IS4560 T&D CHAPTER 7

Question 1

____ is - A device left behind on a system by an attacker with the purpose of allowing the attacker to reenter the system later. Also defined as an entry point on a system that an attacker uses to gain entry to a system. Backdoors typically provide a means of gaining entry into a system without having to go through normal security checks and systems.

Answer 1

Backdoor

Question 2

____ is - The process of probing services, systems, and applications with the goal of discov- ering detailed information that can be used to attack a target system. Enumeration has the ability to reveal user accounts, passwords, group names, and other information about a target.

Answer 2

Enumeration

Question 3

____ is - Software designed to capture the keystrokes of the user and then be retrieved by an attacker later on.

Answer 3

Keylogger

Question 4

____ is - A feature present in Windows operating systems used to connect to a system remotely. The feature has the ability to reveal usernames and share information on a target system.

Answer 4

NULL session

Question 5

____ is - The activity of obtaining a password by using methods designed to determine the password or capture the password.

Answer 5

Password cracking

Question 6

____ is - The process of increasing privileges above what one would otherwise possess with a user account. The process is performed by cracking the password of an existing account or by changing the password of an account that already has access.

Answer 6

Privilege escalation

Question 7

____ is - A type of attack targeted toward passwords in which every combination of charac- ters is hashed and then compared a hashed password later.

Answer 7

Rainbow table

Question 8

____ is - A piece of software placed on a system to do any number of tasks on behalf of an attacker. Rootkits have the ability to hand control of a system over to an attacker at a very fundamental level.

Answer 8

Rootkit

Question 9

____ is - The part of the Windows operating system that holds user account and associated passwords in a hashed format.

Answer 9

Security Account Manager (SAM)

Question 10

____ is - A protocol used to manage network devices.

Answer 10

Simple Network Management Protocol (SNMP)

Question 11

____ is - Software designed to track or observe the usage of a computer system. Refers to a class of software that is designed to hide and observe the actions of a victim. Software of this type can intercept information for purposes of identity theft, financial gain or other information.

Answer 11

Spyware

Question 12

____ is - A language used to interact with databases. Using SQL it is possible to access, manipulate and change data in databases to differing degrees.

Answer 12

Structured Query Language (SQL)

Question 13

____ is - A piece of software that infects a system and can perform any action such as corrupting data or system files to formatting drives.

Answer 13

Virus