Question 16

what is a hashing a password

Answer 16

take a plaintext password and converts it to a random string this process isn’t reversable

Question 17

what is a brute force

Answer 17

trying every possible password combination

Question 18

What is a dictionary attack?

Answer 18

Using a dictionary to create hashes of common words and then look for those hashes in your password list to see if there are matches

Question 19

What is a De-authentication attack (wireless)?

Answer 19

Sending 802.11 management frames to an access point on a network to de-authenticate a device on that network / access point. 802.11 has addressed this problem by encrypting the important management frames.