Deck C Prt. 1

Question 1

ARP Spoofing Attack

Answer 1

To Identify an ARP Spoofing Attack in Absence of a VPN, you need to check your ARP Table and see if there is one IP Address with two different MAC Addresses. An Address that has been duplicated will show up as sending Traffic from Two Different Sources Simultaneously

Question 2

Black Box Pen Test

Answer 2

During Test you Attempt to Pass IRC Traffic over port 80 TCP From a compromised web Enabled host. the Traffic gets blocked; however outbound Application Firewall is used for Inspecting outbound Traffic when the HTTP traffic is flowing Unimpeded.

Question 3

Censys

Answer 3

Is a public Search engine and Data Processing Company. Censys can Detect Specific Vulnerable Devices and networks. It then Creates Statistical Reports on broad usage patterns and trends. Censys can be used as an Information Gathering Tool to Collect Information About the IoT devices connected to a Network, Open p orts and Services
, and the attack surface area. Using this Tool, you can generate statistical Reports on Broad Usage Patterns and Trends.

Question 4

CA (Certificate Authority)

Answer 4

Is the Service in PKI that will Vouch for the Identity of an Individual or Company

Question 5

Credentialed Vulnerability Assessment

Answer 5

Is a Detailed Assessment that FINDS the Details of vulnerabilities and compromises through user Directories, Registries, and other system parameters’, Native configuration tables, incorrect Registry or File permissions, and software Configuration errors.

Question 6

Cross Site Request Forgery (XSRF)

Answer 6

Is a Web Browser Vulnerability in which the Hacker Conducts the Transaction from the User Account without his consent. This happens when the user Inadvertently Clicks on a Malicious link.

Question 7

Cross Site Scripting (XSS)

Answer 7

Is the web Application Attack where the Attackers Exploit Vulnerabilities in Dynamically Generated Web Pages to Inject Client-Side Script into Web Pages Viewed by other Users. The Hackers Steal the cookies from the victims Machine

Question 8

DNS Cache Snooping

Answer 8

DHCP Cache Snooping is an Enumeration Technique in which the hacker queries the DNS Server for a Specific Cached DNS Record and Determines the Sites Recently Visited by the Organization’s User. DNS Cache snopping is when someone queries a DNS Server in order to find out (snoop) if the DNS server has a Specific DNS Record Cached, and thereby deduce if the DNS Server Owner (or Its Users) have recently visited a specific site.

Question 9

DNS Hijacking

Answer 9

Is a Type of Cyber Attack in which DNS Queries are manipulated in order to redirect users to Malicious Sites.

Question 10

DNS Cache Snooping

Answer 10

Is A Process of Determining if the Specified Resources Address is Present in the DNS Cache Records. It may be useful during the examination of the Network to Determine what software update Resources are used, thus Discovering what software is Installed.

Question 11

DNSSEC

Answer 11

Can be Used to Mitigate DNS Cache Poisoning. DNSSEC also lowers the threat to you Domain name Server from DNS Cache Poisoning Attacks. Adjusting the TTL of you DNS Caching servers will certainly help with any DNS Cache poisoning issues.

Question 12

Dark Web Footprinting

Answer 12

Uses a set of Specialized Tools or Search Engines to Encrypt Hackers Browsing Activity and Navigate Anonymously to obtain sensitive/Hidden Information about Official Government or Federal Databases. The Anonymity of the Dark Web Makes it an Attractive Technology for Illegal Purposes.

Question 13

Evil Twin

Answer 13

Is a Fraudulent Wi-Fi Access point that appears to be Legitimate but is set up to Eavesdrop on Wireless Communications. The Evil Twin is the Wireless LAN Equivalent of the Phishing Scam. In Evil Twin the Attacker Utilizes a Wi-Fi Pineapple to run an access point with a Legitimate Looking SSID for a nearby Business to Capture the Wireless Password.

Question 14

Five Tier Container Technology Architecture

Answer 14

Consists of 5 TIERS. Tier 1: Developer Machines-Image creation, testing and Accreditation, Tier 2: Testing and Accreditation systems-verification and validation of image contents, signing images and sending them to the registries. Tier 3: Registries- Storing images and disseminating Images to the orchestrators based on requests. Tier 4: Orchestrators- Transforming images into Containers and deploying Container to Hosts. Tier 5: Hosts- Operating and Managing Containers as Instructed by the orchestrator

Question 15

Gray Hat

Answer 15

is a Class of Hacker that Refers to an Individual who works BOTH Offensively and Defensively at Various Times.

Question 16

Guardster

Answer 16

Is an Anonymizer That mask you Real IP Address and Ensures complete and Continuous Anonymity for all online Activities.

Question 17

Honeypot

Answer 17

Creates an Appealing Isolated Environment for Hackers to prevent them from compromising Critical Systems While simultaneously gathering Information about the Hacker.

Question 18

Hping

Answer 18

Is a Tool that could be Used to get a Response from a Host Using TCP, If a Tester is Attempting to Ping a Target that exists but receives no Response or a Response that States the Destination is Unreachable.

Question 19

Inference Based Assessment

Answer 19

Is the Approach to an Assessment Which Depends on the Inventory of Protocols in an Environment to detect which ports are attached to services such as an Email Server, a Web Server, or a Database server

Question 20

Initial Intrusion

Answer 20

Is the Phase of APT Lifecycle in which the Hacker Attempts to enter the Target Network using Techniques such as Sending Spear Phishing Emails & Exploiting Vulnerabilities on Publicly available Servers and then Deploying Malware on the Target system to establish Outbound Connections.

Question 21

Invasion Of Privacy

Answer 21

From a Legal Standpoint, Not informing the Employees That they are Going to be monitored could be an Invasion of Privacy.

Question 22

Jamming & Scrambling Attacks

Answer 22

The Best Countermeasure Against the Jamming Attacks is to Implement Cognitive Radios in the Physical Layer. A Scrambling Attack is a Form of Intentional Physical Jamming Attack. A Scrambling Attack Attempts to DISRUPT Specific Intervals, such as a Control Channel.

Question 23

John The Ripper

Answer 23

Is a Technical Assessment Tool Used to Test the Weakness of Passwords

Question 24

LDAP

Answer 24

Is Lightweight Directory Access Protocol. LDAP (Port TCP 389) is not Secure or Encrypted and you must chat it to 636 which is LDAPS or SLDAP (Uses SSL or TLS)

Question 25

LNMIB2.MIB

Answer 25

Contains Object Types for Workstation and Server Services. MIB Stands for Management Information Base. It is a Database used by SNMP.