IS4560 T&D CH 12

Question 1

• The process of searching for and identifying a session and taking it over in order to interact with the victim’s system. Performed on networks where switches are in play.

Answer 1

Active session hijacking

Question 2

• The process of sniffing network traffic when a switch is involved and splitting the network into different logical collision domains.

Answer 2

Active sniffing

Question 3

• The process of overwhelming a switch with bogus MAC addresses in an attempt to exceed the limitations of a switch.

Answer 3

Address Resolution Protocol (ARP) poisoning

Question 4

• A group of infected systems that are used to collectively attack another system.

Answer 4

Botnet

Question 5

• The act of engaging in crime through the use of a computer or similar type of device.

Answer 5

Collision domain

Question 6

• The memory present on a switch that is used to look up the MAC address to port mappings that are present on a network.

Answer 6

Content addressable memory (CAM)

Question 7

• A failure response resulting in open and unrestricted access or communication.

Answer 7

Fail-open

Question 8

• A simple device that connects networks; it possesses no intelligence, so broadcasts received on one port are transmitted to all ports.

Answer 8

Hub

Question 9

• A logical construct in memory that allows a switch to locate which MAC address is located on which port on the switch.

Answer 9

Lookup table

Question 10

• The process of locating and identifying a session and taking it over, but instead of interacting with the victim the attacker just observes.
  Performed on networks in which a hub is present.

Answer 10

Passive session hijacking

Question 11

• The process of sniffing on a network that has a hub. It does not transmit data on the network and is therefore hard to detect.

Answer 11

Passive sniffing

Question 12

• The process of locating and identifying a session and taking it over.

Answer 12

Session hijacking

Question 13

• A device used to break a network into logical network segments known as collision domains.

Answer 13

Switch

Question 14

• An effort to break something such as a password by using all possible combinations of characters until a combination works.

Answer 14

Brute-force attack

Question 15

• A special mode that a network card can be switched to that will allow the card to observe all traffic that passes by on the network, not just the traffic addressed to the specific network card.

Answer 15

Promiscuous mode